71 Commits

Author	SHA1	Message	Date
CleverWild	e9496da78c	perf(proposal): replace the per-proposal tally loop with one grouped query	2026-08-27 14:00:14 +02:00
CleverWild	71081b6ee7	refactor(proposal): use id newtypes across the governance path	2026-08-27 13:42:14 +02:00
CleverWild	8421a09d9f	refactor(db!: store the one-off transaction signature by component	2026-08-27 12:46:40 +02:00
CleverWild	15b826310b	refactor(db): replace the proposal payload blob with typed child tables	2026-08-27 00:45:35 +02:00
CleverWild	5698d1cfb3	feat(proposal): reject proposals with an excessive TTL	2026-08-26 16:47:12 +02:00
CleverWild	6884a59325	refactor(proposal): type ProposalSummary::kind as ProposalKindTag	2026-08-26 16:32:43 +02:00
CleverWild	b364d95489	refactor(proposal): drop the Quorum prefix from VoteOutcome variants	2026-08-26 15:30:48 +02:00
CleverWild	d64478b301	refactor(proposal): replace UpdateShamirParameters with parameterless TriggerRekey	2026-08-26 15:26:17 +02:00
CleverWild	aa884339f7	refactor(proposal): remove the ApproveServerUpdate proposal kind	2026-08-26 14:53:38 +02:00
CleverWild	a501283b0c	refactor(crypto): replace byte-slice signing contexts with SigningContext enum	2026-08-26 14:08:32 +02:00
CleverWild	f881102f0a	refactor(proposal): drop the expired status, enforce expiry on every vote	2026-08-26 13:01:44 +02:00
CleverWild	36249129d1	feat(vault)!: implement full Shamir re-key flow and governance execution (§3.3–§3.5) ... - Add `rekey.proto` with `ContributePassphrase` / `ContributeRecoveryPassphrase` / `RekeyResult` - Wire `rekey` as a 4th vault stream payload in `vault.proto` and gRPC dispatch - Add `RekeyRootKey` message to `Vault` actor: generates new random seal key, re-encrypts root key, writes new `root_key_history` row - Add `StartRekey`, `ContributeRekey`, `ContributeRecoveryRekey` messages to `VaultCoordinator`; `finalize_rekey` uses threshold-1 fast path identical to bootstrap - `execute_replace_operator` now UPDATEs `operator_identity.public_key` in-place (avoids FK constraint violation), deletes stale `operator` share row, then triggers `StartRekey` - `execute_update_shamir_parameters` triggers `StartRekey` instead of warning stub - `ProposalKind::ReplaceOperator` carries `old_operator_id`; encode/decode updated accordingly - `GlobalActors::spawn` extracts `vault_coordinator` before `Ok(Self { … })` so it can be cloned into `ProposalManager::new` - Add `handle_rekey` in session handlers forwarding passphrase contributions to `VaultCoordinator` - Fix test: rename `replace_operator_inserts_identity_row` → `replace_operator_updates_pubkey_and_starts_rekey`, assert count stays 1 and pubkey is updated	2026-08-26 13:01:44 +02:00
CleverWild	e121708d28	fix(crypto): handle 1-of-N Shamir split when ordinary_count=1	2026-08-26 13:01:44 +02:00
CleverWild	6e3fa736e0	feat(server): recovery operators with sleeping/wakeup mechanism (§3.5/§3.6)	2026-08-26 13:01:44 +02:00
CleverWild	19a62e7195	feat(server): key-rotation proposals require full quorum (§3.3)	2026-08-26 13:01:44 +02:00
CleverWild	57200cbc50	feat(server): two-operator vault requires at least one recovery share	2026-08-26 13:01:44 +02:00
CleverWild	291ef2e831	refactor(server): typed pubkey len via u32::try_from in ReplaceOperator	2026-08-26 13:01:44 +02:00
CleverWild	d12109c2c9	feat(server): ProposalKind::ApproveOneOffTransaction	2026-08-26 13:01:44 +02:00
