an unlock session: password in, signatures out, auto-lock, nothing else #17

New Issue

grenade · 2026-09-15T12:37:51Z

grenade commented

2026-09-15 12:37:51 +00:00

Parent: #2

Scope

A Session in wallet-core that holds decrypted key material in memory behind a mutex, with unlock(password), lock(), an idle timer, and sign(account, payload, context). Tauri commands: unlock, lock, is_locked, and every signing command routes through the session. Password-only for now; the OS keychain is a separate follow-up child.

Acceptance

Every command that needs a key returns WalletError::Locked when locked. Idle for the configured interval locks. A memory dump of the process after lock() does not contain the seed (test with a known test seed and a scan of /proc/self/mem on Linux).

Depends on

The keystore child.

Parent: #2 ## Scope A `Session` in `wallet-core` that holds decrypted key material in memory behind a mutex, with `unlock(password)`, `lock()`, an idle timer, and `sign(account, payload, context)`. Tauri commands: `unlock`, `lock`, `is_locked`, and every signing command routes through the session. Password-only for now; the OS keychain is a separate follow-up child. ## Acceptance Every command that needs a key returns `WalletError::Locked` when locked. Idle for the configured interval locks. A memory dump of the process after `lock()` does not contain the seed (test with a known test seed and a scan of `/proc/self/mem` on Linux). ## Depends on The keystore child.

grenade added the child label 2026-09-15 12:38:59 +00:00

grenade referenced this issue

2026-09-15 12:39:21 +00:00

app shell: navigation, lock screen, network switcher and settings that persist #25

grenade referenced this issue

2026-09-15 12:41:11 +00:00

a threat model in the repo that matches the code #48

grenade referenced this issue

2026-09-15 12:41:19 +00:00

secret handling audit and a test that greps for known test secrets #50

grenade referenced this issue

2026-09-15 12:42:33 +00:00