From 89ccb7565439bb93b1f8ba644cd678e754f52d62 Mon Sep 17 00:00:00 2001 From: sneak Date: Fri, 13 Nov 2026 18:43:49 +0000 Subject: [PATCH] RULES.md: state every action that asks for the password (closes #756) Replace the Secrets & Storage line "Password only required for signing operations" with the wording sneak approved: the password is required for signing, deleting a wallet, and showing a recovery phrase or private key. Model: opus-5-5 --- RULES.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/RULES.md b/RULES.md index 5cfc926..db1f34e 100644 --- a/RULES.md +++ b/RULES.md @@ -99,7 +99,8 @@ contradicts either, the originals govern. - [ ] Public data (xpubs, addresses, balances) stored unencrypted - [ ] Private data (recovery phrases, private keys) encrypted at rest -- [ ] Password only required for signing operations +- [ ] Password required for signing, deleting a wallet, and showing a recovery + phrase or private key - [ ] No secrets in `.env`, credentials, or API keys committed to repo - [ ] `git add -A` / `git add .` never used -- 2.54.0