mirror of
https://github.com/saymrwulf/proof-aware-crypto-tooling-agent.git
synced 2026-09-04 20:03:40 +00:00
mrwulf
65772b3d2e
Tier 2: - request_signature decomposed into named gates (latch, freshness, intent, policy, signer, firewall) - ledger: O(1) tail-read appends under a dedicated lock file (survives rotation rename); hash-chained segment rotation at policy ledger.rotate_at; verify-ledger walks all segments to genesis; archive tampering detected (tested) - docs/threat-model.md (attacker matrix 1-9, proven-vs-trusted, design invariants) + docs/runbook-latch.md (diagnose-first recovery) - lecture 10: executable corrupt-a-member exercise (capsule pin catches one appended byte), honest note on what the pin does NOT stop Lightweight policy engine (POLICY_DENIED wired): - policy.json: per-request/per-day amount ceilings, counterparty allow/deny lists, per-identity overrides; rules make their intent fields mandatory; daily sums from the ledger - Agent UX: - signed refusal receipts travel inside MCP errors (receipt + receipt_path in structuredContent) - airgap over MCP: request_signature signer=airgap + request_id, new airgap_pending tool; park -> list -> device answers -> complete (tested end-to-end) - all 8 tools carry readOnly/destructive annotations - sliding-window rate limiter per tool class (custody/verify/liveness); RATE_LIMITED refusal code; surface control, not ledgered warden-treasury LIVE: - treasury.py: stdlib base58, compact-u16, legacy+v0 wire parsing; every required signature quorum-verified over exact message bytes; completeness gap named in every verdict; RPC fetch uses response as bytes only - - live-quorum test: synthetic Solana tx signed with wallet key -> authentic via 4 proven forks; flipped byte -> not authentic 100 tests green (was 85). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| fixtures/mini-ed25519-verified/verification | ||
| test_agent.py | ||
| test_artifact.py | ||
| test_attestation.py | ||
| test_boundaries.py | ||
| test_claim_cards.py | ||
| test_claim_failures.py | ||
| test_curriculum_notebooks.py | ||
| test_doctor.py | ||
| test_dogfood.py | ||
| test_hygiene.py | ||
| test_lean.py | ||
| test_manifest_parsing.py | ||
| test_profiles.py | ||
| test_provider.py | ||
| test_quorum.py | ||
| test_risk.py | ||
| test_signing.py | ||
| test_sthstore.py | ||
| test_transparency.py | ||
| test_wallet.py | ||
| test_wallet_hardening.py | ||
| test_walletmcp.py | ||
| test_web_and_witness.py | ||