From 78f3208db5e7285e62151cecb06c2d3c9eb4d2ae Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Fri, 2 Oct 2026 13:46:34 +0200 Subject: feat(android): device key, bundle key and node identities held natively Keystore-wrapped store, a Kotlin port of keyring.js and transcripts.js held to the shared vectors, the same keys/device/secrets bridge as the desktop, and a native confirmation before browser access is widened. Co-Authored-By: Claude Opus 5.5 --- packages/meshbay-android/README.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) (limited to 'packages/meshbay-android/README.md') diff --git a/packages/meshbay-android/README.md b/packages/meshbay-android/README.md index 8c357fe..b5ee534 100644 --- a/packages/meshbay-android/README.md +++ b/packages/meshbay-android/README.md @@ -7,7 +7,11 @@ The shell is a system WebView showing the interface **from the package** โ€” `build/generated/`, never committed (ยง8.3) โ€” with a bridge (`app/src/main/assets/bridge/meshbay-bridge.js`) that offers the page the same `window.meshbay` as the desktop preload, wherever it offers anything at all. -Hub calls leave from native code, to the signed-in hub only. +Hub calls leave from native code, to the signed-in hub only. The device key, +the bundle key and every node identity are held natively under an Android +Keystore key; the page is told public keys and handed signatures, asked for by +kind โ€” never bytes. `meshbay-hub/tests/vectors/keyring.json` holds that keyring +to the desktop's and to the specification. ```bash # needs JDK 17+ and an Android SDK (ANDROID_HOME, or sdk.dir in local.properties) @@ -18,5 +22,5 @@ Hub calls leave from native code, to the signed-in hub only. The security contract is also pinned from the Python suite by reading this source: `packages/meshbay-hub/tests/test_android_shell.py`. -Not built yet: native keys, downloads to disk, casting, phone-specific -behaviour (back button, network handover), signed releases. +Not built yet: downloads to disk, casting, phone-specific behaviour (back +button, network handover), signed releases. -- cgit v1.2.3