MeshBay — read-only public mirror https://git.meshbay.org/meshbay.git/atom?h=0.8 2026-08-13T01:56:30Z 2026-08-13T01:56:30Z Christophe Besson cbesson@gmail.com 2026-08-13T01:56:30Z urn:sha1:f0248975908ad670fa8a820f865bf22ea8d0172d Baseline commit capturing in-progress Phase 12 work that was already present in the working tree (uncommitted) before the Phase 11.5 security remediation begins. Committed as-is, without review or modification, so that remediation changes arrive as a separable diff. Contents: BundleStore (P2P GEK + keypair bundles), password split (auth_key / bundle_key), node Ed25519 auth (POST /v1/nodes/auth, node-scoped JWT), GEK-HMAC handshake proof with DTLS channel binding, Ed25519 admin challenge-response, node local admin UI rewrite, browser key persistence. Not authored in this session — captured to establish a baseline. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> 2026-08-09T02:35:31Z Christophe Besson cbesson@gmail.com 2026-08-09T02:35:31Z urn:sha1:77d76421829161df6b1ef628b4e6e051a2c3c2ee Models: User, Node, Group, GroupMember, GEKBundle, RefreshToken, IPLog. Engine configurable via MESHBAY_DATABASE_URL (asyncpg/aiosqlite). Alembic async env.py + initial_schema migration autogenerated. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> 2026-08-09T01:52:58Z Christophe Besson cbesson@gmail.com 2026-08-09T01:52:58Z urn:sha1:271adc8504aad32075d75d06fd42023877a649ec 3-package layout: meshbay-common (shared crypto/protocol), meshbay-hub (FastAPI server), meshbay-node (local daemon). Includes validated POC spikes 1-6 in poc/, architecture drafts v1/v2 in docs/, and CLAUDE.md project conventions. All cryptographic primitives extracted from POC into meshbay_common/crypto.py (GEK wrap/unwrap, chunk key derivation, keystore encryption, chunk signing). Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>