eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: replace private cas envelope

Browse source
This commit is contained in:
Eric Wendland 2026-07-05 23:02:59 +02:00
commit 63ea36bb51
10 changed files with 193 additions and 89 deletions
Download patch file Download diff file Expand all files Collapse all files

18
docs/production-readiness-roadmap.md
View file

@ -191,22 +191,22 @@ Goal: finish the authorization and remote-input audit before deployment.
Goal: remove prototype cryptography from paths users may treat as real
confidential storage.
- `[ ]` Replace prototype private CAS envelope.
- `[x]` Replace prototype private CAS envelope.
Acceptance criteria:
- `[ ]` The BLAKE3-XOR prototype envelope is not used for new private CAS
- `[x]` The BLAKE3-XOR prototype envelope is not used for new private CAS
writes.
- `[ ]` New private CAS writes use a reviewed AEAD construction or an
- `[x]` New private CAS writes use a reviewed AEAD construction or an
established envelope format such as age.
- `[ ]` Key derivation, nonce generation, and envelope versioning are
- `[x]` Key derivation, nonce generation, and envelope versioning are
documented.
- `[ ]` Tests cover tamper detection, wrong resource, wrong key, and nonce
- `[x]` Tests cover tamper detection, wrong resource, wrong key, and nonce
uniqueness behavior.
- `[ ]` Define pre-release encrypted blob migration behavior.
- `[x]` Define pre-release encrypted blob migration behavior.
Acceptance criteria:
- `[ ]` Existing prototype envelopes are either rejected with a clear error
- `[x]` Existing prototype envelopes are either rejected with a clear error
or migrated through an explicit command.
- `[ ]` Docs state that prototype envelopes made before deployment are not a
- `[x]` Docs state that prototype envelopes made before deployment are not a
durable security format.
## Phase 6: Sync Correctness And Fault Testing
@ -343,7 +343,7 @@ Goal: prove the system works as an actual base layer before broader use.
3. `[x]` Add stable contract and golden JSON tests.
4. `[x]` Harden store migrations and backup.
5. `[ ]` Complete security-boundary test coverage.
6. `[ ]` Replace prototype private CAS cryptography.
6. `[x]` Replace prototype private CAS cryptography.
7. `[ ]` Add fault-injection sync tests.
8. `[ ]` Improve automation commands and JSON errors.
9. `[ ]` Add operational health, doctor, and release gates.