alvaro
0 followers · 0 following
  • Joined on 2025-09-05
Repositories
2
 Projects Packages Public activity Starred repositories
alvaro created branch fix/12-write-path-ownership in alvaro/normogen 2026-07-19 15:00:16 +00:00
alvaro pushed to fix/12-write-path-ownership at alvaro/normogen 2026-07-19 15:00:16 +00:00
ff185a60e4 fix(security): enforce ownership on medication/appointment write paths (#12)
alvaro commented on issue alvaro/normogen#3 2026-07-19 14:53:01 +00:00
design: multi-person / family / caregiver data sharing under zero-knowledge encryption is unsolved

✅ Phase B merged (PR #11 → main, commit d59487f)

The X25519-envelope sharing primitive is on main. An owner can share a profile to another account; the recipient reads the profile's…

alvaro merged pull request alvaro/normogen#11 2026-07-19 14:51:58 +00:00
feat: profile sharing via X25519 envelope (Phase B, #3)
alvaro pushed to main at alvaro/normogen 2026-07-19 14:51:58 +00:00
d59487fa3b Merge pull request 'feat: profile sharing via X25519 envelope (Phase B, #3)' (#11) from feat/3-phase-b-profile-sharing into main
d0efecf38f fix(sharing): gate falls back to direct ownership before share check
e28135bc08 test(share): fix query-string encoding + write-status assertion
04520539aa feat: profile sharing via X25519 envelope (Phase B, #3)
Compare 4 commits »
alvaro commented on pull request alvaro/normogen#11 2026-07-19 14:41:14 +00:00
feat: profile sharing via X25519 envelope (Phase B, #3)

Second CI failure diagnosed + fixed (commit d0efecf)

After the test-only fix, zk_integration_tests::medication_stored_as_ciphertext_not_plaintext failed: it creates a medication with…

alvaro pushed to feat/3-phase-b-profile-sharing at alvaro/normogen 2026-07-19 14:40:45 +00:00
d0efecf38f fix(sharing): gate falls back to direct ownership before share check
alvaro commented on pull request alvaro/normogen#11 2026-07-19 13:38:08 +00:00
feat: profile sharing via X25519 envelope (Phase B, #3)

Test failures diagnosed + fixed (commit e28135b)

Three share_tests failed in CI (run 137). All were test-side bugs, not handler bugs:

  1. **public_key_lookup_returns_recipient_identity_key*…
alvaro pushed to feat/3-phase-b-profile-sharing at alvaro/normogen 2026-07-19 13:37:42 +00:00
e28135bc08 test(share): fix query-string encoding + write-status assertion
alvaro opened issue alvaro/normogen#12 2026-07-19 10:30:50 +00:00
security: medication/appointment write + delete paths don't check ownership
alvaro commented on issue alvaro/normogen#3 2026-07-19 10:22:11 +00:00
design: multi-person / family / caregiver data sharing under zero-knowledge encryption is unsolved

Phase B landed (PR #11, not yet merged)

feat/3-phase-b-profile-sharing implements the X25519-envelope sharing primitive from the ADR §3. An owner can now share a profile to…

alvaro created pull request alvaro/normogen#11 2026-07-19 10:21:45 +00:00
feat: profile sharing via X25519 envelope (Phase B, #3)
alvaro created branch feat/3-phase-b-profile-sharing in alvaro/normogen 2026-07-19 10:21:12 +00:00
alvaro pushed to feat/3-phase-b-profile-sharing at alvaro/normogen 2026-07-19 10:21:12 +00:00
04520539aa feat: profile sharing via X25519 envelope (Phase B, #3)
alvaro pushed to main at alvaro/normogen 2026-07-19 09:47:20 +00:00
015a99a7fe Merge pull request 'docs: decide multi-person ZK sharing ADR; reconcile jwt/encryption docs (#4)' (#10) from docs/3-4-encryption-persona-docs-reconciliation into main
e322145ffb docs: decide multi-person ZK sharing ADR; reconcile jwt/encryption docs
Compare 2 commits »
alvaro merged pull request alvaro/normogen#10 2026-07-19 09:47:19 +00:00
docs: decide multi-person ZK sharing ADR; reconcile jwt/encryption docs (#4)
alvaro pushed to main at alvaro/normogen 2026-07-19 09:46:55 +00:00
7409077355 Merge pull request 'feat: per-profile DEKs + multi-profile (Phase A2, #3)' (#9) from feat/3-phase-a2-per-profile-deks into main
706df11f15 fix(auth): wrong password returns Ok(false), not Err
eb2c2aa546 feat: per-profile DEKs + multi-profile (Phase A2, #3)
Compare 3 commits »
alvaro merged pull request alvaro/normogen#9 2026-07-19 09:46:54 +00:00
feat: per-profile DEKs + multi-profile (Phase A2, #3)
alvaro created pull request alvaro/normogen#10 2026-07-19 09:43:40 +00:00
docs: decide multi-person ZK sharing ADR; reconcile jwt/encryption docs (#4)
alvaro commented on pull request alvaro/normogen#9 2026-07-19 05:29:45 +00:00
feat: per-profile DEKs + multi-profile (Phase A2, #3)

Test failure diagnosed + fixed (commit 706df11)

The failing login_with_wrong_password_is_rejected test expected 401 for a wrong password but got 500 "authentication error".

Root…