Files
SeedPass/docs
thePR0M3TH3ANandClaude Opus 5 3192c9f306 Offer a 24-word master seed, and put the entropy draw beyond reach of any handler
L2: generate_bip85_seed and create_profile_from_generated_seed now take
words_num, accepting 12 or 24 and rejecting anything else with a clear
message. The default stays 12 -- every existing profile uses it, 128 bits is
entirely adequate, and moving the default would change nothing about
existing vaults while surprising anyone creating a new one. 24 is offered
because the master seed protects the whole vault and was the one secret
shorter than the seeds derived beneath it, which already default to 24.

L3: fixed structurally rather than by narrowing exception types.
os.urandom(32) now sits OUTSIDE the try block, so no handler can stand
between the entropy draw and the caller -- an entropy failure is unreachable
by anything that could substitute a value. Also removes a redundant
`except Exception` whose body was identical to the `Bip85Error` branch above
it.

The structural form is stronger than an exception list, and the test says so
precisely: it asserts the OSError reaching the caller is the SAME OBJECT
os.urandom threw, which holds only if nothing caught and repackaged it.
Listing exception types would still leave a handler in the path for someone
to widen later.

Adds five tests: the identity assertion above, 12- and 24-word generation,
the default staying 12, and rejection of 0/11/18/25/-12.

Determinism gate green (89 tests, up from 84). The seed/profile regression
subset is 143 passed with one failure --
test_profile_export_import_round_trip -- confirmed against the pre-change
baseline as pre-existing.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01HtNMsKzzFTPURemX7tT19u
2026-07-31 17:43:24 -04:00
..
2025-07-10 19:37:30 -04:00
2025-07-10 19:37:30 -04:00
2025-07-10 19:37:30 -04:00
2025-08-03 10:27:13 -04:00
2026-02-25 18:07:22 -05:00

SeedPass Docs

This directory contains SeedPass project documentation.

Start Here

  • dev_control_center.md (single source to decide what to do next)

Agent and Autonomy Docs

  • agent_autonomy_security_plan.md
  • policy_as_code.md
  • sync_conflict_contract.md

Core Security Docs

  • security_readiness_checklist.md
  • threat_model.md
  • crypto_key_management_review.md
  • secret_handling_local_exposure_review.md
  • auth_lock_unlock_access_review.md
  • supply_chain_release_integrity.md
  • release_verification_runbook.md
  • release_protection_policy.md
  • operational_runbooks.md
  • staged_rollout_runbook.md

Architecture and Product Docs

  • ARCHITECTURE.md
  • SPEC.md
  • typescript_web_extension_port_plan.md
  • entry_types.md
  • entry_graph.md
  • tui_v3_plan.md (active roadmap for scratch rebuild)
  • tui_v2_plan.md (legacy logic reference)
  • tui_v2_parity_checklist.md
  • tui_v2_parity_backlog.md
  • tui_v2_legacy_parity_matrix.md
  • tui_v2_ui_refresh_plan.md
  • semantic_vector_index_plan.md
  • tui_v2_cutover_decision.md
  • tui_v2_large_vault_validation.md
  • security.md
  • nostr_setup.md
  • nostr_namespace_reset.md
  • packaging.md

QA and Testing Docs

  • TEST_INVENTORY.md (central index of all tests and runners)
  • agent_testing_roadmap.md
  • ai_agent_tui_testing.md
  • agent_test_format.md
  • installer_testing.md
  • kb_scale_validation.md
  • ci-health-2026-02-19.md
  • agent-handoffs/README.md

Discoverability Commands

  • seedpass --help
  • seedpass
  • seedpass tui2
  • seedpass --legacy-tui
  • seedpass legacy
  • seedpass <group> --help
  • seedpass tui2 --help
  • seedpass tui2 --check
  • seedpass capabilities --format json
  • seedpass agent bootstrap-context