Add single-use registration verification
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

This commit is contained in:
tegwick 2026-08-10 12:29:55 +02:00
parent be5aab1297
commit 752d91cf5c
3 changed files with 86 additions and 2 deletions

View file

@ -62,7 +62,11 @@ stable retryable/permanent classifications without leaking SMTP details.
Done 2026-08-09: SQLite idempotency, provider-neutral injection, bounded
STARTTLS SMTP calls, duplicate suppression, and redacted provider-unavailable
responses are implemented. All 22 repository tests pass.
responses are implemented. The same narrow service now issues public-
registration mailbox challenges: plaintext handles exist only in the message,
SQLite retains a SHA-256 digest, evidence is purpose/binding scoped, expiry is
enforced, and consumption is atomic and single-use. All 23 repository tests
pass.
## T03 - Establish custody and deploy the service