---
name: "Enforce cryptographic identity verification for Matrix commands"
---

# Story 246: Enforce cryptographic identity verification for Matrix commands

## User Story

As the operator of a Story Kit instance, I want the Matrix bot to always require cryptographic device verification before executing commands, so that a compromised homeserver cannot be used to execute unauthorized commands.

## Acceptance Criteria

- [ ] Bot refuses to process commands from unencrypted rooms
- [ ] Bot always verifies the sending device is cross-signing-verified by a trusted identity before executing any command
- [ ] The require_verified_devices config option is removed — verification is always on with no way to disable it
- [ ] Messages from unverified devices are rejected with a clear log message
- [ ] Existing allowed_users check remains as a first-pass filter before the cryptographic check

## Out of Scope

- TBD
