feat(auth): guard against accidental mnemonic destruction in keygen
--force now only overwrites the identity entry — it NEVER generates fresh entropy when a mnemonic already exists in the keychain.
To intentionally destroy the mnemonic (irreversible), both flags are required: --force --destroy-mnemonic. Neither alone is sufficient.
Adds 14 tests (I–IV) covering: - mnemonic reuse under --force - blocked destruction without double confirmation - escape hatch requires both flags - fingerprint stability under --force - fingerprint change after --destroy-mnemonic --force - keychain byte-for-byte invariants in both paths
sha256:fb90368bca8f7da71d0276fd34c2da479646b1187d899840efd6f5725334c85e
sha
sha256:44f0a6d4c765a50af146b56c5ef1adc1e554296b70fa238dc83a27202f3039fb
snapshot
0 comments
To add a comment, use the Muse CLI:
muse hub commit comment sha256:fb90368bca8f7da71d0276fd34c2da479646b1187d899840efd6f5725334c85e --body "your comment"
No comments yet. Be the first to start the discussion.