on master help sign in
skrepka
5 folders, 19 files
.cargo/Add iOS client: Rust/Crux core + SwiftUI shell with crypto, messaging, auth, profiles, QR scanning .github/Fix profile photo clearing on absent field, remove dead code in padded_len, fix CI comment typo .vscode/Extract button components into separate module and improve formatting apple/security audit fixes: 35 findings across core, shell, server, spec core/Fix profile photo clearing on absent field, remove dead code in padded_len, fix CI comment typo .gitignoreComprehensive bug fix pass: crypto, state machine, FFI, server, Apple shell AGENTS.mdsecurity audit fixes: 35 findings across core, shell, server, spec AUDIT-DEEP.mdsecurity audit fixes: 35 findings across core, shell, server, spec AUDIT-FFI-PHONEMIC-APPLE.mdsecurity audit fixes: 35 findings across core, shell, server, spec AUDIT-FRESH.mdSecurity: add AAD to AEAD (v0x02), fix livelock, bound dedup, cap gossip amplification AUDIT-NEW.mdSecurity audit fixes: Q16 cursor poisoning, Q17 ack ordering, Q18 persistent seen_ids, Q25 malformed JSON, Q35 revokeOthers challenges, Q37 sig inside atomic, Q38 audit log, Q49 low-order X25519 check, spec gaps Q39-Q44, §10 risk table updates CLAUDE.mdMake CLAUDE.md a symlink to AGENTS.md Cargo.lockSecurity audit Q1-Q9: zstd window cap, poll event/body caps, cursor clamp, verify_strict, TEST-NET-2, cursor watchdog, cached X25519 keys, base64 photo validation Cargo.tomlSecurity audit Q1-Q9: zstd window cap, poll event/body caps, cursor clamp, verify_strict, TEST-NET-2, cursor watchdog, cached X25519 keys, base64 photo validation JustfileComprehensive bug fix pass: crypto, state machine, FFI, server, Apple shell LICENSEInitial commit PROTOCOL-REVIEW.mdSeventh-pass audit: zeroize encrypt inner on AEAD failure, fix stale comments PROTOCOL.mdsecurity audit fixes: 35 findings across core, shell, server, spec README.mdFix all 16 audit findings: outbox stall, deploy auth, panics, security, docs install.shSecurity: add AAD to AEAD (v0x02), fix livelock, bound dedup, cap gossip amplification server.knotsecurity audit fixes: 35 findings across core, shell, server, spec server.oSecurity audit 13th pass: fix 23 findings across crypto, server, client servers.jsonUpdate server.knot to match Knot language spec: bind source relations before use, all IO before branching skrepka.serviceFix all 16 audit findings: outbox stall, deploy auth, panics, security, docs