2 commits

Author	SHA1	Message	Date
mrwulf	a7cc3d2a5f	warden re-audit (Fable 5): fix ledger race, quorum perf, small-order honesty ... Correctness: - ledger: single-flight fcntl lock over read-modify-append + fsync. Two concurrent writers previously could fork the hash chain (read same tail, same prev_hash). New test races 8 threads x6 appends; chain stays intact with contiguous indices. - small-order list: the order-8 encodings were hand-typed and unverifiable and diverged from the canonical libsodium blocklist. A BOGUS entry is the only dangerous direction (it down-grades a real tamper to a note, skipping the latch), so the list is now the certain-low-order set only (y in {0,1,-1}, reduced/non-reduced, both sign bits); order-8 edges escalate to tamper until a derived list lands. Fail-safe asymmetry documented + tested. - freshness: removed a tautological . Non-functional: - quorum members now run concurrently (ThreadPoolExecutor): a verify costs one member's latency, not the sum (~17ms for 4 members, live). - Wallet.quorum() memoized per state_dir: binary swap-detection hashes run once at assembly, not on every verify; documented rationale. 85 tests green; live 4-fork wallet re-verified end-to-end. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-07 08:24:51 +02:00
mrwulf	9a9b4ff084	warden tests: quorum taxonomy, wallet firewall/ledger/latch, MCP surface (83 passing) ... - test_quorum: unanimity, semantic-edge vs unexplained/tamper, edge flags, min-members, live 4-fork integration - test_wallet: hash-chained ledger + tamper detection, firewall release, quarantine+latch, unlatch notes, malformed/unbound intent, binary-hash pin, airgap park-then-complete, live R4 init against bundled evidence - test_walletmcp: JSON-RPC plumbing, strict schemas, structured errors, self-proving card shape, live sign+verify roundtrip - examples/wallet-evidence: the 4 live attestations+receipts+log key, bundled so the R4-init showcase runs offline Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-06 23:40:35 +02:00