the signing endpoint no longer asks for a private key

It took one as a JSON argument and then refused every call — but the body is
decoded before the handler runs, so the key arrived regardless, at an endpoint
that needs no credential to reach. A method that cannot sign and has no callers
is not worth the parameter it advertises, so it goes.

The test beside it reads the package's own argument types and fails if any of
them asks a caller for a secret again.

Co-authored-by: Hanzo Dev <[email protected]>

quantumvm/service.go

@@ -97,30 +97,6 @@ func (s *Service) GenerateCoronaKey(r *http.Request, args *GenerateCoronaKeyArgs
 	return nil
 }
 
-// SignWithQuantumArgs are the arguments for SignWithQuantum
-type SignWithQuantumArgs struct {
-	Message    string `json:"message"`
-	PrivateKey string `json:"privateKey"`
-}
-
-// SignWithQuantumReply is the reply for SignWithQuantum
-type SignWithQuantumReply struct {
-	Signature string `json:"signature"`
-	Algorithm uint32 `json:"algorithm"`
-	Timestamp int64  `json:"timestamp"`
-}
-
-// SignWithQuantum signs a message with quantum signature
-func (s *Service) SignWithQuantum(r *http.Request, args *SignWithQuantumArgs, reply *SignWithQuantumReply) error {
-	if !s.vm.Config.QuantumStampEnabled {
-		return errors.New("quantum signatures are not enabled")
-	}
-
-	// This would typically validate the private key and create proper signature
-	// For security reasons, this is a simplified example
-	return errors.New("direct signing not supported via RPC")
-}
-
 // VerifyQuantumSignatureArgs are the arguments for VerifyQuantumSignature
 type VerifyQuantumSignatureArgs struct {
 	Message   string          `json:"message"`

quantumvm/service_secret_test.go

@@ -0,0 +1,49 @@
+// Copyright 2026 Lux Industries, Inc. All Rights Reserved.
+// See the file LICENSE for licensing terms.
+
+package quantumvm
+
+import (
+	"go/ast"
+	"go/parser"
+	"go/token"
+	"strings"
+	"testing"
+)
+
+// This service is reachable without a credential, so an argument it declares is
+// an invitation. A field named for a secret is one a caller will fill in, and the
+// body is decoded before any handler runs — so refusing the request afterwards
+// does not stop the secret arriving. Nothing here should ask for one.
+func TestNoRPCArgumentAsksForASecret(t *testing.T) {
+	fs := token.NewFileSet()
+	pkg, err := parser.ParseDir(fs, ".", nil, 0)
+	if err != nil {
+		t.Fatalf("parse: %v", err)
+	}
+	secret := []string{"privatekey", "secretkey", "seed", "mnemonic", "passphrase", "password"}
+
+	for _, p := range pkg {
+		ast.Inspect(p, func(n ast.Node) bool {
+			ts, ok := n.(*ast.TypeSpec)
+			if !ok || !strings.HasSuffix(ts.Name.Name, "Args") {
+				return true
+			}
+			st, ok := ts.Type.(*ast.StructType)
+			if !ok {
+				return true
+			}
+			for _, f := range st.Fields.List {
+				for _, name := range f.Names {
+					low := strings.ToLower(name.Name)
+					for _, s := range secret {
+						if strings.Contains(low, s) {
+							t.Errorf("%s.%s asks a caller to send a secret to an endpoint that needs no credential", ts.Name.Name, name.Name)
+						}
+					}
+				}
+			}
+			return true
+		})
+	}
+}