wt
28320ff35a
Changes: Preserve incomplete work and blocker metadata for S00-022. This checkpoint does not mark implementation accepted. Validation: Session ended with status blocked. Blocker: Pinned libomemo.js@3.0.0 supplies real embedded WASM but is a different unaudited ratchet and excludes consumer SCE; no approved decision reconciles it with S00-022 retained audited engine/persistence requirement. Task: S00-022 Agent: auto-crypto-bcd7f2a71667 Role: crypto Action: claim Status: blocked Task title: Confirm or source a verified browser/WASM-capable OMEMO2 backend for the Web client endpoint
29 lines
2.1 KiB
JSON
29 lines
2.1 KiB
JSON
{
|
|
"title": "Record an approved browser OMEMO backend sourcing strategy",
|
|
"reason": "Pinned libomemo.js@3.0.0 supplies real embedded WASM but is a different unaudited ratchet and excludes consumer SCE; no approved decision reconciles it with S00-022 retained audited engine/persistence requirement.",
|
|
"reproduction": "npm view libomemo.js@3.0.0 succeeds; pinned tarball README and bundle inspection establish candidate scope, embedded WASM and unaudited/SCE boundaries. Existing wasm-unsupported probe exits 2. See state/evidence/S00-022-auto-crypto-bcd7f2a71667.md.",
|
|
"role": "orchestrator",
|
|
"reviewer_role": "security",
|
|
"scope": [
|
|
"docs/decisions/0003-browser-backend-decision.md"
|
|
],
|
|
"outcome": "One explicit architecture/security/product-owner sourcing decision naming the retained engine browser port or authorizing bounded evaluation of an alternative, with license/support/security-assessment and persistence compatibility requirements, without waiving ENC-003/009/011.",
|
|
"steps": [
|
|
"Obtain explicit owner input naming a backend strategy; do not infer approval from candidate availability.",
|
|
"Record traceable primary sources, exact target, license/support constraints and required independent security assessment and SCE path.",
|
|
"If alternative engine is selected, require separate reviewed plan change for preservation wording before S00-022 resumes implementation.",
|
|
"Submit only the bounded decision for independent security review; do not implement crypto."
|
|
],
|
|
"acceptance": [
|
|
"Explicit owner decision is recorded; the candidate is not declared audited or interoperable without evidence.",
|
|
"Decision preserves ENC-003/009/011 and identifies remaining browser/SCE/vector/persistence checks.",
|
|
"Any engine replacement is contingent on reviewed plan change; no silent replacement or implementation occurs."
|
|
],
|
|
"checks": [
|
|
"Verify owner input and primary-source traceability for named target/license/support/security and SCE boundaries.",
|
|
"Independent security review confirms decision addresses engine/persistence preservation and contains no requirement bypass."
|
|
],
|
|
"depends_on": [],
|
|
"requires_user_input": true
|
|
}
|