docs: sealed-motion Mind key path is /var/lib/mind-<persona>; register only after a Persona-shell self-test #32
2026-11-12
Docs: the sealed-motion key self-test signs a real commit envelope in the production domain
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: name the self-test domain tag gamecult.sealed_key_selftest.v0
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: key mode (script writes 0400, signer accepts 0400 or 0600) and self-test message wording
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: sealed-motion Mind key lives at /var/lib/mind-<persona>, registered only after a Persona-shell self-test
The /etc/gamecult/minds path is not visible to Persona shells. The settled path is /var/lib/mind-<persona>/sealed-motion.key, 0400, owned by mind-<persona>, which is also the signer. A key is registered only after the Persona shell signs a throwaway envelope that verifies against the printed public half (gamecult-ops scripts/verify-sealed-motion-key.sh). Docs only; tools/sealed-motion-sign.mjs names no path. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>