fix(backend-e2e): stabilize PR #860 platform-wallet e2e suite + SEC-001 hardening - #867

Merged

lklimek merged 73 commits into

docs/platform-wallet-migration-designfrom

security/secret-handling-hardening

Jun 26, 2026

Commits on Jun 19, 2026

docs(secret-seam): Phase-1 design artifacts (UX disclosure + test case spec)
lklimek
committed
35a4a04
feat(wallet-backend): add raw-SecretBytes secret seam + typed errors (T2,T4)

lklimek
and
claude
committed
9d313b7
fix(model): redacting Debug for ClosedSingleKey (T9, 6a2818cd)

lklimek
and
claude
committed
890cae1
feat(model): PrivateKeyData::InVault placeholder + migration probes (T1)

lklimek
and
claude
committed
85e8c4f
feat(model,wallet-backend): WalletMeta+ImportedKey sidecar fields, schema-gated (T5)

lklimek
and
claude
committed
f1cd234
chore(wallet-backend): satisfy fmt + clippy for the secret-seam batch

lklimek
and
claude
committed
1880461
feat(wallet-backend): SecretScope::IdentityKey + seam-first SecretAccess (T3)

lklimek
and
claude
committed
e503bbd
feat(wallet-backend): identity_key_store + seed/single-key seam-raw writes (T6)

lklimek
and
claude
committed
aa3c34d
feat: crash-safe dual-format migration + InVault resolver + vault delete (T7)

lklimek
and
claude
committed
a6c11a7
feat: key_info_screen JIT identity signing + single-key Copy B disclosure (T8)

lklimek
and
claude
committed
aadf532
chore: fmt + clippy for the T3-T8 integration batch

lklimek
and
claude
committed
dd570b8
fix(wallet-backend): dual-format read for WalletMeta + ImportedKey sidecars

lklimek
and
claude
committed
c155020
test(identity-db): identity-key migration, deletion, write-fault no-loss (QA-002/003/005)

lklimek
and
claude
committed
12b34f3
test(wallet-lifecycle): assert lazy-migration secret post-conditions (QA-004)

lklimek
and
claude
committed
99b5926
test(backend-e2e): TS-SIGN-E2E-01 InVault identity signs + broadcasts (QA-001)

lklimek
and
claude
committed
a727179
refactor(wallet-backend): zeroize migration source, flavor identity-key errors, lift signed-message helper

lklimek
and
claude
committed
73c189d
test(secret-seam): TS-INV-03 audit guard + TS-NOLEAK-02 sidecar no-leak (SEC-001/002)

lklimek
and
claude
committed
66c3204
test(kittest): disclosure-banner copy coverage (QA-007/Diziet)

lklimek
and
claude
committed
906a2f1
docs: comment hygiene + CLAUDE.md seam pointer + user-story softening (QA-DOC/DOC)

lklimek
and
claude
committed
551d208
chore: nightly fmt for the QA-findings batch

lklimek
and
claude
committed
4dabef6
test(backend-e2e): seed Clear key so TS-SIGN-E2E-01 exercises the InVault JIT path

lklimek
and
claude
committed
1be4bef

Commits on Jun 22, 2026

Merge remote-tracking branch 'origin/docs/platform-wallet-migration-design' into security/secret-handling-hardening
lklimek
committed
3cb2d83
chore(deps): repin platform deps to feat/platform-wallet-secret-protection (fb7953ea)

lklimek
and
claude
committed
bf7d17b
fix(secret): open the vault keyless (file_unprotected) for the Tier-1 baseline

lklimek
and
claude
committed
01939db
feat(secret): add Tier-2 seam capability (protected set/get + scheme probe)

lklimek
and
claude
committed
972cf7a
feat(secret): adopt Tier-2 per-secret passwords for HD seeds

lklimek
and
claude
committed
fd7f078
refactor(secret): clean keep-protection replacement of the downgrade subsystem (HD seed)

lklimek
and
claude
committed
6dafbda
feat(secret): adopt Tier-2 keep-protection for imported single keys

lklimek
and
claude
committed
8d17f57
fix(secret): address Smythe Tier-2 review findings (SEC-001/002/004/005)

lklimek
and
claude
committed
465f10d
docs(migration): note the wallet.uses_password/password_hint schema invariant

lklimek
and
claude
committed
904dc83

Commits on Jun 23, 2026

Commits on Jun 24, 2026

fix(identity): harden SEC-001 identity-key paths (r2 review)
lklimek
committed
cf8beab
docs(single-key): correct has_passphrase on-disk-shape doc to Tier-2-direct

