feat(platform-wallet): keyring_core secret backends — encrypted-file + OS keyring (secrets feature)#3672

Open

Claudius-Maginificent wants to merge 17 commits into

feat/platform-wallet-sqlite-persistorfrom

feat/platform-wallet-storage-secrets

Commits on May 19, 2026

feat(platform-wallet-storage): SecretStore foundation — zeroizing wrappers, error, validation, MemoryStore

lklimek
and
claude
committed
feat(platform-wallet-storage): EncryptedFileStore — Argon2id + XChaCha20-Poly1305 vault

lklimek
and
claude
committed
feat(platform-wallet-storage): KeyringStore — OS keyring backend (keyring-core 4.x split)

lklimek
and
claude
committed
test(platform-wallet-storage): positive secrets guard + API-shape integration tests

lklimek
and
claude
committed
ci(platform-wallet-storage): cargo-deny advisories gate covering the secrets crypto deps

lklimek
and
claude
committed
fix(platform-wallet-storage): passphrase-verification token + hardened atomic vault write

lklimek
and
claude
committed
fix(platform-wallet-storage): map keyring-core NoStorageAccess to KeyringLocked; correct keyring-core attribution

lklimek
and
claude
committed
fix(platform-wallet-storage): MemoryStore stores SecretBytes so it zeroizes on drop

lklimek
and
claude
committed
docs(platform-wallet-storage): correct keyring-core attribution in Cargo.toml comment

lklimek
and
claude
committed
docs(platform-wallet-storage): SECRETS.md reflects the delivered SecretStore API

lklimek
and
claude
committed

Commits on May 22, 2026