Harden M9: Ed25519 attestation, full SHA-256 integrity, locked-by-default, prompt improvements, registry verification

2026-07-20 16:50:49 -03:00
parent 04153a4bbd
commit 56cb34276e
34 changed files with 2549 additions and 257 deletions
@@ -0,0 +1,11 @@
+import stat
+
+from cmdforge.signing import initialize_signing_key, load_signing_key
+
+
+def test_signing_key_is_persistent_and_private(tmp_path):
+    path = tmp_path / "release-key.json"
+    created = initialize_signing_key(path)
+    assert load_signing_key(path) == created
+    assert stat.S_IMODE(path.stat().st_mode) == 0o600
+    assert initialize_signing_key(path) == created