Repository navigation

Sealed memory: SealedFixed, SealedDynamic, locked Prekey (#56) - #265

Merged

Slurp9187 merged 18 commits into

mainfrom

sealed-memory

Oct 19, 2026

Merged

Sealed memory: SealedFixed, SealedDynamic, locked Prekey (#56)#265
Slurp9187 merged 18 commits into
mainfrom
sealed-memory

Commits on Oct 19, 2026
- sealed: SealedFixed, SealedDynamic and a locked, wipeable Prekey (#56 S1)
  
  Slurp9187
  and
  claude
  committed
  fedf8e0
- sealed: unit, integration, lock and compile-fail tests (#56 S2)
  
  Slurp9187
  and
  claude
  committed
  177b444
- tests: sealed_lock checks the unlock with fresh pages (#56 S2)
  
  Slurp9187
  and
  claude
  committed
  68bf35e
- tests: check the pre-key unlock while its blocks are still allocated (#56 S2)
  
  Slurp9187
  and
  claude
  committed
  66c918c
- bench: sealed_vs_fixed, what sealing costs per access (#56 S3)
  
  Slurp9187
  and
  claude
  committed
  d13af9a
- docs: sealed memory in SECURITY.md, README, design note, CHANGELOG (#56 S4)
  
  Slurp9187
  and
  claude
  committed
  de02d62
- sealed: scrub the stack after each seal and open; refuse a lock on pages larger than the pre-key (#56)
  
  Slurp9187
  and
  claude
  committed
  fa6b30b
- sealed: open SealedFixed in place inside the scrubbed frame; record the residue probe (#56)
  
  Slurp9187
  and
  claude
  committed
  51ce2c2
- receipts: record the scrub falsification run (#56)
  
  Slurp9187
  and
  claude
  committed
  abfad1a
- sealed: with_role / with_role_mut on sealed roles; salts drawn without a literal (#56)
  
  Slurp9187
  and
  claude
  committed
  910a026
- changelog: with_role on sealed roles (#56)
  
  Slurp9187
  and
  claude
  committed
  511b5ae
- sealed: draw salts from SysRng words, not through Fixed (#56)
  
  Slurp9187
  and
  claude
  committed
  a652caf
- sealed: SealedDynamic opens through a method, as SealedFixed does (#56)
  
  Slurp9187
  and
  claude
  committed
  28e3355
- docs: say openly that Fixed can live on the stack, in SECURITY.md §3 and the secrecy migration note (#56)
  
  Slurp9187
  and
  claude
  committed
  966b097
- docs: Fixed's rustdoc says to keep it short-lived and passed by reference; unlink sealed types in the feature table (#56)
  
  Slurp9187
  and
  claude
  committed
  5805536
- sealed: act on two reviews of #265 (#56)
  
  Slurp9187
  and
  claude
  committed
  ad11c98
- tests: say which configuration the compile-fail snapshots are pinned to (#56)
  
  Slurp9187
  and
  claude
  committed
  02f994f
- docs: measured stack headroom and Linux lock behaviour from the third review pass (#56)
  
  Slurp9187
  and
  claude
  committed
  f798236

Commits

Commits on Oct 19, 2026