4 Commits

Author	SHA1	Message	Date
Aaron D. Lee	fef552b9c1	Fix 3 architectural bottlenecks blocking cross-domain adoption ... Bottleneck 1: ImageHashes generalization - phash and dhash now default to "" (optional), enabling attestation of CSV datasets, sensor logs, documents, and any non-image file - Added ImageHashes.from_file() for arbitrary file attestation (SHA-256 only, no perceptual hashes) - Added ImageHashes.is_image property to check if perceptual matching is meaningful - Added content_type field to AttestationRecord ("image", "document", "data", "audio", "video") — backward compatible, defaults to "image" - from_dict() now tolerates missing phash/dhash fields Bottleneck 2: Lazy path resolution - Converted 5 modules from eager top-level path imports to lazy access via `import soosef.paths as _paths`: config.py, deadman.py, usb_monitor.py, tamper.py, anchors.py - Paths now resolve at use-time, not import-time, so --data-dir and SOOSEF_DATA_DIR overrides propagate correctly to all modules - Enables portable mode (run entirely from USB stick) - Updated deadman enforcement tests for new path access pattern Bottleneck 3: Delivery acknowledgment chain records - New CONTENT_TYPE_DELIVERY_ACK = "soosef/delivery-ack-v1" - ChainStore.append_delivery_ack() records bundle receipt with sender fingerprint and record count - import_attestation_bundle() auto-generates ack when chain store and private key are provided - Enables two-way federation handshakes (art provenance, legal chain of custody, multi-org evidence exchange) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 21:27:15 -04:00
Aaron D. Lee	17147856d1	Fix all 98 ruff lint errors across codebase ... - Remove unused imports (app.py, stego_routes.py, killswitch.py, etc.) - Sort import blocks (I001) - Add missing os import in stego_routes.py (F821) - Rename shadowed Click commands to avoid F811 (status→chain_status, show→chain_show) - Rename uppercase locals R→earth_r, _HAS_QRCODE_READ→_has_qrcode_read (N806) - Suppress false-positive F821 for get_username (closure scope) - Use datetime.UTC alias (UP017) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 18:30:01 -04:00
Aaron D. Lee	5c74a5f4aa	Fix black formatting and target Python 3.12 in CI ... Reformat 8 files and add --target-version py312 to avoid 3.13 AST parsing issues with Python 3.12 container. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 18:26:32 -04:00
Aaron D. Lee	51c9b0a99a	Fix 14 bugs and add features from power-user security audit ... Critical fixes: - Fix admin_delete_user missing current_user_id argument (TypeError on every delete) - Fix self-signed cert OOM: bytes(2130706433) → IPv4Address("127.0.0.1") - Add @login_required to attestation routes (attest, log); verify stays public - Add auth guards to fieldkit (@admin_required on killswitch) and keys blueprints - Fix cleanup_temp_files NameError in generate() route Security hardening: - Unify temp storage to ~/.soosef/temp/ so killswitch purge covers web uploads - Replace Path.unlink() with secure deletion (shred fallback) in temp_storage - Add structured audit log (audit.jsonl) for admin, key, and killswitch actions New features: - Dead man's switch background enforcement thread in serve + check-deadman CLI - Key rotation: soosef keys rotate-identity/rotate-channel with archiving - Batch attestation: soosef attest batch <dir> with progress and error handling - Geofence CLI: set/check/clear commands with config persistence - USB CLI: snapshot/check commands against device whitelist - Verification receipt download (/verify/receipt JSON endpoint + UI button) - IdentityInfo.created_at populated from sidecar meta.json (mtime fallback) Data layer: - ChainStore.get() now O(1) via byte-offset index built during state rebuild - Add federation module (chain, models, serialization, entropy) Includes 45+ new tests across chain, deadman, key rotation, killswitch, and serialization modules. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 17:06:33 -04:00