glm-5.3-flash a5fb03e7c6 fix(key-source): decode failures carry a crate-owned message ...

The fuzz campaign (w5-fuzz-harness) found russh's ssh-key PPK parse
path interpolating the raw header line — the caller's plaintext bytes
— into its Display; passing that message through
KeySourceError::Decode's payload could echo decrypted-record material
into a stored/logged error string (ADR-005 decision 7's textual leak).

decode_key_arm (the production decrypt-and-decode decode arm, exposed
#[doc(hidden)] for the sidecar) now maps every decode failure to a
crate-owned fixed message naming the refusal — the machinery's text
never rides the typed payload. The upstream no-echo ask is recorded
for russh/ssh-key.

Verification: scripts/matrix.sh green; the fuzz sidecar's key_decode
campaign re-ran clean (606 s, fork mode, zero crashes).

2026-10-30 11:44:14 +00:00

..

adapter.rs

feat(tunnel): land the -R listen flow + the forwarded-tcpip data leg (w3-tunnel-listen)

2026-10-29 04:24:50 +00:00

channel_cap.rs

docs(review): close the wave-3 review gate — verdict green (review-wave-3)

2026-10-29 05:22:14 +00:00

client_accept.rs

docs(review): close the wave-4 review gate — verdict green (review-wave-4)

2026-10-29 17:59:54 +00:00

client_handler.rs

docs(review): close the wave-4 review gate — verdict green (review-wave-4)

2026-10-29 17:59:54 +00:00

client_ops.rs

feat(client): land the -R leg — the acceptor registry + the reverse-listen rows (w4-reverse-listen)

2026-10-29 17:19:24 +00:00

client.rs

feat(client): land the lifecycle primitives — listener handles + the clean-disconnect boundary (w4-lifecycle)

2026-10-29 17:42:29 +00:00

config.rs

feat(client): land the dial surface — the authenticated connection handle + the fail-closed client handler skeleton (w4-dial)

2026-10-29 14:07:15 +00:00

dispatch.rs

feat(client): land the op rows — exec/pty, direct-tcpip, git exec, sftp placeholder (w4-op-rows)

2026-10-29 16:21:25 +00:00

error.rs

fix(key-source): decode failures carry a crate-owned message

2026-10-30 11:44:14 +00:00

exit_code.rs

feat(client): land the op rows — exec/pty, direct-tcpip, git exec, sftp placeholder (w4-op-rows)

2026-10-29 16:21:25 +00:00

fingerprint.rs

feat(fingerprint): land the single fingerprint path + ssh-keygen parity vectors

2026-10-28 06:27:49 +00:00

git_map.rs

fix(git): status-before-close by construction — the split-halves seam duplex (w4-git-exit-close)

2026-10-29 07:01:33 +00:00

handler.rs

feat(client): land the op rows — exec/pty, direct-tcpip, git exec, sftp placeholder (w4-op-rows)

2026-10-29 16:21:25 +00:00

host_key.rs

docs(src): wave-1 gate polish — rustdoc links, doc typos, redundant test lines

2026-10-28 07:22:24 +00:00

key_source.rs

fix(key-source): decode failures carry a crate-owned message

2026-10-30 11:44:14 +00:00

lib.rs

docs(review): close the wave-4 review gate — verdict green (review-wave-4)

2026-10-29 17:59:54 +00:00

observe.rs

feat(client): land the dial surface — the authenticated connection handle + the fail-closed client handler skeleton (w4-dial)

2026-10-29 14:07:15 +00:00

serve.rs

feat(observe): land the decline-path event vocabulary (w3-decline-tracing)

2026-10-28 17:50:49 +00:00

tty_map.rs

feat(client): land the op rows — exec/pty, direct-tcpip, git exec, sftp placeholder (w4-op-rows)

2026-10-29 16:21:25 +00:00

tunnel_map.rs

feat(tunnel): ListenRouter token-collision pre-check — refuse, never replace (w4-router-collision)

2026-10-29 07:56:24 +00:00