gabriel / muse public
docs dev
AI Agent gabriel · 148 days ago · Apr 25, 2026 · Diff

docs: update security audit with post-Phase-8 completeness findings

Document all remaining gaps discovered during the completeness sweep: - Broken tests (8 in test_agent_id_traversal.py, 4 key_set failures) - BREAKING BUG: sign.py _load_signing called with stale key_path positional arg - Production PEM-load paths in mist.py and hub/_core.py not yet migrated - key_path still in IdentityEntry TypedDict and _dump_identity serialiser - Phase 3 status corrected from COMPLETE to PARTIAL - All deferred deletions from keypair.py and identity.py marked done - Stale doc references catalogued

sha256:1cb432f300b0c2385f603ce835f4c6e011b82b0d8aab61127dd384e01c639632 sha
sha256:91e554b0348decd7e718215e1633ff9e9c38c298a96dbae82b1e1e00077f3498 parent
+15 ~13 −2 symbols
sha256:34552f88cc26dff9dd8bac11d4e6ed9f3542f80c07172aae5189b30a01ed9677 snapshot
+15
symbols added
~13
symbols modified
−2
symbols removed
0
dead code introduced
Semantic Changes 30 symbols
~ docs/key-material-security-audit.md .md 15 symbols added, 2 symbols removed, 13 symbols modified
~ table@L95
~ table@L104
~ table@L123
~ table@L114
~ code@L149
~ table@L201
− table@L271 section table@L271 L271–280
− toml Schema (C4) ✅ COMPLETE section Phase 3 — Remove key_path from identity.toml Schema (C4) ✅ COMPLETE L165–175
+ table@L349 section table@L349 L349–362
+ toml Schema (C4) ⚠️ PARTIAL section Phase 3 — Remove key_path from identity.toml Schema (C4) ⚠️ PARTIAL L166–176
+ Post-Phase-8 Completeness Audit section Post-Phase-8 Completeness Audit L270–345
+ Deleted functions — still referenced function section Deleted functions — still referenced L274–285
+ table@L276 section table@L276 L276–284
+ Docs and comments with stale key_path / PEM content section Docs and comments with stale key_path / PEM content L329–345
+ table@L331 section table@L331 L331–342
+ Test files calling deleted _key_path function function section Test files calling deleted _key_path function L297–303
+ table@L299 section table@L299 L299–302
+ Test files using key_path in identity entries (stale fixture data) section Test files using key_path in identity entries (stale fixture data) L316–329
+ table@L318 section table@L318 L318–328
+ key_path still in production code section key_path still in production code L285–297
+ table@L287 section table@L287 L287–296
+ key_set logic broken — 4 test failures section key_set logic broken — 4 test failures L303–316
+ table@L307 section table@L307 L307–313
~ Key Material Security Audit — Muse + MuseHub
~ Current State — What Exists Today
~ py
~ py
~ Files to Delete (deferred cleanup)
~ Implementation Plan
~ Phase 2 — Derive and Sign in Memory (C1, C2, H1) ✅ COMPLETE
← Older Oldest on dev
All commits
Newer → Latest on dev

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:1cb432f300b0c2385f603ce835f4c6e011b82b0d8aab61127dd384e01c639632 --body "your comment"