Repository navigation
Add reviewed attachments and current-member recovery for v0.6.3 - #28
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds encrypted attachments and creator-signed, recipient-sealed current-epoch recovery for identities already admitted to a group. This prepares version 0.6.3 on top of v0.6.2 while preserving its strict Ed25519 validation, private fragment links, client parity and contact-addition design. Recovery does not admit strangers, add voting authority, or disclose prior epoch keys.
The Python receiver retains creator/admin restrictions and separately verifies gateway delegation or matching quorum evidence. Tests cover removed/nonmember recipients, wrong identity/context, malformed controls, expired archived withdrawals, rekey arrival-order convergence and legacy invitation compatibility. The bounded macOS teardown correction recognizes an owned process's transient exiting state without accepting a live process as cleaned up.
Validation: 613 Python tests plus 3 subtests passed (one explicit network skip), 406 TypeScript tests passed, TypeScript build and release metadata/lock/generated-help checks passed. The normal maintained-client and cross-surface GitHub gates run on this PR and again for the release tag. Existing v0.6.2 notes and workflows are retained.