From 55032d2de36b08692d39cc94c4f2da317b3e2eb7 Mon Sep 17 00:00:00 2001
From: salmonik <salmonik@tuta.io>
Date: Sun, 1 Nov 2026 18:14:16 +0100
Subject: v4.0.4: move the client transport and TOFU into the library

---
 AGENTS.md | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'AGENTS.md')

diff --git a/AGENTS.md b/AGENTS.md
index e784624..72def0d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -104,6 +104,9 @@
   sharing a login.
 - `save_host` must not wipe the fingerprint column. Use `ON CONFLICT ...
   DO UPDATE SET last_used` — never `INSERT OR REPLACE`.
+- The client transport lives in `client::transport`. It records the key during
+  the handshake, then asks the frontend (`TrustPrompt`) before sending `HELLO`
+  or credentials. A changed key is a hard error, and forgetting it is explicit.
 
 ## Versioning
 
-- 
cgit v1.2.3