feat(device): add configurable automatic lock and Vault Format 2 (#140) - #152

Merged

miso-develop merged 30 commits into

mainfrom

task/140-device-auto-lock

Sep 16, 2026

Commits on Sep 16, 2026

feat(vault): define dual vault format contract for #140
miso-develop
committed
b8469a6
feat(vault): add PT2 and AAD2 codec support for #140
miso-develop
committed
852bd34
feat(vault): bind AEAD to vault format version for #140
miso-develop
committed
3c677c1
feat(runtime): model automatic lock policy for #140
miso-develop
committed
4988070
feat(runtime): enforce continuous unlock lifetime policy for #140
miso-develop
committed
edfc811
feat(runtime): preserve format and policy across rekey for #140
miso-develop
committed
d8549f9
feat(storage): persist vault formats 1 and 2 in schema 2
miso-develop
committed
220a914
fix(runtime): verify plaintext format while listing credentials
miso-develop
committed
0e73e51
refactor(provisioning): carry monotonic unlock time to VMK sink
miso-develop
committed
eda2903
refactor(provisioning): preserve existing VMK sink interface
miso-develop
committed
444756f
feat(provisioning): start unlock lifetime from monotonic runtime
miso-develop
committed
b7307c1
refactor(provisioning): share explicit and automatic lock boundary
miso-develop
committed
b43c0a3
feat(provisioning): enforce automatic lock through explicit lock boundary
miso-develop
committed
44804c0
test(vault): cover PT2 AAD2 and legacy PT1 compatibility
miso-develop
committed
444f961
test(runtime): cover format transitions and automatic lock policy
miso-develop
committed
92db90a
test(runtime): pin automatic lock security invariants
miso-develop
committed
4ee9659
test(protocol): pin automatic lock and vault format contract
miso-develop
committed
4a7a4c0
ci(security): run automatic lock protocol contract
miso-develop
committed
b3fb394
test(protocol): verify post-commit auto-lock ordering
miso-develop
committed
44d18cb
test(device): follow consolidated unlock-state cleanup boundary
miso-develop
committed
333539c
build(provisioning): declare esp_timer monotonic dependency
miso-develop
committed
058dc65
test(device): preserve literal newline contract escapes
miso-develop
committed
f3903cd
test(device): keep unrelated StickS3 contracts unchanged
miso-develop
committed
0796518
fix(runtime): preserve recovery reset for known-format corruption
miso-develop
committed
579347e
fix(runtime): preserve auto-lock origin across VMK rekey boundary
miso-develop
committed
f1b0845
fix(runtime): keep unlock lifetime through VMK rekey
miso-develop
committed
3966556
test(runtime): keep automatic lock origin across VMK rekey
miso-develop
committed
9c5df91
test(runtime): align rekey boundary contract with fixed lifetime
miso-develop
committed
1e85c8c
fix(protocol): lock immediately when rekey reaches deadline
miso-develop
committed
953a8e3
test(protocol): enforce due auto-lock after VMK rekey
miso-develop
committed
1375cac