security: full audit fixes (2C, 4H, 7M, 5L) - #19

Merged

YairEtzion merged 14 commits into

mainfrom

security/audit-fixes-2026-04

Apr 5, 2026

Commits on Apr 5, 2026

security(shell-cipher): fix H3 — DoS via counter desync on injected frame
YairEtzion
committed
c181849
security(shell-handshake): fix C1 — MITM via unbound selfSig
YairEtzion
committed
fef493b
security(relay): fix M1, H4, H1 — hardening bundle for server.ts
YairEtzion
committed
1b0c3de
security(bootstrap-token): fix M6 — enforce iat, alg, scope, single_use
YairEtzion
committed
ac70128
security(keystore): fix H2 — store encrypted-file passphrase separately
YairEtzion
committed
31c63d0
security(relay): fix M2, M3, L3 — session cap, watcher race, constant-time agent store
YairEtzion
committed
bd2baf5
security(agent,cli): fix M4 — listener leak + orphan bash on relay reconnect
YairEtzion
committed
599b3e4
security(sdk): fix M5 — middleware now hashes raw body, refuses parsed-object
YairEtzion
committed
d427a71
security(keystore): fix M7 — TPM sig format + SPKI public-key decode
YairEtzion
committed
c1cae03
security(sdk,keystore): fix L2, L4 — auth header parser + DER parser hardening
YairEtzion
committed
07f1dde
security(keystore): fix L5 — deterministic canonical JSON for allow-list HMAC
YairEtzion
committed
8f9c6cb
security(sdk): fix L6 — bootstrap ack message uses delimiter + domain prefix
YairEtzion
committed
956eb2a
docs: full security-audit writeup and spec/landpage updates
YairEtzion
committed
03d790a
chore(lint): clean up eslint errors in new security tests
YairEtzion
committed
276250a