mrwulf dcb48f453e warden cockpit: local read-only custody UI for the human operator ... Operator-ordered milestone, built under an explicit no-risk constraint while the paper application is in flight: strictly ADDITIVE (one new module + one CLI subcommand; zero changes to wallet semantics, the public site, or anything the paper describes), LOCAL-ONLY (never deployed; binds 127.0.0.1), and READ-ONLY in v1 (human approve/deny is deliberately deferred — that is a custody-semantics change belonging to a separately reviewed milestone). New: src/pacta/walletui.py — four views over an existing wallet: - Posture: latch state, ledger head with FULL hash-chain re-verification, pinned quorum members, spending policy verbatim. - Signature queue: airgap outbox/inbox, observed never operated. - Incidents & refusals: verbatim records, newest first. - Receipt inspector: paste attestation + receipt + log key; verdict, per-signature results, and diagnostics come verbatim from transparency.verify_receipt — the deployed verifier itself, reused not reimplemented. Design law, stated in the module and enforced by tests: THE COCKPIT RENDERS EVIDENCE, IT NEVER ASSERTS IT. Every panel recomputes at request time and carries a provenance line (function + timestamp); anything unverifiable renders a loud FAILED-TO-VERIFY panel — no cached green, no neutral gray. Panels state what they do NOT prove (e.g. binary pinning vs source-to-binary correspondence). CLI: pacta wallet cockpit --wallet DIR [--host --port]. Tests (10 new, suite 118 -> 128 green): recomputed-evidence rendering, CHAIN BROKEN on tampered ledger, loud failure on collector error, latched-state rendering, airgap queue states, verbatim incident/refusal rendering, fail-closed inspector on garbage, real-evidence roundtrip (skips if example evidence absent), full-sweep BYTE-LEVEL read-only guarantee (wallet dir hash-identical after all GETs + a POST), and fail-fast on non-wallet dirs. Rendering additionally verified visually against a live demo wallet (posture, quorum table, incidents). Docs: docs/cockpit.md; WALLET.md section; ESTATE.md + llms.txt updated. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-19 18:02:17 +02:00
..
agent-native.md	warden: agent-native field research + design decisions (AX/MCP/A2A/AP2/x402/ERC-8004)	2026-07-06 23:20:56 +02:00
cockpit.md	warden cockpit: local read-only custody UI for the human operator	2026-07-19 18:02:17 +02:00
products.md	warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs	2026-07-07 13:38:42 +02:00
runbook-latch.md	warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs	2026-07-07 13:38:42 +02:00
threat-model.md	warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs	2026-07-07 13:38:42 +02:00
warden-lineup.html	lineup: treasury LIVE, 100 tests	2026-07-07 13:39:27 +02:00