2026-01-21 - 2026-07-21
Overview
9 pull requests merged by 1 user
Merged
#15 feat: hard revoke / re-key (Phase C, #3)
Merged
#14 chore: remove dead AccessClaims struct (#5)
Merged
#13 fix(security): enforce ownership on medication/appointment write paths (#12)
Merged
#11 feat: profile sharing via X25519 envelope (Phase B, #3)
Merged
#10 docs: decide multi-person ZK sharing ADR; reconcile jwt/encryption docs (#4)
Merged
#9 feat: per-profile DEKs + multi-profile (Phase A2, #3)
Merged
#8 ci: drop host port mapping for Mongo service container
Merged
#6 feat(auth): per-account X25519 identity keypair (Phase A1, #3)
Merged
#1 fix/p0-security-hardening
3 issues closed from 1 user
Closed
#5 code: remove dead AccessClaims struct in backend/src/auth/claims.rs
Closed
#12 security: medication/appointment write + delete paths don't check ownership
Closed
#4 docs: product/encryption & persona docs badly out of sync with implemented ZK encryption
5 issues created by 1 user
Opened
#3 design: multi-person / family / caregiver data sharing under zero-knowledge encryption is unsolved
Opened
#4 docs: product/encryption & persona docs badly out of sync with implemented ZK encryption
Opened
#5 code: remove dead AccessClaims struct in backend/src/auth/claims.rs
Opened
#7 Add .zcode to .gitignore
Opened
#12 security: medication/appointment write + delete paths don't check ownership