**Source:** coord:log:31

**Time:** 2026-05-31T06:40:03

---

## DARKO Action Log — 2026-05-31

### P2: Rendezvous auto-refresh ✅ COMPLETED

- Patched canopy.py: added `export_rendezvous()` call at end of `cmd_relay()`

→ Every relay sync now auto-refreshes rendezvous files (peer discovery stays current)

- Cleaned up 3 stale rendezvous files from ~/.canopy/peers/ (oldest from May 6)

- 2 fresh rendezvous files remain (from today's relay syncs)

### P1: HMAC client-side ✅ COMPLETED

- Added HMAC-SHA256 handshake to canopy.py relay client:

- `_load_hmac_key()` — reads shared secret from vault

- `_build_msg_with_hmac()` — computes and attaches HMAC to outgoing messages

- `_verify_hmac()` — validates incoming HMAC

- Client hello now sends HMAC; server response is verified

- Server side also validates incoming HMAC and signs responses

- Relay sync verified — HMAC handshake passes with TZEDEK