Paul HittandClaude Opus 5
3973d244b6
The WordPress and PHP server are gone: the relay is now a Swift service that owns the whole protocol surface, runs from a Dockerfile with Postgres beside it, and serves its own pages so a fresh install explains itself instead of answering with a 404. Roadmap work that could be closed by code is closed. Device keys are appended to an RFC 6962 transparency log before they can be served, and clients demand an inclusion proof and gossip log heads to each other inside the encrypted channel, so a server that tells two people different stories is contradicted by the two people. Devices can carry an ML-DSA-65 identity alongside the classical one, verified as a hybrid. Both engines reproduce a published vector file, so a third implementation has something to check itself against rather than our code to read. AUDIT-SCOPE.md gives an auditor the trust boundaries, the assets by consequence, and five falsifiable claims to attack. The site is written for someone who wants a private messenger, not for someone who already knows what a ratchet is. Protocol names live behind the developer section and in the spec; the landing page talks about locks and keys. The caveats stay — what the server can see, what plain mode trades away, that no outside audit has happened — phrased as things worth knowing rather than as confessions. Also fixed in passing: the FAQ carried id="faq" but not class="faq", so its accordion styling had never applied; the mobile menu button shrank to three zero-width bars in the nav's flex row; and the hero's gradient panel was sized as a percentage of hero height, so it climbed over the copy whenever the text wrapped further than expected. Secrets are now ignored rather than merely absent. .env holds the database password, the at-rest key, the issuer signing seed and the Stripe secret, and the issuer seed cannot be rotated without invalidating every token already issued. 472 assertions pass across the five suites. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
8 lines
77 B
Plaintext
8 lines
77 B
Plaintext
.build/
|
|
*.sqlite
|
|
*.sqlite-*
|
|
Dockerfile
|
|
.dockerignore
|
|
.env
|
|
docker-compose.yml
|