Feature: MPEG-DASH/CENC compliance + DKMS hardening + creator flow#8

Closed

irzhywau wants to merge 218 commits into

mainfrom

feat/0.5.0-with-mpeg-dash-compliance

Commits on Jun 7, 2026

Commits on Jun 8, 2026

docs(convergence): add north-star playbook, product vision PRD, and v0.4.0 plan

SashaMIT
and
cursoragent
committed
feat(decrypt-provider): vendor PC2 cenc-decrypt engine as fail-closed backend

SashaMIT
and
cursoragent
committed
fix(crosvm): compile on non-Linux hosts so 0.4.0 builds/runs on macOS

SashaMIT
and
cursoragent
committed
docs(ddrm): record decrypt-rail decision — CEK/ciphertext transport to decrypt-provider

SashaMIT
and
cursoragent
committed
feat(decrypt-provider): add tested decrypt-step core seam (Branch-by-Abstraction)

SashaMIT
and
cursoragent
committed
docs(ddrm): add isolation-tier recommendation — wasm now, microVM as hardening

SashaMIT
and
cursoragent
committed
docs(ddrm): confirm decrypt-provider compiles clean to wasm32-wasip1

SashaMIT
and
cursoragent
committed
test(decrypt-provider): WASI-sandbox smoke harness proves fail-closed execution

SashaMIT
and
cursoragent
committed
feat(key-provider): bind rights receipt + bring to wasm/WASI-proven bar

SashaMIT
and
cursoragent
committed
test(rights-provider): WASI smoke harness completes rights->key->decrypt chain parity

SashaMIT
and
cursoragent
committed
test(drm-provider): WASI smoke + cross-provider contract-seam tests

SashaMIT
and
cursoragent
committed
feat(ddrm): unified chain smoke runner + review-ready status package

SashaMIT
and
cursoragent
committed
feat(ddrm): vendor ECDH CEK-sealing envelope spec + PC2 player alignment

SashaMIT
and
cursoragent
committed
test(ddrm): pin decrypt->player consumer contract for both viewer capsules

SashaMIT
and
cursoragent
committed
docs(ddrm): security model doc + inter-stage CEK transport decision

SashaMIT
and
cursoragent
committed
docs(ddrm): Day 15 checkpoint — refresh status + prove PQ-hybrid in wasm

SashaMIT
and
cursoragent
committed
feat(encrypt-provider): pin dDRM invariant #1 (in-boundary CEK+KID) + gap

SashaMIT
and
cursoragent
committed
test(ddrm): drift guard + 0.4.0 reconciliation (force-push, zero type drift)

SashaMIT
and
cursoragent
committed
docs(convergence): add HANDOVER.md single-entry onboarding for fresh context

SashaMIT
and
cursoragent
committed
feat(decrypt-provider): prep rail-landing composition behind rail-prep flag

SashaMIT
and
cursoragent
committed
feat(encrypt-provider): close invariant #1 keygen gap with in-boundary CEK+KID

SashaMIT
and
cursoragent
committed
chore(encrypt-provider): commit Cargo.lock for in-boundary cipher/keygen deps

SashaMIT
and
cursoragent
committed
feat(decrypt-provider): de-risk PQ-hybrid CEK-seal envelope (pq-envelope island)

SashaMIT
and
cursoragent
committed
feat(decrypt-provider): prove full PQ dDRM data path end-to-end pre-rail

SashaMIT
and
cursoragent
committed
test(decrypt-provider): pin both engines with portable golden vectors

SashaMIT
and
cursoragent
committed
test(ddrm): make PC2 cross-impl conformance executable, not asserted

SashaMIT
and
cursoragent
committed
test(ddrm): promote PC2 conformance to a standing gate + widen coverage

SashaMIT
and
cursoragent
committed
docs(convergence): refresh HANDOVER to current truth (tip 8cb43b814, Days 18-24)

SashaMIT
and
cursoragent
committed
test(ddrm): pin encrypt->decrypt round-trip golden (both invariants, one artifact)

SashaMIT
and
cursoragent
committed
feat(ddrm): rail transport shim behind a flag — the rail becomes a flag flip

SashaMIT
and
cursoragent
committed
test(ddrm): pin rail carrier as a portable golden + PC2 session-level conformance

SashaMIT
and
cursoragent
committed
docs(convergence): refresh HANDOVER to current truth (tip 363d75b09, Days 25-28)

SashaMIT
and
cursoragent
committed
test(ddrm): PQ carrier golden through the shim — profile symmetry closed

SashaMIT
and
cursoragent
committed
decrypt-provider: widen cenc golden + PC2 conformance to real playback shapes

SashaMIT
and
cursoragent
committed
decrypt-provider: wire real ML-DSA-65 (FIPS 204) into the CekSealVerifier slot

SashaMIT
and
cursoragent
committed
decrypt-provider: verify real ML-DSA-65 through the rail entrypoint (carrier golden)

SashaMIT
and
cursoragent
committed
decrypt-provider: adversarial negative-space + containment sweep (harden feature)

SashaMIT
and
cursoragent
committed
chore(ddrm): make the verification gate authoritative over the full ladder + refresh handover

SashaMIT
and
cursoragent
committed
chore(ddrm): reconcile-prep — widen drift guard to full consumed surface, button-press rebase recipe, gate the encrypt<->decrypt seam

SashaMIT
and
cursoragent
committed
test(ddrm): widen the encrypt<->decrypt round-trip to real playback shapes (multi-sample + subsample)

SashaMIT
and
cursoragent
committed
test(ddrm): prove PC2's real decrypt consumes the producer's output (multi-sample + subsample)

SashaMIT
and
cursoragent
committed
refactor(encrypt-provider): reconcile sealed output to shared elastos-common types (retire Day-16 self-containment)

SashaMIT
and
cursoragent
committed
chore(ddrm): integrity audit — map every claim to its gate; wire WASI smoke into ddrm-verify (gate 4/4)

SashaMIT
and
cursoragent
committed
feat(decrypt-provider): hybrid ECDSA-P256 + ML-DSA-65 seal verifier — pre-prove Anders' other Q2 answer

SashaMIT
and
cursoragent
committed
chore(decrypt-provider): lock ecdsa/rfc6979/signature deps for pq-mldsa-hybrid

SashaMIT
and
cursoragent
committed
docs(convergence): verify fix/crosvm-darwin-build green on macOS; record in push plan

SashaMIT
and
cursoragent
committed
docs(convergence): build-verify push queue #3 (bincode-2x) + #2 (home-resilience) on macOS

SashaMIT
and
cursoragent
committed

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Commits on Jun 11, 2026

Commits on Jun 12, 2026

feat(ddrm): creator mint spine + dKMS quorum provisioning + mac dev launcher

SashaMIT
and
cursoragent
committed

Commits on Jun 13, 2026

Commits on Jun 14, 2026

Commits on Jun 15, 2026

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Commits on Jun 19, 2026

Commits on Jun 20, 2026

Commits on Jun 27, 2026

feat(creator): creator capsule UI + media-provider + gateway creator route + marketplace contracts

SashaMIT
and
claude
committed

Commits on Jun 29, 2026

dev: added debug profile at build
irzhywau
committed