feat(kotlin-sdk)!: keystore rework — policy-alias split, layered key recovery, durable repair, structured signer errors (stacked on #4191) - #4183

Merged

QuantumExplorer merged 32 commits into

dashpay:v4.2-devfrom

bfoss765:port/v4.1/android-integration

Aug 4, 2026

Commits on Aug 3, 2026

fix(kotlin-sdk): unmanaged-identity local reads return absence, not NotFound

bfoss765
and
claude
committed
eddabee
feat(kotlin-sdk): typed SigningKeyUnavailable for missing signing keys

bfoss765
and
claude
committed
787fbe6
feat(kotlin-sdk): split identity-key Keystore aliases by security policy

bfoss765
and
claude
committed
b1349ec
feat(kotlin-sdk): degrade lockless AUTH_GATED writes to the device-bound alias, honestly

bfoss765
and
claude
committed
33b37cc
feat(kotlin-sdk): layered identity-key retrieve ladder with cheap/probing capability split

bfoss765
and
claude
committed
716447e
feat(kotlin-sdk): queryable pendingIdentityKeys state for watch-only key failures

bfoss765
and
claude
committed
5eb4ab5
feat(kotlin-sdk): make the pending-repair signal durable across restart (Room 7→8)

bfoss765
and
claude
committed
2a87a03
feat(kotlin-sdk): force-replace and verify in identity-key repair

bfoss765
and
claude
committed
aabb555
feat(kotlin-sdk)!: map platform-wallet code 98 to typed PlatformWallet.NotFound

bfoss765
and
claude
committed
a1302aa
feat(sdk-ffi): structured SigningKeyUnavailable discriminator across the signer wire

bfoss765
and
claude
committed
b14762c
test(kotlin-sdk): adapt instrumented Keystore tests to the policy-alias split

bfoss765
and
claude
committed
b666177
docs(sdk): record Keystore-rework parity divergences, code-31 capability, and Room v8 shift

bfoss765
and
claude
committed
858cdae
fix(kotlin-sdk): disprove replaced-alias ownership before counting a closed auth window as recoverable

bfoss765
and
claude
committed
e6a6591
fix(kotlin-sdk): surface KeyPermanentlyInvalidatedException as the typed signer code on the first attempt

bfoss765
and
claude
committed
052d1a5
fix(kotlin-sdk): make a sign-time key invalidation durably repairable for legacy-alias keys

bfoss765
and
claude
committed
510e4d6
docs(kotlin-sdk): correct the marker-fallback rationale; note the rung-2 TOCTOU window

bfoss765
and
claude
committed
32b69f8
fix(kotlin-sdk): rethrow KeyPermanentlyInvalidatedException from the former-RSA rung

bfoss765
and
claude
committed
1d0e230
fix(kotlin-sdk): derive identity-key repair from persisted breadcrumbs and verify the pubkey before persisting

bfoss765
and
claude
committed
30e062d
fix(kotlin-sdk): make the durable identity-key repair write fail closed

bfoss765
and
claude
committed
4aa19d5
fix(kotlin-sdk): narrow the KeyMint lockless-keygen classifier to authoritative signals

bfoss765
and
claude
committed
97debea
fix(kotlin-sdk): rethrow CancellationException from the best-effort policy-alias migration

bfoss765
and
claude
committed
c96355b
docs(kotlin-sdk): align DEVICE_BOUND KDoc with the software-keystore fallback

bfoss765
and
claude
committed
5986a64
fix(kotlin-sdk): make identity-key repair ownership check HASH160-aware (#4183)

bfoss765
and
claude
committed
faf7e60
fix(kotlin-sdk): stop treating Keystore error code 4 as no-lock-screen (#4183)

bfoss765
and
claude
committed
9418671
fix(kotlin-sdk): don't fail open on invalidation bookkeeping / load cancellation (#4183)

bfoss765
and
claude
committed
d30e7c8
fix(example): probe off-Main and label key-health by recoverability (#4183)

bfoss765
and
claude
committed
260f9a2
fix(kotlin-sdk): keystore review blockers (PR #4183)

