diff options
| author | Christophe Besson <cbesson@gmail.com> | 2026-09-01 16:05:16 +0200 |
|---|---|---|
| committer | Christophe Besson <cbesson@gmail.com> | 2026-09-01 16:05:16 +0200 |
| commit | 8a6294b0412a86f378c6e2e937c28de64a903c91 (patch) | |
| tree | 20d1977d9148a2c86c62925c5be7e571815c9057 /CLAUDE.md | |
| parent | 854a9441ccb734c7fbb1e0ff8570b9ef659c09b0 (diff) | |
| download | meshbay-8a6294b0412a86f378c6e2e937c28de64a903c91.tar.gz | |
docs: move root docs into docs/ and archive superseded drafts
Move the remaining root-level .md files (except CLAUDE.md) into docs/:
devel-phases.md, devel-phases-next.md, first-review.md, second-review.md,
tmp-decisions.md. Update all inbound references in CLAUDE.md (now docs/-prefixed)
and strip the now-redundant docs/ prefix from links inside the moved files.
Consolidate the superseded material into docs/old-draft.md: architecture
drafts v1-v4, POC v1, and the Phase 1-12 development log, each under an
ARCHIVED banner with a preamble pointing at the current specs. Delete the
merged originals plus the unreferenced French translations (v1-fr, v2-fr,
poc-v1-fr). Repoint the surviving file-links in first-review.md,
second-review.md and meshbay-draft-v5.md at old-draft.md; prose "draft-v3 §x"
mentions are left as-is since the content now lives in the archive.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J74kj44q6REczub8XR3DRy
Diffstat (limited to 'CLAUDE.md')
| -rw-r--r-- | CLAUDE.md | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -104,7 +104,7 @@ Scope: `hub`, `node`, `common`, or omitted for cross-cutting - **Never log GEK, private keys, or plaintext passwords** — even at DEBUG level - **meshbay.org is internet-facing** — open port → test → close port + kill processes in same block -## First security review (2026-08-10) — see `first-review.md` +## First security review (2026-08-10) — see `docs/first-review.md` **Critical (before Phase 7):** - **C1** Chat: Sender Keys protocol, NOT shared Double Ratchet (pairwise protocol @@ -167,9 +167,9 @@ Scope: `hub`, `node`, `common`, or omitted for cross-cutting **Architecture validated:** crypto primitives, GEK wrapping (ECIES), trust model, key hierarchy, on-the-fly encryption, transport abstraction, DTLS channel binding. -## Second security review (2026-08-13) — see `second-review.md` +## Second security review (2026-08-13) — see `docs/second-review.md` -**6 critical, 7 high findings. Phase 11.5 is BLOCKING — see `devel-phases-next.md`.** +**6 critical, 7 high findings. Phase 11.5 is BLOCKING — see `docs/devel-phases-next.md`.** The current build must not host real private data. The claims above about node sovereignty and P2P crypto material were **overstated**. The @@ -644,7 +644,7 @@ anything that assumes one key per person. both advance it, producing key/nonce reuse: that is C1 again, one level down. `GroupSenderKeyStore.add_sender` currently does `self._states[dist.sender_id] = ...`, so a second device under the same `sender_id` silently overwrites the first. Revoking a - device must rotate, like revoking a member. See `devel-phases-next.md` §15.0b + device must rotate, like revoking a member. See `docs/devel-phases-next.md` §15.0b - Chat is plaintext on the wire and at rest; the index is plaintext on the WebRTC path ## Known calibration TODOs |