mirror of
https://github.com/saymrwulf/proof-aware-crypto-tooling-agent.git
synced 2026-09-03 19:53:43 +00:00
mrwulf
a7cc3d2a5f
Correctness:
- ledger: single-flight fcntl lock over read-modify-append + fsync. Two
concurrent writers previously could fork the hash chain (read same tail,
same prev_hash). New test races 8 threads x6 appends; chain stays intact
with contiguous indices.
- small-order list: the order-8 encodings were hand-typed and unverifiable
and diverged from the canonical libsodium blocklist. A BOGUS entry is the
only dangerous direction (it down-grades a real tamper to a note, skipping
the latch), so the list is now the certain-low-order set only (y in
{0,1,-1}, reduced/non-reduced, both sign bits); order-8 edges escalate to
tamper until a derived list lands. Fail-safe asymmetry documented + tested.
- freshness: removed a tautological .
Non-functional:
- quorum members now run concurrently (ThreadPoolExecutor): a verify costs
one member's latency, not the sum (~17ms for 4 members, live).
- Wallet.quorum() memoized per state_dir: binary swap-detection hashes run
once at assembly, not on every verify; documented rationale.
85 tests green; live 4-fork wallet re-verified end-to-end.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| profiles | ||
| __init__.py | ||
| __main__.py | ||
| agent.py | ||
| artifact.py | ||
| attestation.py | ||
| audit.py | ||
| claims.py | ||
| cli.py | ||
| config.py | ||
| custodycard.py | ||
| dogfood.py | ||
| lean.py | ||
| logclient.py | ||
| manifest.py | ||
| postquantum.py | ||
| quorum.py | ||
| repo.py | ||
| report.py | ||
| risk.py | ||
| signing.py | ||
| sthstore.py | ||
| transparency.py | ||
| wallet.py | ||
| walletmcp.py | ||
| witness.py | ||
| yamlio.py | ||