2026-06-11 - 2026-09-11
Overview
5 Pull requests merged by 2 users
Merged
#102 feat(proto)!: Shamir re-key, governance and bootstrapping vault state
Merged
#105 housekeeping: actualize AGENTS.md
Merged
#104 refactor(server::db): introduced newtype wrappers for entity id's in database
Merged
#95 security: batch of fixes
Merged
#94 fix(user-agent): zombie sessions #74
7 Pull requests proposed by 1 user
Proposed
#99 hashable-integrable-macro
Proposed
#100 fix: terminate VaultGate connection after vault lockout
Proposed
#101 fix(errors)!: forbid interpolated details in wire-facing internal errors
Proposed
#103 WIP: feat-shamir (old)
Proposed
#106 feat(vault)!: add multi-operator Shamir custody
Proposed
#107 WIP: feat shamir
Proposed
#108 refactor(custody): drop the single-implementation CustodyStore trait
14 Issues closed from 1 user
Closed
#79 Not using quantum-resistant schemes
Closed
#59 Bootstrap token persists on disk with weak file permissions
Closed
#60 Unseal and bootstrap handshake lack brute-force protection
Closed
#64 User-agent signing endpoint accepts arbitrary client_id
Closed
#73 Consumed bootstrap token is not zeroized in memory
Closed
#67 Bootstrap token RNG seeding should be made explicit
Closed
#65 Integrity envelopes do not survive root key rotation
Closed
#54 Encrypted key material not bound to wallet address — cross-wallet signing possible
Closed
#71 Wallet-access revocation deletes by wallet_id instead of entry id
Closed
#63 SDK client metadata is silently rewritten on reconnect
Closed
#52 Come up with mechanism for enforcing integrity protection usage
Closed
#68 RequestTracker allows arbitrary gaps across request flows
Closed
#74 Zombie user-agent sessions can block all new client approvals
Closed
#62 Bootstrap token registration lacks proof of possession
2 Issues created by 1 user
Opened
#96 Allow clippy's CI to automatically fix some of the linting issues
Opened
#97 Require explicit VERSION in Integrable trait
2 Unresolved Conversations
Open
#66
Transaction logs can be tampered with to reset rate limits
Open
#70
Client approval quorum differs from documented consensus model