mirror of
https://github.com/vitorpamplona/amethyst.git
synced 2026-08-09 08:04:45 +00:00
- docs/plans/2026-06-30-privacy-lock-manual-testing.md — 10-path manual QA sheet covering setup, lock behavior, timer, deep-link race, change/remove password, banner discovery, cross-run persistence. - docs/plans/2026-07-01-feat-messages-first-run-lock-banner-plan.md — design doc for the discovery banner shipped in aadbf3601. - docs/plans/2026-07-01-privacy-lock-security-review.md — honest review of PasswordHasher (PBKDF2 100k / 16B salt) + prefs storage. Flags 4 medium-severity items (iterations below OWASP 2023 rec; no versioned hash format; no UI-layer rate-limiting; unencrypted prefs storage) with concrete fixes. All within accepted threat model but P0 items are cheap and high-value follow-ups.