.env.example

# Lacuna demo secrets — GITIGNORED. Easiest path: run `make setup`, which
# generates .env with fresh values automatically. Or copy this file to .env and
# fill it in. NEVER commit .env (it holds live secrets and trips the scanner).
#
# Shared HMAC for the Wardline -> Legis signed scan handshake (demo bed).
# Set the SAME 64-hex value on both names.
# Generate: python -c 'import secrets; print(secrets.token_hex(32))'
# When unset, the tour runs the handshake UNSIGNED (legis optional-verify).
WARDLINE_LEGIS_ARTIFACT_KEY=
LEGIS_WARDLINE_ARTIFACT_KEY=

# Distinct, independent secret (NOT the artifact key above): enables the legis
# binding ledger / closure gate. Generated by `make setup`; export before
# launching Claude Code (the standing legis MCP server reads it from the shell).
# Generate: python -c 'import secrets; print(secrets.token_hex(32))'
LEGIS_HMAC_KEY=

# Posture-floor operator key (64 hex). legis >= 1.1.0 ADOPTS this as the GENESIS
# epoch key on `install --posture --insecure-key-in-env` (it no longer mints a
# throwaway), so the provisioned floor is owned by a key you hold — reads need no
# key, but raising the floor (`legis posture set`) signs under THIS key in an open
# operator session. Generated by `make setup`. Generate: python -c 'import
# secrets; print(secrets.token_hex(32))'
LEGIS_OPERATOR_KEY=

# --- Agent MCP connectivity (NOT the `make` flow) ---------------------------
# Federation bearer for the Filigree dashboard MCP. This is NOT a fresh random
# value: it must equal the GLOBAL filigree token that the dashboard validates:
#     cat ~/.config/filigree/federation_token
# `make setup` does NOT generate this (the make demo doesn't use it). If you want
# the agent's filigree MCP to authenticate, export it into the shell BEFORE
# launching Claude Code (it reads .mcp.json headers from the launching shell env,
# not from this file):  export WEFT_FEDERATION_TOKEN="$(cat ~/.config/filigree/federation_token)"
WEFT_FEDERATION_TOKEN=