Every type holding a seed, mnemonic or secret key implements Zeroize on drop and a Debug that redacts; a test runs the full v1 flow with a known test mnemonic under RUST_LOG=trace and asserts the log, the app-data directory and the SQLite file contain none of the words, the seed hex or the secret key bytes.
Acceptance
The test exists, runs in CI, and fails when a Debug derive is deliberately restored on Signer.
Parent: #10
## Scope
Every type holding a seed, mnemonic or secret key implements `Zeroize` on drop and a `Debug` that redacts; a test runs the full v1 flow with a known test mnemonic under `RUST_LOG=trace` and asserts the log, the app-data directory and the SQLite file contain none of the words, the seed hex or the secret key bytes.
## Acceptance
The test exists, runs in CI, and fails when a `Debug` derive is deliberately restored on `Signer`.
## Depends on
#17 (session), #15 (keystore).
grenade
added the child label 2026-09-15 12:42:03 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Parent: #10
Scope
Every type holding a seed, mnemonic or secret key implements
Zeroizeon drop and aDebugthat redacts; a test runs the full v1 flow with a known test mnemonic underRUST_LOG=traceand asserts the log, the app-data directory and the SQLite file contain none of the words, the seed hex or the secret key bytes.Acceptance
The test exists, runs in CI, and fails when a
Debugderive is deliberately restored onSigner.Depends on
#17 (session), #15 (keystore).