harald
4ef0c414fa
feat(linux): add static musl x86_64 build, packaging, and Freedesktop integration
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 17:45:04 +02:00
harald
1f3afb1e52
fix(scripts): correct URL variable interpolation and add error check in publish script
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 17:05:15 +02:00
harald
5f2040f8bf
chore(release): bump version to 0.4.0 and update manifests
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 17:02:05 +02:00
harald
da2ddbd6ab
feat(distribution): add Scoop/Winget manifests, INSTALL.md, and Unix mount integration
2026-09-10 16:51:24 +02:00
harald
46f976b353
feat(cross-platform): add QUICKSTART.md, live crash test, and platform abstraction module
2026-09-10 16:31:57 +02:00
harald
6cb48f55d9
docs(compliance): add LEGAL.md, THIRD_PARTY_LICENSES.md, and update packaging
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 15:14:51 +02:00
harald
7ed0f51fb1
chore(release): bump version to 0.3.1 and update release notes
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 14:08:48 +02:00
harald
dae0b3b7c3
feat(resilience): implement CHAOS-01 to CHAOS-03 crash consistency and input guards
...
- CHAOS-01: write chunk and update node size atomically via write_chunk_and_update_size in a single SQLite transaction
- CHAOS-02: reject null-bytes and ASCII control characters in VFS paths and node names via validate_path_safety
- CHAOS-03: invalidate in-memory chunk cache on I/O and disk-full errors to prevent drop failure cascades
2026-09-10 13:58:39 +02:00
harald
541190cff4
feat(opsec-ux): implement HF-01 to HF-04 and VFS carrier protection
...
- HF-01: eliminate visual leaks between decoy and hidden vaults during mount
- HF-02: add secure interactive BIP-39 recovery prompt avoiding shell history
- HF-03: implement BIP-39 normalization, word index error pinpointing, and Levenshtein typo suggestions
- HF-04: add --stealth mode for silent mounting in high-risk environments
- VFS: enforce write, truncate, delete, rename, and directory removal protection for carrier node in decoy vault
2026-09-10 13:27:01 +02:00
harald
99813ae2a3
feat(security): add Win32 VirtualLock memory protection, CFA error diagnostics, and ShellBag OpSec
2026-09-10 12:27:57 +02:00
harald
90cf4927af
fix(release): normalize file paths for curl upload and upload standalone binary
2026-09-09 22:21:34 +02:00
harald
abf395627a
chore: release v0.3.0
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-09 22:00:04 +02:00
harald
fcd59dfe68
security: harden WebDAV server against Slowloris/connection starvation and fix LZ4 bomb protection
2026-09-09 21:54:05 +02:00
harald
a8fdfc674e
fix(sre): implement PRR-01 stale mount self-healing and PRR-02 win32 console close handler
2026-09-09 21:45:35 +02:00
harald
70d03df676
fix(security): implement P3 high-entropy carrier default and P5 manifest capacity guard
2026-09-09 21:33:01 +02:00
harald
771c08ff0f
fix(security): implement P1 loopback session token, P2 AAD filename binding, and P4 memory zeroization
2026-09-09 21:24:07 +02:00
harald
98bfac718f
fix(core): resolve all 12 adversarial review findings
...
- Zeroize passwords in CLI prompts, handlers, and mount authentication
- Preserve carrier_node_id when recovering Slot 0 via recovery key
- Add --slot parameter to restore-header for targeted slot recovery
- Implement online_backup and restore_from_backup using SQLite Online Backup API
- Expose 'sanctum backup' and 'sanctum restore' CLI subcommands
- Fix inactivity auto-lock by removing touch() from PROPFIND metadata/read_dir
- Support O_APPEND by setting file cursor to file size on handle creation
- Prevent data loss by implementing Drop for CarrierFile to flush dirty blocks
- Optimize CSPRNG padding to only fill unwritten slack space
- Batch carrier initialization in 500-block transactions to prevent UI/CLI freeze
- Enforce 64-byte savings threshold for LZ4 compression
- Add WebClient service diagnostic hint for Windows net use mount errors
- Add unit and integration tests covering all new features
2026-09-09 21:02:21 +02:00
harald
030ce6a1e5
feat(security): implement Phase 2 Modell A (Steganografischer Alibi-Carrier für Plausible Deniability)
2026-09-09 20:22:00 +02:00
harald
b8e4dcb614
feat(security): implement Phase 1 of Plausible Deniability hardening
2026-09-09 19:55:34 +02:00
harald
ea571d245e
fix(branding): make shield logo and Windows icon background 100% transparent
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-08 11:50:05 +02:00
harald
bb4268cb62
feat(branding): add 3D shield logo, embed Windows PE icon, and update README banner
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-08 11:24:15 +02:00
harald
952e0cb23a
docs(readme): update documentation for v0.2.0 release
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-08 10:58:23 +02:00
harald
fb154c0d2e
docs(changelog): document v0.2.0 release changes
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-08 10:51:58 +02:00
harald
5c1ac89989
chore(release): bump version to 0.2.0
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-08 10:50:33 +02:00
harald
1e6854e9f5
feat(anti-forensics): implement incremental auto-vacuum, chunk shredding, and plausible deniability
2026-09-08 10:46:24 +02:00
harald
2cb065c8c0
feat(opsec): implement inactivity auto-lock, session lock detection, and anti-leak shield
2026-09-08 10:14:31 +02:00
harald
38df3d3845
feat(windows): implement explorer shell integration, auto drive allocation, auto-open, and system tray icon
2026-09-08 10:04:24 +02:00
harald
1c8a860184
feat(recovery): implement header backup/restore, BIP-39 recovery key, and integrity verification
2026-09-08 09:49:08 +02:00
harald
2d14c64c3e
feat(compression): implement transparent LZ4 chunk compression with V1 backwards compatibility
2026-09-07 21:59:42 +02:00
harald
a9c3dd25a3
feat(cli): add passwd command for instant master password changes
2026-09-07 17:29:50 +02:00
harald
58336fc059
fix(release): let curl manage multipart boundary automatically
2026-09-07 16:57:10 +02:00
harald
83dc42dd86
fix(release): write UTF-8 without BOM for release payload
2026-09-07 16:54:46 +02:00
harald
38a8a747c7
feat(release): support loading local .env in publish script
2026-09-07 16:51:12 +02:00
harald
38c0a6dc12
chore: ignore .env and token files in git
2026-09-07 16:49:35 +02:00
harald
d15ebd8916
feat(release): add automated Gitea release publisher script
2026-09-07 16:40:49 +02:00
harald
eec1971302
feat(release): setup release management with SemVer, packaging script, and Gitea CI/CD
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-07 16:32:41 +02:00
harald
681fb0c032
Enhance CLI output: UTF-8 console codepage, VT colors, clean status cards
2026-09-07 16:01:50 +02:00
harald
a50dc04bb3
Fix percent-encoding in VFS paths and implement symlink_metadata for WebDAV MOVE
2026-09-07 15:49:19 +02:00
harald
9115596763
Initial commit: Sanctum encrypted single-file container for Windows
2026-09-07 15:40:58 +02:00
harald