fix(sprint-1.2.2): PR number, code paths, admin-key auth in verify

README: PR #67 -> PR #70 (actual PR number after #68/#69 landed).
02_code_patches.md: intro names both files - Patch 1 in
app/swarm/trust_score.py (compute_phase2_score), Patch 2+3 in
app/main.py; Patch 3 header path made explicit.
03_verify_post_deploy.sh Block 6: sources ADMIN_KEY from
~/.moltrust_secrets and sends x-admin-key header, skips gracefully
when key absent or auth fails, only fails on real validator miss.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Lars Kroehl

migrations/sprint-1.2.2/02_code_patches.md

@@ -1,6 +1,6 @@
 # Sprint 1.2.2 — Code-Patches
 
-Drei Änderungen an `~/moltstack/app/main.py` (und ggf. `app/scoring.py`).
+Änderungen an `~/moltstack/app/swarm/trust_score.py` (Patch 1) und `~/moltstack/app/main.py` (Patch 2 + 3).
 
 ## Patch 1: Sybil-Penalty Whitelist für Seed-DIDs
 
@@ -50,7 +50,7 @@ Wirkung: Blockiert NUR neue Seed-POSTs mit Vanity-DIDs. Bestehende Lookups auf `
 
 ## Patch 3: avg_trust_score-Aggregation in /swarm/stats
 
-Handler von `GET /swarm/stats`:
+Handler von `GET /swarm/stats` in `app/main.py`:
 
 ```python
 avg = conn.execute("""

migrations/sprint-1.2.2/03_verify_post_deploy.sh

@@ -73,14 +73,30 @@ done
 
 echo ""
 echo "=== 6. SeedRequest-Validator (Patch 2) ==="
-V=$(curl -s -m 10 -o /dev/null -w "%{http_code}" \
-  -X POST "$BASE/swarm/seed" -H 'Content-Type: application/json' \
-  -d '{"did":"did:moltrust:newvanity","label":"x","base_score":50}')
-if [[ "$V" == "422" ]]; then
-  echo "  ✓ Vanity-DID rejected (422)"
+if [[ -f ~/.moltrust_secrets ]]; then
+  set -a; source ~/.moltrust_secrets; set +a
+fi
+if [[ -z "${ADMIN_KEY:-}" ]]; then
+  echo "  ⚠ ADMIN_KEY nicht gesetzt — Block 6 übersprungen"
+  echo "    Manueller Test:"
+  echo "    curl -X POST $BASE/swarm/seed -H 'x-admin-key: \$ADMIN_KEY' \\"
+  echo "         -H 'Content-Type: application/json' \\"
+  echo "         -d '{\"did\":\"did:moltrust:newvanity\",\"label\":\"x\",\"base_score\":50}'"
+  echo "    Erwartet: 422 Validation Error"
 else
-  echo "  ✗ Vanity-DID accepted (HTTP $V) — Validator wirkt nicht"
-  FAIL=$((FAIL+1))
+  V=$(curl -s -m 10 -o /dev/null -w "%{http_code}" \
+    -X POST "$BASE/swarm/seed" \
+    -H "x-admin-key: $ADMIN_KEY" \
+    -H 'Content-Type: application/json' \
+    -d '{"did":"did:moltrust:newvanity","label":"x","base_score":50}')
+  if [[ "$V" == "422" ]]; then
+    echo "  ✓ Vanity-DID rejected (422)"
+  elif [[ "$V" == "401" || "$V" == "403" ]]; then
+    echo "  ⚠ Auth fehlgeschlagen (HTTP $V) — ADMIN_KEY prüfen, Block übersprungen"
+  else
+    echo "  ✗ Vanity-DID accepted (HTTP $V) — Validator wirkt nicht"
+    FAIL=$((FAIL+1))
+  fi
 fi
 
 echo ""

migrations/sprint-1.2.2/README.md

@@ -1,4 +1,4 @@
-# PR #67 — Sprint 1.2.2: Seed-Konsolidierung + Score-Härtung
+# PR #70 — Sprint 1.2.2: Seed-Konsolidierung + Score-Härtung
 
 **Repo:** moltrust-api · **Voraussetzung:** PR #66 deployed
 **Reviewer:** §2.3 Cross-Review (GPT-4o + Gemini + Perplexity)