Skip to content

feat(security): verify the sender's signature on read - #46

Merged
jpelaez-23blocks merged 1 commit into
mainfrom
feat/verify-signature
Oct 17, 2026
Merged

jpelaez-23blocks merged 1 commit into
mainfrom
feat/verify-signature

Conversation

@jpelaez-23blocks

Copy link
Copy Markdown
Contributor

Protocol 07-security: a receiver verifies the signature against the sender's registered key. Same-machine delivery wrote the file straight into the inbox and nothing ever checked the signature.

  • amp-read / amp-inbox print Signature: VERIFIED | UNVERIFIED | BAD SIGNATURE (and verification in --json).
  • Key = the one registered for exactly that sender address on this machine; a local agent that only shares the first name does not vouch.
  • Mail the AI Maestro server already checked (mesh-forwarded) shows the server's recorded result.
  • verify_signature no longer prints openssl's 'Signature Verified Successfully' to stdout.
  • 9 bats tests.

🤖 Generated with Claude Code

…(VERIFIED / UNVERIFIED / BAD SIGNATURE)

verify_signature no longer prints openssl's success line to stdout.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@jpelaez-23blocks
jpelaez-23blocks merged commit c136927 into main Oct 17, 2026
2 checks passed
@jpelaez-23blocks
jpelaez-23blocks deleted the feat/verify-signature branch October 17, 2026 02:15
@jpelaez-23blocks jpelaez-23blocks mentioned this pull request Oct 17, 2026
jpelaez-23blocks added a commit that referenced this pull request Oct 17, 2026
Version bump for #46 (signature check on read).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Juan Pelaez <juan.pelaez@3metas.com>
Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant