feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host (stacked on #4186)#4195

Open

bfoss765 wants to merge 23 commits into

dashpay:v4.1-devfrom

bfoss765:followup/v4.1/keyindex-rust-allocation

Commits on Jul 22, 2026

feat(kotlin-sdk): wire-compatible encrypted txMetadata document create + decrypt-on-fetch

bfoss765
and
claude
committed
test(platform-wallet): pin txMetadata wire-compat to a dashj-generated vector

bfoss765
and
claude
committed
test(platform-wallet): pin encrypted-txMetadata FETCH to the real testnet docs + query diagnostics

bfoss765
and
claude
committed
debug(platform-wallet): warn-level stage breadcrumbs on the encrypted-document fetch path

bfoss765
and
claude
committed
fix(platform-wallet): dual-emit encrypted-document breadcrumbs through log AND tracing so they reach Android logcat

bfoss765
and
claude
committed
fix(platform-wallet): derive txMetadata keys through the mnemonic resolver for external-signable wallets

bfoss765
and
claude
committed
fix(platform-wallet): nonzero-identity wire vector; keep master xprv off the await; redact plaintext Debug; quiet breadcrumbs

bfoss765
and
claude
committed
perf(platform-wallet): share the fetched DataContract Arc instead of deep-cloning it

bfoss765
and
claude
committed
fix(kotlin-sdk): reject txMetadata version bytes the legacy stack can't decode

bfoss765
and
claude
committed
fix(platform-wallet): enforce txMetadata wire version (0|1) in Rust core + JNI, not just Kotlin

bfoss765
and
claude
committed
docs(txmetadata): scope legacy wire-compat to identity_index=0; relabel nonzero vector as internal slot check (#4091)

bfoss765
and
claude
committed
test(txmetadata): check in a real-DerivationPathFactory provenance verifier

bfoss765
and
claude
committed
fix(kotlin-sdk): gate encrypted-document create/fetch through the TeardownGate

bfoss765
and
claude
committed
fix(platform-wallet): pre-check txMetadata payload size before derivation/network

bfoss765
and
claude
committed
fix(platform-wallet-ffi): zeroize + drop txMetadata plaintext before broadcast await

bfoss765
and
claude
committed
docs(txmetadata): mark the fetch regression test as a manual/testnet-gated check

bfoss765
and
claude
committed
chore(txmetadata): strip internal tracker tokens from comments

bfoss765
and
claude
committed
test(platform-wallet): anchor ENCRYPTED_METADATA_FIELD_MAX to the contract schema

bfoss765
and
claude
committed
test(txmetadata): pin an independent legacy-INSTALL wire-compat vector

bfoss765
and
claude
committed
fix(kotlin-sdk): zeroize + early-drop the JNI txMetadata plaintext copy

bfoss765
and
claude
committed
feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host

bfoss765
and
claude
committed
docs(keyindex): note allocator serialization and failure-gap trade-offs

bfoss765
and
claude
committed
fix(platform-wallet): validate txMetadata payload size before allocating encryptionKeyIndex

bfoss765
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host (stacked on #4186)#4195

feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host (stacked on #4186)#4195
bfoss765 wants to merge 23 commits into
dashpay:v4.1-devfrom
bfoss765:followup/v4.1/keyindex-rust-allocation

Commits on Jul 22, 2026

feat(kotlin-sdk): wire-compatible encrypted txMetadata document create + decrypt-on-fetch

test(platform-wallet): pin txMetadata wire-compat to a dashj-generated vector

test(platform-wallet): pin encrypted-txMetadata FETCH to the real testnet docs + query diagnostics

debug(platform-wallet): warn-level stage breadcrumbs on the encrypted-document fetch path

fix(platform-wallet): dual-emit encrypted-document breadcrumbs through log AND tracing so they reach Android logcat

fix(platform-wallet): derive txMetadata keys through the mnemonic resolver for external-signable wallets

fix(platform-wallet): nonzero-identity wire vector; keep master xprv off the await; redact plaintext Debug; quiet breadcrumbs

perf(platform-wallet): share the fetched DataContract Arc instead of deep-cloning it

fix(kotlin-sdk): reject txMetadata version bytes the legacy stack can't decode

fix(platform-wallet): enforce txMetadata wire version (0|1) in Rust core + JNI, not just Kotlin

docs(txmetadata): scope legacy wire-compat to identity_index=0; relabel nonzero vector as internal slot check (#4091)

test(txmetadata): check in a real-DerivationPathFactory provenance verifier

fix(kotlin-sdk): gate encrypted-document create/fetch through the TeardownGate

fix(platform-wallet): pre-check txMetadata payload size before derivation/network

fix(platform-wallet-ffi): zeroize + drop txMetadata plaintext before broadcast await

docs(txmetadata): mark the fetch regression test as a manual/testnet-gated check

chore(txmetadata): strip internal tracker tokens from comments

test(platform-wallet): anchor ENCRYPTED_METADATA_FIELD_MAX to the contract schema

test(txmetadata): pin an independent legacy-INSTALL wire-compat vector

fix(kotlin-sdk): zeroize + early-drop the JNI txMetadata plaintext copy

feat(platform-wallet): allocate txMetadata encryptionKeyIndex in Rust, not the host

docs(keyindex): note allocator serialization and failure-gap trade-offs

fix(platform-wallet): validate txMetadata payload size before allocating encryptionKeyIndex