3 commits

Author	SHA1	Message	Date
mrwulf	aff1c32fc5	notebooks + README: wire the teaching stack to the newest edge ... Audit: are the zero-to-hero notebooks current and macOS-runnable, and does the README present the new teaching surfaces and CLI well? Verified by execution: all 14 notebooks run headlessly cell-by-cell, offline, pure-Python (zero shell magics), degrading gracefully where Lean/built binaries are absent — before AND after these edits. That is also the macOS answer: no GNU userland is touched by any cell. Gaps found and closed: - README's notebook list stopped at 10; notebook 11 (the customer's eye view) now listed. - No notebook knew the cockpit era existed. Three pointer cells added: 00 (course map: the three-track teaching stack — notebooks = code track, lab manual = role track, guide = reference), 10 (see the wallet you built through the cockpit; --demo and --wallet forms), 11 (the Inspect instrument is this notebook's recomputation, живой). - README: cockpit command block now shows --demo, --wallet, --port/ --host variants; curriculum section names the teaching stack and the notebooks' offline/runnable contract. Suite 144 green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 18:15:57 +02:00
mrwulf	65772b3d2e	warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs ... Tier 2: - request_signature decomposed into named gates (latch, freshness, intent, policy, signer, firewall) - ledger: O(1) tail-read appends under a dedicated lock file (survives rotation rename); hash-chained segment rotation at policy ledger.rotate_at; verify-ledger walks all segments to genesis; archive tampering detected (tested) - docs/threat-model.md (attacker matrix 1-9, proven-vs-trusted, design invariants) + docs/runbook-latch.md (diagnose-first recovery) - lecture 10: executable corrupt-a-member exercise (capsule pin catches one appended byte), honest note on what the pin does NOT stop Lightweight policy engine (POLICY_DENIED wired): - policy.json: per-request/per-day amount ceilings, counterparty allow/deny lists, per-identity overrides; rules make their intent fields mandatory; daily sums from the ledger - Agent UX: - signed refusal receipts travel inside MCP errors (receipt + receipt_path in structuredContent) - airgap over MCP: request_signature signer=airgap + request_id, new airgap_pending tool; park -> list -> device answers -> complete (tested end-to-end) - all 8 tools carry readOnly/destructive annotations - sliding-window rate limiter per tool class (custody/verify/liveness); RATE_LIMITED refusal code; surface control, not ledgered warden-treasury LIVE: - treasury.py: stdlib base58, compact-u16, legacy+v0 wire parsing; every required signature quorum-verified over exact message bytes; completeness gap named in every verdict; RPC fetch uses response as bytes only - - live-quorum test: synthetic Solana tx signed with wallet key -> authentic via 4 proven forks; flipped byte -> not authentic 100 tests green (was 85). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-07 13:38:42 +02:00
mrwulf	ba47aa435d	warden docs + study material: WALLET.md, products lineup, llms.txt, lecture 10 ... - WALLET.md: the product manual (one idea, trust posture table, R4 gate, quickstart, MCP surface, self-proving card, firewall, taxonomy) - docs/products.md: four production-ready deployment profiles (solo/airgap/treasury/choir) with honest built-vs-wired boundaries - llms.txt: agent-native discovery manifest at repo root - README: warden intro + lecture 10 pointer - notebooks/10_verified_custody_wallet.ipynb: ratchet-rule lecture (toy 3-of-3 -> real four proven forks -> counterparty recomputes a card's inclusion proof); course README + notebook test updated - 83 tests green Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-06 23:46:27 +02:00