1 files changed, 10 insertions, 11 deletions
diff --git a/packages/meshbay-node/tests/test_security_regressions.py b/packages/meshbay-node/tests/test_security_regressions.py
index c0c2c2c..43e88c2 100644
--- a/packages/meshbay-node/tests/test_security_regressions.py
+++ b/packages/meshbay-node/tests/test_security_regressions.py
@@ -602,19 +602,18 @@ def test_denylist_persists_and_honours_groups(tmp_path):
     assert not reloaded.is_denied("someone", "other", "g-allowed")
 
 
-def test_swarm_registration_skips_private_groups():
+def test_the_node_registers_no_content_hash_with_the_hub():
     """
-    H7: the daemon registered content hashes for every group, private included,
-    handing the hub a fingerprint of every private file. The bug was masked by a
-    mis-mounted route, so fixing the route without this filter would have turned a
-    dormant leak into a live one.
+    H7: the daemon once registered content hashes for every group, private
+    included, handing the hub a fingerprint of every private file. The swarm that
+    received them is gone, so no group's hashes are sent to the hub at all.
     """
-    source = daemon_source()
-    assert 'visibility' in source and '_register_swarm' in source
-    # Both registration sites must gate on public visibility.
-    for marker in ['gctx.get("visibility") == "public"',
-                   'group_cfg.visibility == "public"']:
-        assert marker in source, f"swarm registration not gated: {marker}"
+    from pathlib import Path
+
+    import meshbay_node.hub_client as hub_client
+    for source in (daemon_source(), Path(hub_client.__file__).read_text(encoding="utf-8")):
+        assert "/v1/swarm" not in source
+        assert "register_swarm" not in source
 
 
 def test_keystore_argon2_is_production_strength():