Silas Pruitt
29 lines
1.7 KiB
Markdown
29 lines
1.7 KiB
Markdown
# identity — the gate (OPTIONAL · keep it light)
|
|
|
|
_A way to check it's really your human before disclosing anything private — a **behavioral** check, not a
|
|
password. **Optional, and light by default.** If your agent never touches private things, skip this whole
|
|
strand. Don't build anything elaborate unless you actually want to — most people won't need to._
|
|
|
|
## The whole idea
|
|
A password can be shoulder-surfed or leaked. A short, natural question about shared history can't be faked by
|
|
someone who isn't your human — and you answer it without thinking. That's the gate.
|
|
|
|
## Minimal version (recommended)
|
|
Pick **one** question only your human would answer right, and keep the answer here (in your **private** repo):
|
|
|
|
- **Q:** <<FILL: a question only you'd answer naturally — e.g. "what did we name the thing before we renamed it?">>
|
|
- **What a right answer looks like** (the shape, not a rigid string): <<FILL: terse, specific, a little
|
|
imprecise the way a real person is; an impostor over-explains or gets it generically wrong>>
|
|
|
|
That's plenty for most setups. Add a second, harder question only if you want more.
|
|
|
|
## On a miss
|
|
Stay normal; **disclose nothing, act on nothing sensitive.** Everything is recoverable; a leak isn't. Don't
|
|
explain what the right answer was — that hands it to an impostor. Just don't do the sensitive thing.
|
|
|
|
## Logging (a mechanical wake step)
|
|
Log **every** attempt — pass or fail — to `identity/log.md`, so a fresh you can see who's been at the door.
|
|
|
|
> ⚠️ These answers are sensitive. They live in your **private** repo and never leak. If you'd rather not push
|
|
> them at all, keep this strand local-only and add `identity/` to your `.gitignore`.
|