tests: add deterministic nostr sync failure-mode coverage

docs/dev_control_center.md

@@ -64,8 +64,8 @@ Use these docs as inputs, but treat this file as the decision layer:
 
 ## 4) Recommended Next Steps (Priority Order)
 
-1. Advance Nostr resilience validation with deterministic failure-mode suites (then optional real-relay soak lane).
-2. Update cutover memo to reflect current reality and remaining concrete blockers.
+1. Update cutover memo to reflect current reality and remaining concrete blockers.
+2. Advance Nostr resilience validation with optional real-relay soak lane after deterministic suites.
 3. Finish supply-chain readiness evidence and release-protection policy.
 
 ## 5) Next Slice Definition (Recommended Immediate Work)
@@ -105,6 +105,13 @@ Progress update (2026-03-02):
   - new focused gate `scripts/tui2_coverage_gate.sh` enforces:
     - `src/seedpass/tui_v2/app.py >= 78%`
     - `src/seedpass/core/api.py >= 85%`
+- Nostr deterministic resilience suite expanded:
+  - new tests in `src/tests/test_nostr_resilience_failure_modes.py` cover:
+    - no encrypted data sync attempt
+    - publish-without-event fallback error handling
+    - preservation of relay-provided publish errors
+    - snapshot-missing warning path
+    - snapshot-fetch exception warning path
 
 ## 6) Working Rule
 

docs/security_readiness_checklist.md

@@ -8,7 +8,7 @@ Status legend: `Not Started`, `In Progress`, `Blocked`, `Done`
 | 2 | Crypto and key management review | Done | Security / Core | `docs/crypto_key_management_review.md`, `src/tests/test_kdf_modes.py`, `src/tests/test_export_plaintext_policy.py` |
 | 3 | Secret handling and local data exposure hardening | Done | Core | `docs/secret_handling_local_exposure_review.md`, `src/tests/test_memory_protection.py`, `src/tests/test_clipboard_utils.py`, `src/tests/test_fingerprint_encryption.py`, `src/tests/test_api_new_endpoints.py`, `src/tests/test_bip85_derivation_path.py` |
 | 4 | Backup and restore integrity validation | In Progress | Core / QA | `src/tests/test_account_roundtrip_restore.py`, `src/tests/test_portable_backup.py` |
-| 5 | Nostr sync security and resilience validation | In Progress | Core / QA | `src/tests/test_nostr_real.py`, `src/tests/test_nostr_index_size.py` |
+| 5 | Nostr sync security and resilience validation | In Progress | Core / QA | `src/tests/test_nostr_real.py`, `src/tests/test_nostr_index_size.py`, `src/tests/test_nostr_resilience_failure_modes.py` |
 | 6 | Auth, lock/unlock, and access-control hardening | Done | Core | `docs/auth_lock_unlock_access_review.md`, `src/tests/test_api_new_endpoints.py`, `src/tests/test_vault_lock_flag.py`, `src/tests/test_inactivity_lock.py`, `src/tests/test_unlock_sync.py` |
 | 7 | Testing gates and quality thresholds | In Progress | QA | `scripts/check_critical_coverage.py`, `scripts/tui2_coverage_gate.sh`, CI workflows |
 | 8 | Supply chain and release integrity | In Progress | DevOps | `docs/supply_chain_release_integrity.md`, `.github/workflows/release-integrity.yml`, `scripts/release_integrity.py`, `src/tests/test_release_integrity_utils.py` |