archetech / archon / 36464886910

87%

main: 87%

push

github

fix(keymaster): validate response selectors strictly and reject revoked challenges

Both ports now require an RFC 3339 date-time with an offset for
versionTime, rejecting formats Date.parse or fromisoformat accept and
impossible dates. Python verify_response rejects a missing or revoked
challenge as TypeScript does instead of reporting an empty match. Docs
clarify the second-precision checks and that Python credential updates
do not affect verification (#1300).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

66 of 76 branches covered (86.84%)

Branch coverage included in aggregate %.

12 of 14 relevant lines covered (85.71%)

12.57 hits per line