alknet

alkdev/alknet

Fork 0

Commit Graph

Author	SHA1	Message	Date
glm-5.2	389a9e93f7	test(vault): add zeroization tests for cache eviction and clear Adds tests verifying that HashMap::clear() and remove() drop CachedKey values (triggering ZeroizeOnDrop), plus explicit tests for LRU eviction, TTL expiry, and clear() removing all entries. Resolves drift item #6. - drop_tracker module: proves HashMap::clear/remove/replace drop values via a Drop-flag instrumented type mirroring CachedKey's zeroize-on-drop - test_lru_eviction_drops_evicted_cached_key: cache exceeds max_entries, oldest evicted - test_ttl_expiry_evicts_entry_on_access: short TTL, wait, entry gone - test_clear_removes_all_entries_and_empties_cache: empty after clear - lock() clears cache already covered by test_lock_clears_all_cache_entries	2026-06-23 13:17:42 +00:00
glm-5.1	80128a56e5	refactor: rename alknet-secret to alknet-vault Rename the crate from alknet-secret to alknet-vault to better reflect its purpose as a local key vault (seed management, key derivation, encryption) rather than a network service. Symbol renames: - SecretService → VaultService - SecretServiceHandle → VaultServiceHandle - SecretServiceActor → VaultServiceActor - SecretServiceError → VaultServiceError - SecretProtocol → VaultProtocol - SecretMessage → VaultMessage - ServiceLocked → VaultLocked - alknet_secret → alknet_vault (crate name) Update ADR-008 with vault access pattern: the vault is a capability source, not a service endpoint. The CLI injects derived/decrypted material into operation contexts — handlers never hold vault references.	2026-06-16 11:10:07 +00:00

Author

SHA1

Message

Date

glm-5.2

389a9e93f7

test(vault): add zeroization tests for cache eviction and clear

Adds tests verifying that HashMap::clear() and remove() drop CachedKey
values (triggering ZeroizeOnDrop), plus explicit tests for LRU eviction,
TTL expiry, and clear() removing all entries. Resolves drift item #6.

- drop_tracker module: proves HashMap::clear/remove/replace drop values
  via a Drop-flag instrumented type mirroring CachedKey's zeroize-on-drop
- test_lru_eviction_drops_evicted_cached_key: cache exceeds max_entries,
  oldest evicted
- test_ttl_expiry_evicts_entry_on_access: short TTL, wait, entry gone
- test_clear_removes_all_entries_and_empties_cache: empty after clear
- lock() clears cache already covered by test_lock_clears_all_cache_entries

2026-06-23 13:17:42 +00:00

glm-5.1

80128a56e5

refactor: rename alknet-secret to alknet-vault

Rename the crate from alknet-secret to alknet-vault to better reflect its
purpose as a local key vault (seed management, key derivation, encryption)
rather than a network service.

Symbol renames:
- SecretService → VaultService
- SecretServiceHandle → VaultServiceHandle
- SecretServiceActor → VaultServiceActor
- SecretServiceError → VaultServiceError
- SecretProtocol → VaultProtocol
- SecretMessage → VaultMessage
- ServiceLocked → VaultLocked
- alknet_secret → alknet_vault (crate name)

Update ADR-008 with vault access pattern: the vault is a capability source,
not a service endpoint. The CLI injects derived/decrypted material into
operation contexts — handlers never hold vault references.

2026-06-16 11:10:07 +00:00

2 Commits