dave/storkit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 7 Wiki Activity

story-kit: start 256_story_bot_must_verify_other_users_cross_signing_identity_before_checking_device_verification

Browse Source
This commit is contained in:
Dave
2026-03-17 12:49:40 +00:00
parent 076324c470
commit ec553a5b8a
1 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
.story_kit/work/2_current/256_story_bot_must_verify_other_users_cross_signing_identity_before_checking_device_verification.md Normal file
View File

@@ -0,0 +1,20 @@
---
name: "Bot must verify other users' cross-signing identity before checking device verification"
---
# Story 256: Bot must verify other users' cross-signing identity before checking device verification
## User Story
As a Matrix user messaging the bot, I want the bot to correctly recognize my cross-signing-verified devices, so that my messages are not rejected when I have a valid verified identity.
## Acceptance Criteria
- [ ] The bot's `check_sender_verified` function (or equivalent) verifies the sender's identity trust status, not just individual device verification
- [ ] When @yossarian:crashlabs.io (who has valid cross-signing keys) sends a message in an encrypted room, the bot accepts it instead of rejecting with 'no cross-signing-verified device found'
- [ ] The bot still rejects messages from users who genuinely have no cross-signing setup
- [ ] Existing tests (if any) continue to pass after the change
## Out of Scope
- TBD