fix(node): refuse a p2p identity key owned by another user - #335

Closed

beardthelion wants to merge 14 commits into

fix/p2p-keypair-derivationfrom

fix/p2p-key-ownership

Commits on Aug 14, 2026

feat(node): add a persistent libp2p identity key file
beardthelion
committed
15d81c5
fix(node): load the libp2p identity from the persistent key file
beardthelion
committed
f75b0f4
fix(node): create the p2p key with 0600 at creation and reject a loose one
beardthelion
committed
532ffc7
fix(node): publish the p2p key atomically and pin its directory
beardthelion
committed
f7fcd5e
style(node): comma instead of a dash in the key-load warning
beardthelion
committed
2a69a0b
fix(node): require the p2p key path to name a directory
beardthelion
committed
31b1176
test(node): run the key-permission probe in its own process
beardthelion
committed
806c262
docs(node): scope the p2p key permission claim and note the rotation
beardthelion
committed
77331ac
fix(review): close a `..` escape from the p2p key-path check
beardthelion
committed
1948d3d
fix(review): reject `..` in an absolute p2p key path too
beardthelion
committed
f29235d
fix(node): scrub the serialized p2p private key from memory
beardthelion
committed
3a29648
fix(node): refuse a p2p key or key directory owned by another user
beardthelion
committed
6dde36b
fix(review): close the ancestor path and the stat/read window
beardthelion
committed
5a93f24
test(node): make the ownership guards actually observable
beardthelion
committed
66fb3ff