bfoss765
and
claude
committed
0561819
fix(kotlin-sdk): complete native sign token on cancellation (#4183 review)

bfoss765
and
claude
committed
166e877
fix(kotlin-sdk): clear pending repair entries on identity/wallet deletion (+ code-31 classification) (#4183 review)

bfoss765
and
claude
committed
6c67607
fix(platform-wallet): preserve signer code 31 through stringifying operation wrappers

bfoss765
and
claude
committed
b31a52d
fix(platform-wallet): extend signer code 31 preservation to sibling operation wrappers

bfoss765
and
claude
committed
8387858

Commits on Aug 4, 2026

chore(kotlin-sdk): resolve v4.2-dev merge conflicts
QuantumExplorer
committed
6e076c0

Navigation Menu

Uh oh!

feat(kotlin-sdk)!: keystore rework — policy-alias split, layered key recovery, durable repair, structured signer errors (stacked on #4191) - #4183

feat(kotlin-sdk)!: keystore rework — policy-alias split, layered key recovery, durable repair, structured signer errors (stacked on #4191)#4183
QuantumExplorer merged 32 commits into
dashpay:v4.2-devfrom
bfoss765:port/v4.1/android-integration

Commits on Aug 3, 2026

fix(kotlin-sdk): unmanaged-identity local reads return absence, not NotFound

feat(kotlin-sdk): typed SigningKeyUnavailable for missing signing keys

feat(kotlin-sdk): split identity-key Keystore aliases by security policy

feat(kotlin-sdk): degrade lockless AUTH_GATED writes to the device-bound alias, honestly

feat(kotlin-sdk): layered identity-key retrieve ladder with cheap/probing capability split

feat(kotlin-sdk): queryable pendingIdentityKeys state for watch-only key failures

feat(kotlin-sdk): make the pending-repair signal durable across restart (Room 7→8)

feat(kotlin-sdk): force-replace and verify in identity-key repair

feat(kotlin-sdk)!: map platform-wallet code 98 to typed PlatformWallet.NotFound

feat(sdk-ffi): structured SigningKeyUnavailable discriminator across the signer wire

test(kotlin-sdk): adapt instrumented Keystore tests to the policy-alias split

docs(sdk): record Keystore-rework parity divergences, code-31 capability, and Room v8 shift

fix(kotlin-sdk): disprove replaced-alias ownership before counting a closed auth window as recoverable

fix(kotlin-sdk): surface KeyPermanentlyInvalidatedException as the typed signer code on the first attempt

fix(kotlin-sdk): make a sign-time key invalidation durably repairable for legacy-alias keys

docs(kotlin-sdk): correct the marker-fallback rationale; note the rung-2 TOCTOU window

fix(kotlin-sdk): rethrow KeyPermanentlyInvalidatedException from the former-RSA rung

fix(kotlin-sdk): derive identity-key repair from persisted breadcrumbs and verify the pubkey before persisting

fix(kotlin-sdk): make the durable identity-key repair write fail closed

fix(kotlin-sdk): narrow the KeyMint lockless-keygen classifier to authoritative signals

fix(kotlin-sdk): rethrow CancellationException from the best-effort policy-alias migration

docs(kotlin-sdk): align DEVICE_BOUND KDoc with the software-keystore fallback

fix(kotlin-sdk): make identity-key repair ownership check HASH160-aware (#4183)

fix(kotlin-sdk): stop treating Keystore error code 4 as no-lock-screen (#4183)

fix(kotlin-sdk): don't fail open on invalidation bookkeeping / load cancellation (#4183)

fix(example): probe off-Main and label key-health by recoverability (#4183)

fix(kotlin-sdk): keystore review blockers (PR #4183)

fix(kotlin-sdk): complete native sign token on cancellation (#4183 review)

fix(kotlin-sdk): clear pending repair entries on identity/wallet deletion (+ code-31 classification) (#4183 review)

fix(platform-wallet): preserve signer code 31 through stringifying operation wrappers

fix(platform-wallet): extend signer code 31 preservation to sibling operation wrappers

Commits on Aug 4, 2026

chore(kotlin-sdk): resolve v4.2-dev merge conflicts