[SUPERSEDED by #4277] feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host - #4195

Closed

bfoss765 wants to merge 24 commits into

dashpay:v4.2-devfrom

bfoss765:followup/v4.1/keyindex-rust-allocation

Commits on Aug 4, 2026

feat(kotlin-sdk): wire-compatible encrypted txMetadata document create + decrypt-on-fetch

bfoss765
and
claude
committed
9de2ba7
test(platform-wallet): pin txMetadata wire-compat to a dashj-generated vector

bfoss765
and
claude
committed
cb08807
test(platform-wallet): pin encrypted-txMetadata FETCH to the real testnet docs + query diagnostics

bfoss765
and
claude
committed
0fbd9f1
debug(platform-wallet): warn-level stage breadcrumbs on the encrypted-document fetch path

bfoss765
and
claude
committed
471d803
fix(platform-wallet): dual-emit encrypted-document breadcrumbs through log AND tracing so they reach Android logcat

bfoss765
and
claude
committed
0793f64
fix(platform-wallet): derive txMetadata keys through the mnemonic resolver for external-signable wallets

bfoss765
and
claude
committed
a4ec62f
fix(platform-wallet): nonzero-identity wire vector; keep master xprv off the await; redact plaintext Debug; quiet breadcrumbs

bfoss765
and
claude
committed
6685b87
perf(platform-wallet): share the fetched DataContract Arc instead of deep-cloning it

bfoss765
and
claude
committed
f3370f8
fix(kotlin-sdk): reject txMetadata version bytes the legacy stack can't decode

bfoss765
and
claude
committed
af002cc
fix(platform-wallet): enforce txMetadata wire version (0|1) in Rust core + JNI, not just Kotlin

bfoss765
and
claude
committed
e510ad9
docs(txmetadata): scope legacy wire-compat to identity_index=0; relabel nonzero vector as internal slot check (#4091)

bfoss765
and
claude
committed
14af279
test(txmetadata): check in a real-DerivationPathFactory provenance verifier

bfoss765
and
claude
committed
992f09d
fix(kotlin-sdk): gate encrypted-document create/fetch through the TeardownGate

bfoss765
and
claude
committed
3c1f36e
fix(platform-wallet): pre-check txMetadata payload size before derivation/network

bfoss765
and
claude
committed
c5d1cb1
fix(platform-wallet-ffi): zeroize + drop txMetadata plaintext before broadcast await

bfoss765
and
claude
committed
b0f43e1
docs(txmetadata): mark the fetch regression test as a manual/testnet-gated check

bfoss765
and
claude
committed
b179bfb
chore(txmetadata): strip internal tracker tokens from comments

bfoss765
and
claude
committed
618edb4
test(platform-wallet): anchor ENCRYPTED_METADATA_FIELD_MAX to the contract schema

bfoss765
and
claude
committed
e27dcd3
test(txmetadata): pin an independent legacy-INSTALL wire-compat vector

bfoss765
and
claude
committed
e6a306b
fix(kotlin-sdk): zeroize + early-drop the JNI txMetadata plaintext copy

bfoss765
and
claude
committed
20a4e67
style: cargo fmt (#4186)

bfoss765
and
claude
committed
1fcdfd6
feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host

bfoss765
and
claude
committed
acffe4d
docs(keyindex): note allocator serialization and failure-gap trade-offs

bfoss765
and
claude
committed
e0a4d9c
fix(platform-wallet): validate txMetadata payload size before allocating encryptionKeyIndex

bfoss765
and
claude
committed
7d20a63

Navigation Menu

Uh oh!

[SUPERSEDED by #4277] feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host - #4195

[SUPERSEDED by #4277] feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host#4195
bfoss765 wants to merge 24 commits into
dashpay:v4.2-devfrom
bfoss765:followup/v4.1/keyindex-rust-allocation

Commits on Aug 4, 2026

feat(kotlin-sdk): wire-compatible encrypted txMetadata document create + decrypt-on-fetch

test(platform-wallet): pin txMetadata wire-compat to a dashj-generated vector

test(platform-wallet): pin encrypted-txMetadata FETCH to the real testnet docs + query diagnostics

debug(platform-wallet): warn-level stage breadcrumbs on the encrypted-document fetch path

fix(platform-wallet): dual-emit encrypted-document breadcrumbs through log AND tracing so they reach Android logcat

fix(platform-wallet): derive txMetadata keys through the mnemonic resolver for external-signable wallets

fix(platform-wallet): nonzero-identity wire vector; keep master xprv off the await; redact plaintext Debug; quiet breadcrumbs

perf(platform-wallet): share the fetched DataContract Arc instead of deep-cloning it

fix(kotlin-sdk): reject txMetadata version bytes the legacy stack can't decode

fix(platform-wallet): enforce txMetadata wire version (0|1) in Rust core + JNI, not just Kotlin

docs(txmetadata): scope legacy wire-compat to identity_index=0; relabel nonzero vector as internal slot check (#4091)

test(txmetadata): check in a real-DerivationPathFactory provenance verifier

fix(kotlin-sdk): gate encrypted-document create/fetch through the TeardownGate

fix(platform-wallet): pre-check txMetadata payload size before derivation/network

fix(platform-wallet-ffi): zeroize + drop txMetadata plaintext before broadcast await

docs(txmetadata): mark the fetch regression test as a manual/testnet-gated check

chore(txmetadata): strip internal tracker tokens from comments

test(platform-wallet): anchor ENCRYPTED_METADATA_FIELD_MAX to the contract schema

test(txmetadata): pin an independent legacy-INSTALL wire-compat vector

fix(kotlin-sdk): zeroize + early-drop the JNI txMetadata plaintext copy

style: cargo fmt (#4186)

feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host

docs(keyindex): note allocator serialization and failure-gap trade-offs

fix(platform-wallet): validate txMetadata payload size before allocating encryptionKeyIndex