zeekay 8b4ed2edf8 kms/release: add F2/B4 nonce-binding regression suite ...

Five test cases asserting the audit-required nonce binding properties:

  1. Round-trip — Issue() → Release(returnedNonce) → success
  2. Wrong nonce — forged nonce ≠ issued → ErrNonceMismatch
  3. Cross-job replay — Issue(A,X) → Release(B,X) → ErrNonceMismatch
  4. Cross-epoch replay — Issue(N,A) → Rotate → Release(N+1,A) refused
  5. Double-Release — Issue → Release → Release → ErrAlreadyConsumed

All five PASS under -race. Pinned to the 23fccf2 binding fix.

2026-04-27 21:36:14 -07:00

..

api

neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings

2026-04-25 21:46:16 -07:00

backup

feat: tx lifecycle tracking, Shamir backup sharding, settlement engine

2026-03-02 14:22:05 -08:00

client

Fix remaining import formatting issues

2025-08-02 22:30:28 -05:00

common

chore: sync dependencies and format code

2026-02-04 15:47:51 -08:00

config

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2026-03-22 12:50:58 -07:00

constant

Implement connection for prod

2024-09-21 20:52:40 +07:00

custody

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

db

feat(mpc): treasury 3-of-5 + purge Postgres, SQLite-only

2026-04-18 21:07:26 -07:00

encoding

chore: sync dependencies and format code

2026-02-04 15:47:51 -08:00

encryption

fix: address red team findings — auth, TLS, KMS fallback, AAD

2026-04-07 14:06:10 -07:00

event

security: add orgID multi-tenancy isolation, rename badger to zapdb

2026-03-22 12:02:30 -07:00

eventconsumer

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2026-03-24 16:55:54 -07:00

hsm

neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings

2026-04-25 21:46:16 -07:00

identity

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

infra

Merge hanzo/mpc additions: ConsensusKV, HSM providers, policy engine, rename CLI to mpc-cli

2026-04-08 13:16:06 -07:00

integrity

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

keyinfo

Fix linting issues

2025-08-02 22:27:51 -05:00

kms

kms/release: add F2/B4 nonce-binding regression suite

2026-04-27 21:36:14 -07:00

kvstore

feat: per-user shard encryption + wallet isolation

2026-03-24 14:58:54 -07:00

logger

fix(ci): goimports formatting, no-panic logger test, remove unconvert

2026-03-01 18:40:56 -08:00

messaging

chore: remove bridge stub, fix all TODOs with real implementations

2025-12-25 10:44:16 -08:00

mpc

neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings

2026-04-25 21:46:16 -07:00

policy

Merge hanzo/mpc additions: ConsensusKV, HSM providers, policy engine, rename CLI to mpc-cli

2026-04-08 13:16:06 -07:00

protocol

feat(mpc): key listing, KMS backup/restore, API-only backend, CGGMP21 config serialization

2026-03-01 18:12:18 -08:00

settlement

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2026-03-22 12:50:58 -07:00

smart

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

threshold

fix(crypto): real Lagrange aggregation, proper ECDSA sign shares, FROST Schnorr verification

2026-03-01 18:16:57 -08:00

transport

neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings

2026-04-25 21:46:16 -07:00

txtracker

fix: goimports formatting with local-prefixes (matches golangci-lint)

2026-03-22 13:17:50 -07:00

types

security: add orgID multi-tenancy isolation, rename badger to zapdb

2026-03-22 12:02:30 -07:00

utils

Fix remaining import formatting issues

2025-08-02 22:30:28 -05:00

webauthn

fix(webauthn): F4 LAX tightening — credentialHash floor + both-must-match

2026-04-18 18:05:11 -07:00