lklimek
and
claude
committed
2f40b30
test(dashpay-e2e): use real curve points in tc_045 fixture (QA-008)

lklimek
and
claude
committed
925bf08
fix(wallet-backend): return WalletNotFound for an unknown seed hash (QA-002)

lklimek
and
claude
committed
ab658a4
test(core-e2e): expect SingleKeyWalletsUnsupported in tc_009 (QA-001)

lklimek
and
claude
committed
338d81a
fix(identity): compute a meaningful top-up fee after a backend reload (QA-006)

lklimek
and
claude
committed
25c97b6
test(spv-e2e): assert restart-in-place reconnect contract (QA-003)

lklimek
and
claude
committed
00d21b5
fix(wallet): gate sends on spendable balance, not confirmed (QA-010)

lklimek
and
claude
committed
3609d44
test(identity-e2e): poll for key visibility after broadcast (QA-004)

lklimek
and
claude
committed
7567087
test(harness): retry transient wallet registration with backoff (QA-013)

lklimek
and
claude
committed
a530367
test(wallet-e2e): mark tc_012 address-advance assertion PENDING (QA-005)

lklimek
and
claude
committed
3150d23
docs(wallet-lifecycle): correct stop_spv rustdoc to restart-in-place (QA-015)

lklimek
and
claude
committed
e71e68e
test(identity-e2e): widen cold-boot funding to clear top-up minimum (QA-016)

lklimek
and
claude
committed
36b6f2b
test(dashpay-e2e): defer dashpay backend-e2e module pending upstream (platform#3841)

lklimek
and
claude
committed
cf6497f
test(harness): widen funded-wallet SPV-pickup budget to 120s (QA-017)

lklimek
and
claude
committed
f2936c0
fix(identity): fail closed when opt-in protection leaves resident plaintext keys

lklimek
and
claude
committed
a0411a3
test(identity): prove the protect fail-closed guard is wired into the task (QA-001)

lklimek
and
claude
committed
dedead2
fix(fee-estimation): fall back to estimate when balance_before is stale-HIGH (RUST-001)

lklimek
and
claude
committed
a846acd
fix(identity-db): zeroize rollback clone after successful vault migration (SEC-002)

lklimek
and
claude
committed
a1cb9b4
fix(error): reword IdentityKeyProtectionIncomplete message (PROJ-002)

lklimek
and
claude
committed
3774a7a
docs(wallet-lifecycle): correct inline comment to reflect restart-in-place (RUST-002)

lklimek
and
claude
committed
1b13d43
docs(backend-e2e): fix dashpay-deferral TODO — count 12 tests, correct range to TC-046 (DOC-001)

lklimek
and
claude
committed
ed98fe6
test(backend-e2e): strengthen tc_012 with positive assertion on second address (PROJ-003)

lklimek
and
claude
committed
ec4527c
docs(harness): replace history narrative with present-state comment (PROJ-004)

lklimek
and
claude
committed
f0608db
fix(identity): fail-closed the protect guard for legacy Encrypted keys (SEC-001)

lklimek
and
claude
committed
7918d82

Commits on Jun 25, 2026

docs(wallet-lifecycle): note dash-spv reinit-window filter-gap (dashpay/rust-dashcore#824)
lklimek
committed
6d460c7

Commits on Jun 26, 2026

Merge remote-tracking branch 'origin/docs/platform-wallet-migration-design' into security/secret-handling-hardening
lklimek
committed
d63ad9f
fix(identity): preflight-verify all protected keys before unseal downgrade (SEC-001)

lklimek
and
claude
committed
b98515d
fix(fee): reject partial-stale top-up fee deltas via estimate band

lklimek
and
claude
committed
2042153
fix(identity): give legacy Encrypted keys an honest recovery instruction

lklimek
and
claude
committed
d78b930
fix(identity): minimize migrated-key plaintext residency before DB write

lklimek
and
claude
committed
e97592e
fix(identity): use the active fee estimator for the top-up estimate

lklimek
and
claude
committed
5957c1a
test(wallet): regression for WalletNotFound vs WalletNotLoaded split

lklimek
and
claude
committed
ad8738a
test(backend-e2e): drop dead single-key funding block, fix stale comment

lklimek
and
claude
committed
829c1d3
fix(identity): use the active fee estimator for the top-up-from-addresses estimate

lklimek
and
claude
committed
aa78ed7
test(backend-e2e): present-state the TC-009 header comment

lklimek
and
claude
committed
9218eb5