2026-06-28 - 2026-07-28
Overview
1 Pull request merged by 1 user
Merged
#95 security: batch of fixes
2 Pull requests proposed by 1 user
Proposed
#99 hashable-integrable-macro
Proposed
#100 fix: terminate VaultGate connection after vault lockout
10 Issues closed from 1 user
Closed
#79 Not using quantum-resistant schemes
Closed
#59 Bootstrap token persists on disk with weak file permissions
Closed
#60 Unseal and bootstrap handshake lack brute-force protection
Closed
#64 User-agent signing endpoint accepts arbitrary client_id
Closed
#73 Consumed bootstrap token is not zeroized in memory
Closed
#71 Wallet-access revocation deletes by wallet_id instead of entry id
Closed
#63 SDK client metadata is silently rewritten on reconnect
Closed
#54 Encrypted key material not bound to wallet address — cross-wallet signing possible
Closed
#67 Bootstrap token RNG seeding should be made explicit
Closed
#65 Integrity envelopes do not survive root key rotation
2 Unresolved Conversations
Open
#97
Require explicit VERSION in Integrable trait
Open
#91
WIP: feat-shamir