alvaro

alvaro opened issue alvaro/normogen#5

2026-07-18 22:22:58 +00:00

code: remove dead AccessClaims struct in backend/src/auth/claims.rs

alvaro commented on issue alvaro/normogen#4

2026-07-18 22:03:33 +00:00

All four docs in this issue are now done (uncommitted, in the working tree):

✅ docs/product/encryption.md — full rewrite to the implemented wrapped-DEK / Web Crypto model
✅…

alvaro closed issue alvaro/normogen#4

2026-07-18 22:03:33 +00:00

docs: product/encryption & persona docs badly out of sync with implemented ZK encryption

alvaro commented on issue alvaro/normogen#3

2026-07-18 22:03:14 +00:00

Correction to my earlier comment (and to issue #3 body): I wrote that the JWT carries family_id + permissions. That'''s wrong.

The real access-token Claims (backend/src/auth/jwt.rs)…

alvaro commented on issue alvaro/normogen#3

2026-07-18 20:42:32 +00:00

Started the ADR draft at docs/adr/multi-person-sharing.md (uncommitted, in the working tree).

It records the decision forced by the constraints above (per-profile DEK + X25519 envelope), spells…

alvaro commented on issue alvaro/normogen#4

2026-07-18 20:41:32 +00:00

Ok to go with the proposed fix

alvaro commented on issue alvaro/normogen#3

2026-07-18 20:39:01 +00:00

Synthesis from @alvaro's answers (2026-07-18)

The constraints rule out most options and force a concrete architecture.

alvaro commented on issue alvaro/normogen#3

2026-07-18 18:07:06 +00:00

Answers to questions plus extra info

parent and spouse each will have their login, and they may not even be the same family. Divorced parents with each their own family may want to share the…

alvaro opened issue alvaro/normogen#4

2026-07-18 15:24:48 +00:00

docs: product/encryption & persona docs badly out of sync with implemented ZK encryption

alvaro opened issue alvaro/normogen#3

2026-07-18 15:24:40 +00:00

design: multi-person / family / caregiver data sharing under zero-knowledge encryption is unsolved