A Session in wallet-core that holds decrypted key material in memory behind a mutex, with unlock(password), lock(), an idle timer, and sign(account, payload, context). Tauri commands: unlock, lock, is_locked, and every signing command routes through the session. Password-only for now; the OS keychain is a separate follow-up child.
Acceptance
Every command that needs a key returns WalletError::Locked when locked. Idle for the configured interval locks. A memory dump of the process after lock() does not contain the seed (test with a known test seed and a scan of /proc/self/mem on Linux).
Depends on
The keystore child.
Parent: #2
## Scope
A `Session` in `wallet-core` that holds decrypted key material in memory behind a mutex, with `unlock(password)`, `lock()`, an idle timer, and `sign(account, payload, context)`. Tauri commands: `unlock`, `lock`, `is_locked`, and every signing command routes through the session. Password-only for now; the OS keychain is a separate follow-up child.
## Acceptance
Every command that needs a key returns `WalletError::Locked` when locked. Idle for the configured interval locks. A memory dump of the process after `lock()` does not contain the seed (test with a known test seed and a scan of `/proc/self/mem` on Linux).
## Depends on
The keystore child.
grenade
added the child label 2026-09-15 12:38:59 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Parent: #2
Scope
A
Sessioninwallet-corethat holds decrypted key material in memory behind a mutex, withunlock(password),lock(), an idle timer, andsign(account, payload, context). Tauri commands:unlock,lock,is_locked, and every signing command routes through the session. Password-only for now; the OS keychain is a separate follow-up child.Acceptance
Every command that needs a key returns
WalletError::Lockedwhen locked. Idle for the configured interval locks. A memory dump of the process afterlock()does not contain the seed (test with a known test seed and a scan of/proc/self/memon Linux).Depends on
The keystore child.