0.32 spec, vectors and engine: multi-device, sealed first contact, Unlisted, anonymous reads, padding; §7 covers the PQ keys #71

Merged
paulhitt merged 18 commits from release/0-32-spec into main 2026-10-09 18:50:01 +00:00
paulhitt commented 2026-10-09 18:32:22 +00:00 (Migrated from gitlab.com)

What the 0.32 apps are held to. Three parts:

  1. privacy/sweep-2026-10 (to 5a5b7e7): SPEC §8.9d, 8.11, 8.12, 14.5, 16.2.1, 17, 21.4 and 23; vectors padding-v1, sync-merge-v1, handle-cert-v1, links-v1 and the backup payload keys; the reference engine and client for padding, linking, sync, Requests, sealed first contact and anonymous reads.
  2. interop/0-32-swift-sources (379ac7b): the Swift interop driver builds from the 0.32 iOS release tree (seven files added to test/interop/build.sh). test/interop-swift-kotlin.mjs: 77 passed, 0 failed, iOS and Android release/0.32.0.
  3. §7 with the post-quantum identities (841492d), the owner's decision of 2026-10-09: iOS's rule (audit H3) is the protocol. The iPhone and the Android app showed different numbers for one pair because only iOS folded the ik_pq fingerprints in. SafetyNumber.computeWithPQ in the engine; protocol-v1.json gains safetyNumberPQ (every other key unchanged; the iOS engine reproduces it).

Local: conformance 217, ratchet 35, client 289, vault 26, secret sweep, spec counts, doc references and exports all pass. Merges into main e5c9cb8 without conflicts.

Both apps pin the merged sha after this lands.

🤖 Generated with Claude Code

What the 0.32 apps are held to. Three parts: 1. **privacy/sweep-2026-10** (to 5a5b7e7): SPEC §8.9d, 8.11, 8.12, 14.5, 16.2.1, 17, 21.4 and 23; vectors padding-v1, sync-merge-v1, handle-cert-v1, links-v1 and the backup payload keys; the reference engine and client for padding, linking, sync, Requests, sealed first contact and anonymous reads. 2. **interop/0-32-swift-sources** (379ac7b): the Swift interop driver builds from the 0.32 iOS release tree (seven files added to `test/interop/build.sh`). `test/interop-swift-kotlin.mjs`: 77 passed, 0 failed, iOS and Android release/0.32.0. 3. **§7 with the post-quantum identities** (841492d), the owner's decision of 2026-10-09: iOS's rule (audit H3) is the protocol. The iPhone and the Android app showed different numbers for one pair because only iOS folded the `ik_pq` fingerprints in. `SafetyNumber.computeWithPQ` in the engine; `protocol-v1.json` gains `safetyNumberPQ` (every other key unchanged; the iOS engine reproduces it). Local: conformance 217, ratchet 35, client 289, vault 26, secret sweep, spec counts, doc references and exports all pass. Merges into main e5c9cb8 without conflicts. Both apps pin the merged sha after this lands. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
paulhitt commented 2026-10-09 18:50:01 +00:00 (Migrated from gitlab.com)

mentioned in commit 50fcc9992e

mentioned in commit 50fcc9992e81b294091e23ee1a72923899d4db1c
paulhitt (Migrated from gitlab.com) merged commit 50fcc9992e into main 2026-10-09 18:50:01 +00:00
Sign in to join this conversation.