feat(server): unify integrity API and propagate verified IDs through auth/EVM flows #81

Closed

CleverWild wants to merge 42 commits from enforcing-integrity into main

pull from: enforcing-integrity

merge into: MarketTakers:main

MarketTakers:main

MarketTakers:cleverwild/sznwsuou

MarketTakers:feat-shamir-custody

MarketTakers:feat-shamir

MarketTakers:feat-shamir-v2

MarketTakers:push-zvwxtnqkumlx

MarketTakers:error-handling-hardening

MarketTakers:terminate-VaultGate-connection-after-vault-lockout

MarketTakers:hashable-integrable-macro

MarketTakers:zeroized-bootstrap-token

MarketTakers:feat-auto-fix-lints

MarketTakers:push-wxnlsulvnrpz

MarketTakers:check-uac-cerf

MarketTakers:impl-useragent_delete_grant

MarketTakers:Client-key-replacement-attack

MarketTakers:critical-fix-CI-check-all-features

MarketTakers:win-service

MarketTakers:fix-proto-build-script

MarketTakers:terrors-refactor

MarketTakers:PoC-terrors

MarketTakers:push-lspnytwuyulm

MarketTakers:key-alternative

MarketTakers:push-yyxvkwvyspxv

MarketTakers:security-breaktrougth

Conversation 1 Commits 42 Files Changed 57 +1478 -377

42 Commits

Author	SHA1	Message	Date
CleverWild	694c569c08	feat(integrity): introduce sealed provenance markers for Verified	2026-04-15 19:45:59 +02:00
CleverWild	bec82e036e	feat(integrity): derive-like macro VerifiedFields that allows to inherit Verified<T> type's provenance to all fields of T	2026-04-11 03:53:25 +02:00
CleverWild	763058b014	feat(server): unify integrity API and propagate verified IDs through auth/EVM flows	2026-04-07 21:12:36 +02:00
hdbg	1497884ce6	fix(server::bootsrapper): token compare is now constant-time	2026-04-06 18:33:47 +02:00
hdbg	b3464cf8a6	tests(server::client::auth): integrity envelope insertion for valid paths	2026-04-06 18:24:13 +02:00
hdbg	46d1318b6f	feat(server): add integrity verification for client keys	2026-04-06 18:13:11 +02:00
Stas	9c80d51d45	Merge pull request 'fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing' (#77) from push-opwuyuwxknyo into main ... Reviewed-on: #77	2026-04-06 15:42:47 +00:00
hdbg	33456a644d	tests(server): property-based testing for ordering independency for hash	2026-04-06 17:40:41 +02:00
hdbg	5bc0c42cc7	fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing	2026-04-06 16:25:32 +02:00
hdbg	f6b62ab884	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-04-06 12:57:18 +02:00
hdbg	2dd5a3f32f	tests(server): initial cargo-mutants	2026-04-06 12:03:56 +02:00
hdbg	1aca9d4007	fix(server): simplify hash function for debug profile	2026-04-05 22:50:28 +02:00
Stas	5ee1b49c43	Merge pull request 'feat(server): integrity envelope engine for EVM grants with HMAC verification' (#51) from integrity-envelope into main ... Reviewed-on: #51	2026-04-05 16:26:51 +00:00
hdbg	00745bb381	tests(server): fixed for new integrity checks	2026-04-05 14:49:02 +02:00
hdbg	b122aa464c	refactor(server): rework envelopes and integrity check	2026-04-05 14:17:00 +02:00
hdbg	9fab945a00	fix(server): remove stale mentions of miette	2026-04-05 10:45:24 +02:00
CleverWild	aeed664e9a	chore: inline integrity proto types	2026-04-05 10:44:21 +02:00
CleverWild	4057c1fc12	feat(server): integrity envelope engine for EVM grants with HMAC verification	2026-04-05 10:44:21 +02:00
hdbg	f5eb51978d	docs: add recovery operators and multi-operator details	2026-04-05 08:27:24 +00:00
hdbg	d997e0f843	docs: add multi-operator governance section	2026-04-05 08:27:24 +00:00
hdbg	7aca281a81	merge: @main into client-integrity-verification	2026-04-05 10:25:46 +02:00
hdbg	01b12515bd	housekeeping(server): fixed clippy warns	2026-04-04 14:33:48 +02:00
hdbg	4a50daa7ea	refactor(user-agent): remove backfill pubkey integrity tags	2026-04-04 14:32:00 +02:00
hdbg	352ee3ee63	fix(server): previously, user agent auth accepted invalid signatures	2026-04-04 14:28:07 +02:00
hdbg	dd51d756da	refactor(server): separate crypto by purpose and moved outside of actor into separate module	2026-04-04 14:21:52 +02:00
CleverWild	0bb6e596ac	feat(auth): implement attestation status verification for public keys	2026-04-04 12:10:45 +02:00
CleverWild	881f16bb1a	fix(keyholder): comment drift	2026-04-04 12:02:50 +02:00
CleverWild	78895bca5b	refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag	2026-04-04 12:00:39 +02:00
CleverWild	a02ef68a70	feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill	2026-03-30 00:17:04 +02:00
hdbg	e5be55e141	style(dashboard): format code and add title margin	2026-03-29 10:54:02 +02:00
hdbg	8f0eb7130b	feat(grants-create): add configurable grant authorization fields	2026-03-29 00:37:58 +01:00
hdbg	94fe04a6a4	refactor(useragent::evm::grants): split into more files & flutter_form_builder usage	2026-03-29 00:37:58 +01:00
hdbg	976c11902c	fix(useragent::dashboard): screen pushed twice due to improper listen hook	2026-03-29 00:37:58 +01:00
hdbg	c8d2662a36	refactor(grants): wrap grant list in SingleChildScrollView	2026-03-29 00:37:58 +01:00
hdbg	ac5fedddd1	style(dashboard): remove const from _CalloutBell and add title to nav rail	2026-03-29 00:37:58 +01:00
hdbg	0c2d4986a2	refactor(useragent): moved shared CreamPanel and StatePanel into generic widgets	2026-03-29 00:37:58 +01:00
hdbg	a3203936d2	feat(evm): add EVM grants screen with create UI and list	2026-03-29 00:37:58 +01:00
hdbg	fb1c0ec130	refactor(proto): restructure wallet access messages for improved data organization	2026-03-29 00:37:58 +01:00
hdbg	2a21758369	refactor(server::evm): removed repetetive errors and error variants	2026-03-29 00:37:58 +01:00
hdbg	1abb5fa006	refactor(useragent::evm::table): broke down into more widgets	2026-03-29 00:37:58 +01:00
hdbg	e1b1c857fa	refactor(useragent::evm): moved out header into general widget	2026-03-29 00:37:58 +01:00
hdbg	4216007af3	feat(useragent): vibe-coded access list	2026-03-29 00:37:58 +01:00