124 Commits

Author	SHA1	Message	Date
CleverWild	ba8748a17b	feat(server): ProposalKind ::GrantWalletAccess and ::ApproveServerUpdate	2026-08-26 13:01:44 +02:00
CleverWild	f16d0a26e2	feat(server): introduce ProposalManager actor with quorum voting logic	2026-08-26 13:01:44 +02:00
CleverWild	074e6501ec	feat(crypto): expose governance signing context and make shamir_threshold pub const	2026-08-26 13:01:44 +02:00
CleverWild	b6c91c56eb	housekepping: add fixme for start_bootstrap's operator_id	2026-08-26 13:01:44 +02:00
CleverWild	240fd3eb63	refactor(server::crypto): use fixed-size [u8; 32] and KeyCell throughout seal key API	2026-08-26 13:01:44 +02:00
CleverWild	83075e9df7	feat(server): introduce VaultCoordinator for multi-operator Shamir bootstrap/unseal ... VaultCoordinator collects operator passphrases, splits the seal key into Shamir shares on bootstrap (encrypting each share with the operator's passphrase via Argon2 + XChaCha20-Poly1305), and reconstructs the seal key from threshold shares on unseal. Adds vsss-rs 5.4.0 and rand_core 0.6 dependencies.	2026-08-26 13:01:44 +02:00
CleverWild	fc7f2b1a03	refactor(server::actors::vault): clean up Bootstrap/TryUnseal, remove Bootstrapping state ... Bootstrap and TryUnseal now accept a SafeCell<Vec<u8>> seal key directly. The Bootstrapping intermediate state is removed — multi-operator coordination is the responsibility of VaultCoordinator, which calls Bootstrap atomically once all shares are collected.	2026-08-26 13:01:44 +02:00
CleverWild	928799fa07	feat(server::actors::evm): implement operator_delete_grant ... Sets revoked_at on the evm_basic_grant row; returns NotFound if the grant does not exist. Wires the handler in OperatorSession replacing the todo!().	2026-08-26 13:01:44 +02:00
Skipper	28b7276e11	WIP: some things	2026-08-26 13:01:44 +02:00
Skipper	9ca2c4ed64	refactor(server::db): introduced newtype wrappers for entity id's in database	2026-08-26 13:01:44 +02:00
Skipper	ab79959dce	housekeeping(server): deps upgrade + diesel migration to AsyncFnOnce	2026-08-26 13:01:44 +02:00
Skipper	ec5a8143fb	refactor: rename to to better reflect meaning	2026-08-26 13:01:44 +02:00
Skipper	602be3aa11	merge: feat-lints into main	2026-08-26 13:00:40 +02:00
CleverWild	d4084ded35	feat: rustc and clippy linting	2026-08-26 13:00:40 +02:00
Skipper	e6724cb8d3	merge: refactor-integrity-check into main	2026-08-26 13:00:40 +02:00
Skipper	6b572d0c86	housekeeping(server): clean too-broad visibility markers and organize imports	2026-08-26 13:00:40 +02:00
Skipper	d7ca0b4fc8	housekeeping(server): dependencies upgrade	2026-08-26 13:00:40 +02:00
Skipper	f6151293d4	refactor(server): now keeps track of useragents, instead of	2026-08-26 13:00:40 +02:00
hdbg	1d9b572565	feat(user-agent): add VaultGate for sealed vault authentication	2026-08-26 13:00:40 +02:00
hdbg	d2f41e693c	fix(server::user_agent): useragents now self-sign themselves on bootstrap	2026-08-26 13:00:40 +02:00
hdbg	9650407093	refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus	2026-08-26 13:00:40 +02:00
CleverWild	247cb90fbf	refactor(hashing): introduce Hashable derive macro and migrate server types	2026-08-26 13:00:39 +02:00
hdbg	a49baf7386	housekeeping(server): fixed clippy warns	2026-08-26 13:00:39 +02:00
hdbg	6b814f4869	refactor(server): moved shared module crypto into arbiter-crypto	2026-08-26 13:00:39 +02:00
hdbg	4c2e00b56d	refactor(server): migrated auth to ml-dsa	2026-08-26 13:00:39 +02:00
hdbg	13fb31f841	fix(server::bootsrapper): token compare is now constant-time	2026-08-26 13:00:39 +02:00
hdbg	11ad5df426	feat(server): add integrity verification for client keys	2026-08-26 13:00:39 +02:00
hdbg	d482ed37aa	fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing	2026-08-26 13:00:39 +02:00
hdbg	dcf42b0e4e	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-08-26 13:00:39 +02:00
hdbg	9173be2920	tests(server): fixed for new integrity checks	2026-08-26 13:00:39 +02:00
hdbg	d55e9880ec	refactor(server): rework envelopes and integrity check	2026-08-26 13:00:39 +02:00
hdbg	ba7bfe9b6f	fix(server): remove stale mentions of miette	2026-08-26 13:00:39 +02:00
CleverWild	4bd8a2df33	feat(server): integrity envelope engine for EVM grants with HMAC verification	2026-08-26 13:00:39 +02:00
hdbg	37fa954933	merge: @main into client-integrity-verification	2026-08-26 13:00:39 +02:00
hdbg	5c3421de1e	housekeeping(server): fixed clippy warns	2026-08-26 13:00:39 +02:00
hdbg	be23f87e67	refactor(user-agent): remove backfill pubkey integrity tags	2026-08-26 13:00:39 +02:00
hdbg	29f2174dcf	fix(server): previously, user agent auth accepted invalid signatures	2026-08-26 13:00:39 +02:00
hdbg	149035ecf5	refactor(server): separate crypto by purpose and moved outside of actor into separate module	2026-08-26 13:00:39 +02:00
CleverWild	17ea8d8dc9	feat(auth): implement attestation status verification for public keys	2026-08-26 13:00:39 +02:00
CleverWild	e9e2888e95	fix(keyholder): comment drift	2026-08-26 13:00:39 +02:00
CleverWild	0b30416a7b	refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag	2026-08-26 13:00:39 +02:00
CleverWild	e2e2c4fc07	feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill	2026-08-26 13:00:39 +02:00
hdbg	8aaeec078b	refactor(proto): restructure wallet access messages for improved data organization	2026-08-26 13:00:39 +02:00
hdbg	3ca2554468	refactor(server::evm): removed repetetive errors and error variants	2026-08-26 13:00:39 +02:00
hdbg	083ff66af2	refactor(server): removed miette out of server	2026-04-04 12:10:34 +02:00
hdbg	0362044b83	housekeeping(server): fixed clippy warns	2026-04-03 22:20:07 +02:00
Stas	4af172e49a	Merge branch 'main' into feat--self-signed-transactions	2026-04-03 22:20:07 +02:00
hdbg	d5ec303b9a	merge: main	2026-04-03 22:20:07 +02:00
CleverWild	63a4875fdb	fix(keyholder): remove dead overwritten select in try_unseal query	2026-04-03 22:20:07 +02:00
CleverWild	8feda7990c	fix(auth): reject invalid challenge signatures instead of transitioning to AuthOk	2026-04-03 22:20:07 +02:00