alkdev/alknet
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tasks: mark vault/review-vault-sync and core/auth completed

Browse Source
This commit is contained in:
glm-5.2
2026-06-23 14:10:54 +00:00
parent a4b4d89d8f
commit b93a85a280
2 changed files with 20 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
tasks/vault/review-vault-sync.md
View File

@@ -1,7 +1,7 @@
---
id: vault/review-vault-sync
name: Review vault implementation against specs after all drift fixes
status: pending
status: completed
depends_on: [vault/irpc-removal, vault/osrng-iv-generation, vault/poisoned-lock-recovery, vault/remove-password-derivation, vault/unlock-new-zeroizing-return, vault/key-versioning-rotation, vault/derivedkey-serialization, vault/cache-zeroization-test]
scope: moderate
risk: low
@@ -109,4 +109,12 @@ items were missed or incompletely fixed.
## Summary
> To be filled on completion
Reviewed vault crate against all architecture specs. Fixed 5 spec-conformance
deviations: (1) EncryptionKey removed Clone (now move-only), added redacting
Debug; (2) EncryptionKey::new made private (cfg(test)), added pub(crate)
key_bytes(); (3) encrypt/decrypt made pub(crate) per encryption.md, crypto tests
moved to unit tests; (4) CachedKey refactored to wrap DerivedKey with
cached_at/last_accessed fields per service.md; (5) Mnemonic::to_seed() unwrap()
eliminated by storing validated Bip39Mnemonic (enabled bip39 zeroize feature).
All 10 drift items verified resolved. 79 lib + 12 integration tests pass; clippy
clean with all features. Merged to develop.