fix(security): implement real TOFU for accept-new host key mode - #241

Merged

inureyes merged 6 commits into

mainfrom

fix/issue-239-tofu-host-key-verification

Jul 30, 2026

Commits on Jul 30, 2026

fix(security): implement real TOFU for accept-new host key mode
inureyes
committed
fix(security): reject alternate-algorithm host keys and fix removal hint
inureyes
committed
fix(security): accept a host key matching any recorded entry
inureyes
committed
fix(security): reject hostnames unrepresentable in known_hosts
inureyes
committed
fix(security): honor known_hosts markers, case, and permission gaps
inureyes
committed
docs: reconcile CHANGELOG and architecture docs with final TOFU state
inureyes
committed