alvaro

alvaro commented on issue alvaro/normogen#3

2026-07-20 01:34:00 +00:00

design: multi-person / family / caregiver data sharing under zero-knowledge encryption is unsolved

✅ Phase C merged (PR #15 → main, commit dabbea2)

Hard revoke / re-key is on main. An owner can rotate a profile's DEK — re-encrypting all the profile's data client-side under a fresh…

alvaro pushed to main at alvaro/normogen

2026-07-20 01:32:57 +00:00

dabbea2483 Merge pull request 'feat: hard revoke / re-key (Phase C, #3)' (#15) from feat/3-phase-c-rekey into main

6d6af67f2f fix(rekey): echo stored DEK values in response, not the pre-image

bf5aeedbc2 feat: hard revoke / re-key (Phase C, #3)

Compare 3 commits »

alvaro merged pull request alvaro/normogen#15

2026-07-20 01:32:55 +00:00

feat: hard revoke / re-key (Phase C, #3)

alvaro commented on issue alvaro/normogen#5

2026-07-20 01:15:33 +00:00

code: remove dead AccessClaims struct in backend/src/auth/claims.rs

Closed via PR #14 (merged). backend/src/auth/claims.rs is deleted; the JWT ADR's open item is marked done. The live Claims/RefreshClaims in backend/src/auth/jwt.rs are the only definitions.

alvaro pushed to feat/3-phase-c-rekey at alvaro/normogen

2026-07-20 01:13:54 +00:00

6d6af67f2f fix(rekey): echo stored DEK values in response, not the pre-image

alvaro pushed to main at alvaro/normogen

2026-07-20 01:09:32 +00:00

668ea59030 chore: remove dead AccessClaims struct (#5)

alvaro deleted branch chore/5-remove-dead-claims from alvaro/normogen

2026-07-20 01:09:32 +00:00

alvaro merged pull request alvaro/normogen#14

2026-07-20 01:09:31 +00:00

chore: remove dead AccessClaims struct (#5)

alvaro closed issue alvaro/normogen#5

2026-07-20 01:09:31 +00:00

code: remove dead AccessClaims struct in backend/src/auth/claims.rs

alvaro commented on issue alvaro/normogen#3

2026-07-19 18:16:41 +00:00

design: multi-person / family / caregiver data sharing under zero-knowledge encryption is unsolved

Phase C landed (PR #15, not yet merged)

feat/3-phase-c-rekey implements hard revoke / re-key (ADR §4). An owner can rotate a profile's DEK: generate a fresh key, re-encrypt…

alvaro created pull request alvaro/normogen#15

2026-07-19 18:16:13 +00:00

feat: hard revoke / re-key (Phase C, #3)

alvaro created branch feat/3-phase-c-rekey in alvaro/normogen

2026-07-19 18:15:42 +00:00

alvaro pushed to feat/3-phase-c-rekey at alvaro/normogen

2026-07-19 18:15:42 +00:00

bf5aeedbc2 feat: hard revoke / re-key (Phase C, #3)

alvaro created pull request alvaro/normogen#14

2026-07-19 15:24:01 +00:00

chore: remove dead AccessClaims struct (#5)

alvaro created branch chore/5-remove-dead-claims in alvaro/normogen

2026-07-19 15:23:32 +00:00

alvaro pushed to chore/5-remove-dead-claims at alvaro/normogen

2026-07-19 15:23:32 +00:00

668ea59030 chore: remove dead AccessClaims struct (#5)

alvaro merged pull request alvaro/normogen#13

2026-07-19 15:20:15 +00:00

fix(security): enforce ownership on medication/appointment write paths (#12)

alvaro closed issue alvaro/normogen#12

2026-07-19 15:20:15 +00:00

security: medication/appointment write + delete paths don't check ownership

alvaro pushed to main at alvaro/normogen

2026-07-19 15:20:15 +00:00

76fd5a8c26 Merge pull request 'fix(security): enforce ownership on medication/appointment write paths (#12)' (#13) from fix/12-write-path-ownership into main

ff185a60e4 fix(security): enforce ownership on medication/appointment write paths (#12)

Compare 2 commits »

alvaro created pull request alvaro/normogen#13

2026-07-19 15:00:57 +00:00

fix(security): enforce ownership on medication/appointment write paths (#12)