From 0e70c78e9896484f79f1cadf726dcf5861bf947c Mon Sep 17 00:00:00 2001 From: Paul Hitt Date: Fri, 4 Sep 2026 16:55:33 -0400 Subject: [PATCH] PARITY: the file round trip is proven live, not merely written MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `LiveFileTransferTest` was committed unrun, with the caveat that an unrun test proves nothing. It has now run against relay1 on the same image production runs: a Restricted document left one vault, crossed a real relay, and arrived in another's with its classification and both compartments intact. Ran alongside it, all green: 6 LiveConversationTest, 7 LiveKeyLogTest, 2 LiveSealedSenderTest, LiveSignUpTest, LiveRelayTest and the self-hosted LiveShapesTest paths — 31 live tests in total. ⚠️ The managed-account paths stay SKIPPED. They need FN_LIVE_MANAGED, which signs up against accounts.flamenet.io — production, and `LiveTarget` refuses it by design. Those accounts are real and persist. Co-Authored-By: Claude Opus 5 --- PARITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/PARITY.md b/PARITY.md index 524a953..6cc9542 100644 --- a/PARITY.md +++ b/PARITY.md @@ -369,7 +369,7 @@ the messenger rather than staying separate apps. | Local vault: add, organise, delete | ✅ index, folders, both storage modes, bulk delete with its report | | Files screen: set up, unlock, browse, add, folders, delete, promote | ✅ **verified on a device** — set up, encrypt, lock, cold-start reload, link via SAF | | The security lattice (labels, clearance) | ✅ encoding and clearance in Kotlin, pinned to independently-computed vectors. ⚠️ **Not Bell–LaPadula** — the ★-property is deliberately unenforced on both clients; see android#15 | -| Share a file into a chat or group | ✅ both directions; `LiveFileTransferTest` proves the label survives a real relay ⚠️ **unrun** | +| Share a file into a chat or group | ✅ both directions; **proven live 2026-09-04** — a Restricted document crossed two vaults through a real relay with its label intact | | Wallet engine: BIP-39, Base58, SLIP-0010 | ✅ pinned to the published vectors | | Wallet engine: address derivation and signing | ✅ BIP-44 path, Base58 address, and the engine's own RFC 8032 signs — no API-33 floor | | Wallet: BIP-39 seed, create and restore | ✅ create, import, restore, sealed at rest, with the phrase shown once and explained | -- 2.54.0