secret handling audit and a test that greps for known test secrets #50

New Issue

grenade · 2026-09-15T12:41:19Z

grenade commented

2026-09-15 12:41:19 +00:00

Parent: #10

Scope

Every type holding a seed, mnemonic or secret key implements Zeroize on drop and a Debug that redacts; a test runs the full v1 flow with a known test mnemonic under RUST_LOG=trace and asserts the log, the app-data directory and the SQLite file contain none of the words, the seed hex or the secret key bytes.

Acceptance

The test exists, runs in CI, and fails when a Debug derive is deliberately restored on Signer.

Depends on

#17 (session), #15 (keystore).

Parent: #10 ## Scope Every type holding a seed, mnemonic or secret key implements `Zeroize` on drop and a `Debug` that redacts; a test runs the full v1 flow with a known test mnemonic under `RUST_LOG=trace` and asserts the log, the app-data directory and the SQLite file contain none of the words, the seed hex or the secret key bytes. ## Acceptance The test exists, runs in CI, and fails when a `Debug` derive is deliberately restored on `Signer`. ## Depends on #17 (session), #15 (keystore).

grenade added the child label 2026-09-15 12:42:03 +00:00

grenade referenced this issue

2026-09-15 12:42:48 +00:00

epic: security hardening and release readiness #10

grenade referenced this issue from a commit

2026-09-16 07:24:59 +00:00

feat: the updater, offered never applied; and a test that greps for secrets

grenade closed this issue

2026-09-16 07:24:59 +00:00

Sign in to join this conversation.