sigverify-devnet-test

Overview ¶

Package main implements sigverify-devnet-test, a tool for validating Accumulate protocol security properties on testnet.

This tool validates two critical security properties:

1. SIGNATURE THRESHOLD TESTS: Verify that threshold requirements cannot be bypassed by mixing signatures from different key pages. For example, if Key Page 1 requires 2 signatures, you cannot use 1 signature from Key Page 1 + 1 signature from Key Page 2 to meet the threshold.

2. STAKING AUTHORITY TESTS: Verify that only authorized parties can move tokens from staking accounts. This validates the core security model where users deposit tokens and only the staking system authority can move them.

Usage:

# Build
go build -o /tmp/sigverify-devnet-test ./cmd/sigverify-devnet-test

# Staking authority tests (most important)
/tmp/sigverify-devnet-test staking-setup    # Create test accounts (~3 min)
/tmp/sigverify-devnet-test staking-test     # Run authority tests (~30 sec)

# Signature threshold tests
/tmp/sigverify-devnet-test setup --identity mytest-12345.acme
/tmp/sigverify-devnet-test test --identity mytest-12345.acme

Last Validated: January 2026 Results: All tests PASS - unauthorized parties cannot move tokens

Documentation: docs/testing/devnet-authority-tests.md