solopap

Cyber CIV — Recovery Engine A zero-PII, read-only sensing protocol for crypto and banking asset recovery. Senses wallet and bank state from a mere signal — no account logins, no private keys, no stored account data. - Video: https://youtu.be/hT07lmKNC-Y - Live endpoint: https://612d3471955771.lhr.life (dashboard + health, HTTP Basic Auth) - Commit: 6883998 (GPG-signed) on pehlivanovicparis-cloud/cyber-civ, master - Tests: 167/167 passing across 11 test files - Crypto: hand-rolled pure-Python secp256k1 + BIP32 + BIP173 Bech32, stdlib only — 20-address lookahead in 0.23–0.26s, verified against live on-chain balances - Banking: MT940 parser extracts balances and velocity only; account and statement numbers are stripped by construction and never stored or returned - Safety: ingest endpoints are read-only and idempotent — sensing can never mutate the persistence engine (cycle 748, audit chain valid) - Defense: 64 KB body cap, 256-char signal cap, rate limiting (10 mutating / 60 read per min), 5-failure brute-force lockout, 15s client-side retry with backoff - Pre-freeze audit: 2 bugs found and fixed with tests — Bech32 decode guardrails and order-independent MT940 currency verification (full log in recovery/CODE-REVIEW-2026-11-02.md)