feat(platform-wallet): manifest integrity checksum (Risk-6/R12.5 follow-up) - #3992

Draft

Claudius-Maginificent wants to merge 424 commits into

feat/3968-manifest-integrity-checksum

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 13, 2026

docs(rs-platform-wallet-storage): test case spec for #4113 provider-key persistence
lklimek
committed
ba03c9e
feat(platform-wallet): add ProviderKeyRegistrationBlob

lklimek
and
claude
committed
7ac50c9
fix(platform-wallet-storage): persist provider key-material accounts

lklimek
and
claude
committed
31b0aa2
docs(rs-platform-wallet-storage): log V002-V004 in SCHEMA.md migration table

lklimek
and
claude
committed
610179f
docs(qa): adversarial review of #4113 provider-key persistence (Marvin)
lklimek
committed
8fd222c
fix(platform-wallet-storage): never delete pre-derived platform-node keys

lklimek
and
claude
committed
c1349e6
fix(platform-wallet-storage): validate provider entries at write time

lklimek
and
claude
committed
1df6169
test(platform-wallet-storage): adversarial recheck of #4113 union/conflict fix

lklimek
and
claude
committed
33d18ac
fix(platform-wallet-storage): reject conflicting keys at one node-key index

lklimek
and
claude
committed
7b56929

Commits on Jul 15, 2026

Commits on Jul 20, 2026

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Commits on Jul 23, 2026

Commits on Jul 24, 2026

Commits on Jul 27, 2026

Merge remote-tracking branch 'origin/v4.1-dev' into feat/platform-wallet-storage-rehydration
lklimek
committed
3636aff

Commits on Jul 28, 2026

Commits on Jul 30, 2026

Commits on Jul 31, 2026

Commits on Aug 1, 2026

fix(platform-wallet-storage): narrow identity_keys key to (identity_id, key_id)

lklimek
and
claude
committed
ae42330
feat(platform-wallet-storage): allow NULL identity_keys.wallet_id, guarded by triggers

lklimek
and
claude
committed
0b5e2e1
feat(platform-wallet-storage): add load_unowned_identities accessor

lklimek
and
claude
committed
3eb021a
test(platform-wallet-storage): pin the unowned-scope guards nothing held

lklimek
and
claude
committed
c33807b
chore(deps): update rust-dashcore dash-evo-tool branch

lklimek
and
claude
committed
5931df7

Commits on Aug 20, 2026

Commits on Aug 21, 2026

Commits on Aug 25, 2026

Commits on Aug 26, 2026

fix(platform-wallet-storage): resolve two silent regressions from the v4.2-dev merge

lklimek
and
claude
committed
92f9681

Commits on Aug 27, 2026

Merge branch 'v4.2-dev' into feat/platform-wallet-storage-rehydration

lklimek
and
claude
committed
aaab997
fix(platform-wallet-storage): close six read-path and verification gaps from #3968 triage

lklimek
and
claude
committed
e250391
docs(platform-wallet-storage): correct the duplicate-slot load claim

lklimek
and
claude
committed
a844aec

Commits on Aug 31, 2026

fix(platform-wallet-storage): stop secret drop aborting on a shared locked page

lklimek
and
claude
committed
3f40708
fix(platform-wallet-storage)!: give every secret its own guarded pages via memsec

lklimek
and
claude
committed
082f203
fix(platform-wallet-storage)!: close the memsec rework's review findings

lklimek
and
claude
committed
62ee946
feat(platform-wallet-storage): let SecretString be edited in place

lklimek
and
claude
committed
67d4ef3

Commits on Sep 1, 2026

Commits on Sep 2, 2026

chore(platform-wallet-storage): trim PR to storage-crate-only scope
lklimek
committed
b51cddc
chore(platform-wallet-storage): drop asset-lock size gate, now its own PR

lklimek
and
claude
committed
c34e707

Commits on Sep 3, 2026

Commits on Sep 4, 2026

docs(platform-wallet-storage): correct apply_persisted_core_state chainlock doc

lklimek
and
claude
committed
771a9e5
test(platform-wallet-storage): cover LoadSite::RehydrationMaintainGapLimit

lklimek
and
claude
committed
cab6960
refactor(platform-wallet-storage): move rehydration engine out of util

lklimek
and
claude
committed
36dc213
refactor(platform-wallet-storage): wire up sqlite::rehydrate module

lklimek
and
claude
committed
2969cf7
fix(platform-wallet-storage): expose LoadSite explanations and render the CLI's full error chain

lklimek
and
claude
committed
90a232d
fix(platform-wallet-storage): wipe the Argon2 block matrix instead of blaming upstream

lklimek
and
claude
committed
7e2698a
fix(platform-wallet-storage): pin the Tier-2 read ceiling to wire-stable constants

lklimek
and
claude
committed
bde4ce1
fix(platform-wallet-storage): stop rekey silently downgrading a hardened vault header

lklimek
and
claude
committed
0c52823
style(platform-wallet-storage): rustfmt the rekey header-ratchet test

lklimek
and
claude
committed
e92b951
fix(platform-wallet-storage): zeroize scheme-0 plaintext on every failed envelope read

lklimek
and
claude
committed
122f167
fix(platform-wallet-storage): close the write-path gaps that make a wallet file un-loadable

lklimek
and
claude
committed
144a962
merge: expose LoadSite explanations and render the CLI's full error chain

lklimek
and
claude
committed
7c5837e
merge: close the write-path gaps that make a wallet file un-loadable
lklimek
committed
a6fb87c
merge: correct the chainlock rustdoc, cover the gap-limit site, move the rehydration engine

lklimek
and
claude
committed
84b20ff
merge: wipe the Argon2 matrix, decouple the read ceiling, stop rekey downgrading a vault

lklimek
and
claude
committed
acf4c77
style(platform-wallet-storage): drop ephemeral review-finding IDs from test docs

lklimek
and
claude
committed
35516cb
merge: bring feat/platform-wallet-storage-rehydration up to date with v4.2-dev

lklimek
and
claude
committed
f7d7874
fix(platform-wallet-storage): guard rehydration gap-limit input and empty pool scripts

lklimek
and
claude
committed
a32f408
Merge branch 'v4.2-dev' into feat/platform-wallet-storage-rehydration
lklimek
authored
155a017

Commits on Sep 7, 2026

Commits on Sep 8, 2026

Commits on Sep 9, 2026

Merge branch 'v4.2-dev' into feat/platform-wallet-storage-rehydration
lklimek
authored
459e062
chore: cargo fmt
lklimek
committed
8fab915
fix(platform-wallet): align disabled shielded changeset traits

lklimek
and
codex
committed
ec1e26f
fix(platform-wallet-storage): reject unknown pool account labels

lklimek
and
codex
committed
827d759
refactor(platform-wallet-storage): use Zeroizing for Argon2 memory

lklimek
and
codex
committed
ee41927
chore(wallet-storage): merge updated rehydration base into manifest checksum
lklimek
committed
117256b
chore(platform-wallet-storage): merge v4.2-dev persistence updates

lklimek
and
codex
committed
31c8f94
chore(wallet-storage): sync latest rehydration base and typed persister errors
lklimek
committed
958a94b