0 Fork 0

WS-D: Security to 9/10

New Issue

SQLCipher whole-DB encryption (spike-gated), signed updates, bounded fetch, reject cleartext Plain, untrusted-content sanitization, token scoping, UDS/named-pipe IPC.

9999-01-01

33% Completed

WS-D12 Document the same-user-malware non-goal (do not over-claim local isolation) story

#308

opened 2026-07-31 18:14:42 +00:00 by KofTwentyTwo

WS-D11 Remove/wire the dead age attachment cipher (superseded by WS-B8 attachment persistence) story

#307

opened 2026-07-31 18:14:40 +00:00 by KofTwentyTwo

WS-D9 OS-permissioned IPC: UDS 0600 / Windows named pipe + peer-UID check (replace loopback TCP) story

#305

opened 2026-07-31 18:14:37 +00:00 by KofTwentyTwo

WS-D7 [PROTO] Bearer token rotation/revocation + per-client scoping story

#303

opened 2026-07-31 18:14:34 +00:00 by KofTwentyTwo

WS-D6 [PROTO] Untrusted-content: engine-side HTML sanitization (ammonia) + html_is_untrusted marker + parser/zip/path hardening story

#302

opened 2026-07-31 18:14:32 +00:00 by KofTwentyTwo

WS-D4 Signed updates: minisign detached signature + pinned key + decompression-bomb guards + safe apply/rollback story

#300

opened 2026-07-31 18:14:29 +00:00 by KofTwentyTwo

WS-D3 Whole-DB at-rest encryption (SQLCipher) + migration + 'stolen DB reveals nothing' test [HEADLINE] story

#299

opened 2026-07-31 18:14:27 +00:00 by KofTwentyTwo

WS-D2 SPIKE: SQLCipher-through-sqlx feasibility (bundled-sqlcipher-vendored-openssl vs migrate to rusqlite) story

#298

opened 2026-07-31 18:14:25 +00:00 by KofTwentyTwo