Repository navigation

Fail closed on acceptance keys after #44 REA check (#53) - #54

Draft

FetchDoge wants to merge 22 commits into

mainfrom

launch/53-key-handling

Draft

Fail closed on acceptance keys after #44 REA check (#53)#54
FetchDoge wants to merge 22 commits into
mainfrom
launch/53-key-handling

Commits on Oct 19, 2026
- Fail closed on acceptance keys: whitespace reject, demo flag off (#53)
  
  cursoragent
  and
  FetchDoge
  committed
  e6c9896
- docs: refresh evidence counts for #53 key-handling suite
  
  cursoragent
  and
  FetchDoge
  committed
  c063f8d
- Harden durable demo key files after REA seq 1690 (#53)
  
  cursoragent
  and
  FetchDoge
  committed
  d89a950
- docs: clarify --allow-demo-key durable file posture in server help
  
  cursoragent
  and
  FetchDoge
  committed
  70b0fc6
- Map key-file OSError cleanly; O_NONBLOCK; load durable key once (REA N-b)
  
  cursoragent
  and
  FetchDoge
  committed
  2a1bbfe
- Bind durable acceptance-key commitment via HMAC (REA N-b, droppable)
  
  cursoragent
  and
  FetchDoge
  committed
  e36c22b
- test: never-skip chmod-000 and sudo chown foreign-owner key checks
  
  cursoragent
  and
  FetchDoge
  committed
  730d11b
- fix: refuse foreign-owned demo keys before open
  
  cursoragent
  and
  FetchDoge
  committed
  c7b1ac7
- fix: honour env acceptance key with --db; enforce HMAC at every SqliteLedger
  
  cursoragent
  and
  FetchDoge
  committed
  09b851a
- test: kill demo-key mutants (NOFOLLOW, EXCL, fsync, chmod, map, symlink msg)
  
  cursoragent
  and
  FetchDoge
  committed
  c61011f
- ci: add -rs so pytest prints skip reasons
  
  cursoragent
  and
  FetchDoge
  committed
  7070b63
- ci: keep -rs on suite; print key-file PASSED lines by name
  
  cursoragent
  and
  FetchDoge
  committed
  19b62ce
- fix: durable ledger commitment, exact-32 keys, fchmod mutant (REA 1888)
  
  cursoragent
  and
  FetchDoge
  committed
  6bed5ff
- fix: fail-closed acceptance-key commitment (REA r5 1-4)
  
  cursoragent
  and
  FetchDoge
  committed
  92c5fd6
- fix: persist harness demo key for K1 reopen (REA r5 N-h)
  
  cursoragent
  and
  FetchDoge
  committed
  312e89b
- docs: acceptance-key rebind upgrade path and UTF-8 wording
  
  cursoragent
  and
  FetchDoge
  committed
  a898740
- test: REA r5 commitment bars + expand mutant sweep to 31
  
  cursoragent
  and
  FetchDoge
  committed
  5a4ceef
- docs: update suite count for REA r5 (461 passed)
  
  cursoragent
  and
  FetchDoge
  committed
  61a2018
- test: subprocess durability_harness.py K1 --allow-demo-key exit 0
  
  cursoragent
  and
  FetchDoge
  committed
  7306aab
- chore: point mutant sweep at renamed K1 subprocess test
  
  cursoragent
  and
  FetchDoge
  committed
  83ac6aa
- test: rebind covers 48-byte and token_hex(32) old keys
  
  cursoragent
  and
  FetchDoge
  committed
  90fc583
- docs: suite count 463 for r5 rebind length params
  
  cursoragent
  and
  FetchDoge
  committed
  0de2140

Commits

Commits on Oct 19, 2026