CleverWild	277fb3c92d	feat(server): ProposalKind::ApprovePersistentGrant	2026-08-26 13:01:44 +02:00
CleverWild	9e42097683	feat(server): ProposalKind::UpdateShamirParameters	2026-08-26 13:01:44 +02:00
CleverWild	25b86b14e9	feat(server): ProposalKind::ReplaceOperator	2026-08-26 13:01:44 +02:00
CleverWild	ba8748a17b	feat(server): ProposalKind ::GrantWalletAccess and ::ApproveServerUpdate	2026-08-26 13:01:44 +02:00
CleverWild	3e61d807b4	test(server): governance integration tests	2026-08-26 13:01:44 +02:00
CleverWild	240fd3eb63	refactor(server::crypto): use fixed-size [u8; 32] and KeyCell throughout seal key API	2026-08-26 13:01:44 +02:00
CleverWild	80ba30d430	fix(server::tests): tighten unseal test seal_key params to &[u8; 32]	2026-08-26 13:01:44 +02:00
Skipper	9ca2c4ed64	refactor(server::db): introduced newtype wrappers for entity id's in database	2026-08-26 13:01:44 +02:00
Skipper	ec5a8143fb	refactor: rename to to better reflect meaning	2026-08-26 13:01:44 +02:00
Skipper	602be3aa11	merge: feat-lints into main	2026-08-26 13:00:40 +02:00
CleverWild	d4084ded35	feat: rustc and clippy linting	2026-08-26 13:00:40 +02:00
Skipper	6b572d0c86	housekeeping(server): clean too-broad visibility markers and organize imports	2026-08-26 13:00:40 +02:00
Skipper	270e843598	fix(server::tests): api surface of auth challenge changed	2026-08-26 13:00:40 +02:00
Skipper	0a48839321	refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database	2026-08-26 13:00:40 +02:00
hdbg	4823a291f8	WIP: kameo::messages wiring for transport generalization	2026-08-26 13:00:40 +02:00
hdbg	1d9b572565	feat(user-agent): add VaultGate for sealed vault authentication	2026-08-26 13:00:40 +02:00
hdbg	d2f41e693c	fix(server::user_agent): useragents now self-sign themselves on bootstrap	2026-08-26 13:00:40 +02:00
hdbg	9650407093	refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus	2026-08-26 13:00:40 +02:00
hdbg	a49baf7386	housekeeping(server): fixed clippy warns	2026-08-26 13:00:39 +02:00
hdbg	6b814f4869	refactor(server): moved shared module crypto into arbiter-crypto	2026-08-26 13:00:39 +02:00
hdbg	4c2e00b56d	refactor(server): migrated auth to ml-dsa	2026-08-26 13:00:39 +02:00
hdbg	2df25b8641	tests(server::client::auth): integrity envelope insertion for valid paths	2026-08-26 13:00:39 +02:00
hdbg	dcf42b0e4e	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-08-26 13:00:39 +02:00
hdbg	9173be2920	tests(server): fixed for new integrity checks	2026-08-26 13:00:39 +02:00
hdbg	d55e9880ec	refactor(server): rework envelopes and integrity check	2026-08-26 13:00:39 +02:00
hdbg	37fa954933	merge: @main into client-integrity-verification	2026-08-26 13:00:39 +02:00
hdbg	5c3421de1e	housekeeping(server): fixed clippy warns	2026-08-26 13:00:39 +02:00
hdbg	149035ecf5	refactor(server): separate crypto by purpose and moved outside of actor into separate module	2026-08-26 13:00:39 +02:00
CleverWild	e2e2c4fc07	feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill	2026-08-26 13:00:39 +02:00
hdbg	083ff66af2	refactor(server): removed miette out of server	2026-04-04 12:10:34 +02:00
CleverWild	8feda7990c	fix(auth): reject invalid challenge signatures instead of transitioning to AuthOk	2026-04-03 22:20:07 +02:00
hdbg	bbf8a8019c	feat(evm): add wallet access grant/revoke functionality	2026-03-25 16:33:55 +01:00