Security hardening: encrypt wallet secrets at rest + fix exec/IPC/XSS/nav, dedupe @bsv/sdk - #53

Merged

sirdeggen merged 10 commits into

security/encrypt-secrets-at-rest

Jun 19, 2026

Commits on Jun 19, 2026

security: harden exec, storage IPC, release-notes XSS, navigation, manifest proxy

sirdeggen
and
claude
committed
docs: design spec for encrypting wallet secrets at rest (#5)

sirdeggen
and
claude
committed
docs: implementation plan for encrypting secrets at rest (#5)

sirdeggen
and
claude
committed
feat(secrets): main-process safeStorage-backed secret store

sirdeggen
and
claude
committed
feat(secrets): expose secret store over IPC

sirdeggen
and
claude
committed
feat(secrets): renderer sync facade + legacy migration

sirdeggen
and
claude
committed
feat(secrets): route all secret access through encrypted store

sirdeggen
and
claude
committed
docs: mark security review #5 (secrets at rest) remediated

sirdeggen
and
claude
committed
deps: bump @bsv/* to latest; dedupe @bsv/sdk to 2.1.6

sirdeggen
and
claude
committed
package lock update
sirdeggen
committed