feat(platform-wallet): keyring_core secret backends — encrypted-file + OS keyring (secrets feature) - #3672

Merged

lklimek merged 58 commits into

feat/platform-wallet-sqlite-persistorfrom

feat/platform-wallet-storage-secrets

May 29, 2026

Commits on May 19, 2026

feat(platform-wallet-storage): SecretStore foundation — zeroizing wrappers, error, validation, MemoryStore

lklimek
and
claude
committed
72a4eca
feat(platform-wallet-storage): EncryptedFileStore — Argon2id + XChaCha20-Poly1305 vault

lklimek
and
claude
committed
183c9f3
feat(platform-wallet-storage): KeyringStore — OS keyring backend (keyring-core 4.x split)

lklimek
and
claude
committed
bfbb551
test(platform-wallet-storage): positive secrets guard + API-shape integration tests

lklimek
and
claude
committed
e3ac1a6
ci(platform-wallet-storage): cargo-deny advisories gate covering the secrets crypto deps

lklimek
and
claude
committed
029753f
fix(platform-wallet-storage): passphrase-verification token + hardened atomic vault write

lklimek
and
claude
committed
1c55f89
fix(platform-wallet-storage): map keyring-core NoStorageAccess to KeyringLocked; correct keyring-core attribution

lklimek
and
claude
committed
0a7c3f0
fix(platform-wallet-storage): MemoryStore stores SecretBytes so it zeroizes on drop

lklimek
and
claude
committed
884d470
docs(platform-wallet-storage): correct keyring-core attribution in Cargo.toml comment

lklimek
and
claude
committed
1256cb8
docs(platform-wallet-storage): SECRETS.md reflects the delivered SecretStore API

lklimek
and
claude
committed
1c29698

Commits on May 20, 2026

chore(platform-wallet-storage,ci): drop cargo-deny, flip secrets default-on

lklimek
and
claude
committed
2c7927b
refactor(platform-wallet-storage): adopt keyring_core SPI for secret backends

lklimek
and
claude
committed
123f908
docs(platform-wallet-storage): SECRETS.md + lib root reflect keyring_core SPI

lklimek
and
claude
committed
f733d38
test(platform-wallet-storage): default-build proof for the secrets surface

lklimek
and
claude
committed
18a0655
fix(platform-wallet-storage): forbid == on SecretBytes/SecretString (EDIT-4)

lklimek
and
claude
committed
3eefec2

Commits on May 22, 2026

Commits on May 25, 2026

Merge remote-tracking branch 'origin/feat/platform-wallet-sqlite-persistor' into feat/platform-wallet-storage-secrets
lklimek
committed
34c8ecb

Commits on May 26, 2026

Merge branch 'feat/platform-wallet-sqlite-persistor' into feat/platform-wallet-storage-secrets
lklimek
committed
db7b6b5

Commits on May 27, 2026

Commits on May 28, 2026

Commits on May 29, 2026