fix: gofmt -s across repo (CI format check)

cc/attest/verifier_test.go

@@ -11,8 +11,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/google/go-sev-guest/verify/trust"
 	test "github.com/google/go-sev-guest/testing"
+	"github.com/google/go-sev-guest/verify/trust"
 )
 
 // sevSnpAttestationMilan is a real AMD Milan SEV-SNP attestation report

cmd/mpcd/main.go

@@ -39,7 +39,6 @@ import (
 
 	mpcapi "github.com/luxfi/mpc/pkg/api"
 	"github.com/luxfi/mpc/pkg/backup"
-	"github.com/luxfi/mpc/pkg/zapauth"
 	"github.com/luxfi/mpc/pkg/db"
 	"github.com/luxfi/mpc/pkg/event"
 	"github.com/luxfi/mpc/pkg/eventconsumer"
@@ -50,6 +49,7 @@ import (
 	"github.com/luxfi/mpc/pkg/mpc"
 	"github.com/luxfi/mpc/pkg/transport"
 	"github.com/luxfi/mpc/pkg/types"
+	"github.com/luxfi/mpc/pkg/zapauth"
 )
 
 const (
@@ -1566,4 +1566,3 @@ func isThresholdLoopback(addr string) bool {
 	}
 	return ip.IsLoopback()
 }
-

e2e/policy_gate_test.go

@@ -56,7 +56,9 @@ type nodeCtx struct {
 	pubKey  ed25519.PublicKey
 	privKey ed25519.PrivateKey
 	gate    *mpc.SignGate
-	sink    interface{ All() []intent.NodeAttestation } // memAttestationSink
+	sink    interface {
+		All() []intent.NodeAttestation
+	} // memAttestationSink
 }
 
 // clusterRig is the test fixture: 3 MPC nodes, each with a copy of the
@@ -412,7 +414,9 @@ func TestPolicyGate_FailureModesAreOrthogonal(t *testing.T) {
 		},
 		{
 			name: "expired",
-			mutate: func(_ *clusterRig, ci *intent.CanonicalIntent) { ci.ExpiresAt = time.Date(2026, 4, 27, 11, 0, 0, 0, time.UTC) },
+			mutate: func(_ *clusterRig, ci *intent.CanonicalIntent) {
+				ci.ExpiresAt = time.Date(2026, 4, 27, 11, 0, 0, 0, time.UTC)
+			},
 			want: policy.ErrExpiredIntent,
 		},
 		{

pkg/api/handlers_wallet.go

@@ -226,6 +226,7 @@ func (s *Server) handleTieredWalletListByTier(w http.ResponseWriter, r *http.Req
 
 // signDecision represents the outcome of the tier-aware sign dispatch.
 // Status: "auto_approved" | "approval_required" | "airgapped_queued" |
+//
 //	"timelocked"      | "rejected"
 type signDecision struct {
 	Status            string            `json:"status"`

pkg/api/security_negative_test.go

@@ -508,4 +508,3 @@ func bytes_repeat(b byte, n int) []byte {
 	}
 	return out
 }
-

pkg/approval/provider_ledger_device.go

@@ -377,4 +377,3 @@ func asn1MarshalRS(r, s *big.Int) ([]byte, error) {
 	// Reuse the helper from ecdsa_helpers.go via the local ecdsaSig type.
 	return marshalECDSASig(ecdsaSig{R: r, S: s})
 }
-

pkg/attestation/nvidia/composite.go

@@ -179,6 +179,7 @@ func (c *VerifiedBundle) Verify(now time.Time, freshness time.Duration) (Verifie
 // use this when constructing the CPU quote so the composite verifies.
 //
 // Layout: sha256( "luxfi/mpc/composite\x00" || workerID || "\x00" ||
+//
 //	gpuUUID || "\x00" || gpuNonce ).
 //
 // The leading domain string + null separators prevent cross-domain

pkg/attestation/nvidia/nras_client.go

@@ -424,4 +424,3 @@ func truncate(s string, n int) string {
 	}
 	return s[:n] + "..."
 }
-

pkg/attestation/nvidia/rim.go

@@ -277,4 +277,3 @@ func sortStrings(s []string) {
 		s[j+1] = v
 	}
 }
-

pkg/infra/sqlite_meta.go

@@ -445,4 +445,3 @@ func (s *SQLiteMeta) Audit(entry AuditEntry) error {
 func (s *SQLiteMeta) Close() error {
 	return s.db.Close()
 }
-