wt
07c9967d02
Changes: Add an isolated pinned mechanism wrapper using Stanza's public constructor and factory APIs, preserve the SCRAM-SHA-512 wire name and fail-closed final guard, and document the proposed ADR, browser bundle evidence, independent Scramp vectors, notices and limits. Leave parent selection, dependency experiments, specs and shared contracts unchanged. Validation: Fresh-cache npm ci and Vite browser build pass; 87 focused tests pass, including RFC HMAC vectors, original defect reproduction, independent full SHA-512 exchanges and rejected invalid finals/order/reset paths. Hashed Scramp oracle fixture comparison passes. Dependency check verifies 49 locked entries, 25 installed pins/licenses and 340 unmodified Stanza files. make check passes 72 tooling tests. Native browsers, WSS/live server interoperability and production readiness are untested; independent security review remains pending. Task: S00-019 Agent: auto-crypto-c68801170fa4 Role: crypto Action: claim Status: review Task title: Validate browser-compatible SCRAM-SHA-512 through a public mechanism API
2.7 KiB
2.7 KiB
S00: Профиль и проверка стека
Зафиксировать Web scope, browser targets и проверенные кандидаты, не устанавливая непроверенный framework по догадке.
Входной gate: нет. Выходной gate: S00-010.
Задачи
- S00-001: Утвердить Web-профиль — orchestrator; done.
- S00-002: Выбрать framework и build runtime — orchestrator; done.
- S00-003: Проверить XMPP WSS/auth библиотеку — protocol; blocked.
- S00-004: Проверить browser OMEMO backend — crypto; todo.
- S00-005: Выбрать IndexedDB wrapper и migration policy — storage; todo.
- S00-006: Зафиксировать browser/reference matrix — orchestrator; todo.
- S00-007: Утвердить password и crypto unlock модель — security; todo.
- S00-008: Описать WSS/upload/TURN/push topology — ci-cd; todo.
- S00-009: Согласовать результаты spikes — orchestrator; todo.
- S00-011: Restore verified npm registry access for the stack spike — ci-cd; done.
- S00-012: Fix runner prompt delivery after partial stdin timeout — ci-cd; done.
- S00-013: Bound oversized S21-006 runner context without truncating requirements — ci-cd; done.
- S00-014: Fix repeated runner cleanup after a submitted parent is reaped — ci-cd; done.
- S00-015: Устранить прерывание: Fix runner prompt delivery after partial stdin timeout — ci-cd; done.
- S00-016: Restore reviewer model availability after provider capacity failure — ci-cd; done.
- S00-017: Establish fail-closed SCRAM server-final validation — protocol; done.
- S00-018: Validate bounded standalone XML ingress for the XMPP candidate — protocol; done.
- S00-019: Validate browser-compatible SCRAM-SHA-512 through a public mechanism API — crypto; review.
- S00-010: Gate: Профиль и проверка стека — qa; todo.
Граница этапа
Выходной gate проверяет evidence/готовые проверки, не реализует функции за остальные задачи. Если отдельная карточка требует слишком большой контекст — split с сохранением requirements coverage.