jackandGitHub b96a41054e Pin announce signing keys to stop mesh identity spoofing (#1349) ...

TOFU-pins the Ed25519 signing key per noise key so a self-consistent announce that reuses a victim's peerID+noise key with the attacker's signing key/nickname is rejected instead of overwriting the registry and persisted identity. Complements #1432: that PR's signed-LEAVE verification reads the stored signing key this PR protects from announce-path poisoning.

Rebased onto main as a single commit; swift build --build-tests green, 40/40 targeted tests incl. the spoofing e2e cases, and #1432's suites 50/50 unaffected.

2026-07-26 11:38:24 +02:00

..

AutocompleteServiceTests.swift

Expand coverage for transport, chat, and media flows (#1056)

2026-03-12 16:20:19 -10:00

BLEAnnounceHandlerTests.swift

Pin announce signing keys to stop mesh identity spoofing (#1349)

2026-07-26 11:38:24 +02:00

BLEAnnounceHandlingPolicyTests.swift

Pin announce signing keys to stop mesh identity spoofing (#1349)

2026-07-26 11:38:24 +02:00

BLEAnnounceThrottleTests.swift

Fix BLE identity state races (#1428)

2026-07-26 11:38:16 +02:00

BLEConnectionSchedulerTests.swift

Extend BLE mesh range: relax RSSI gates, lift sparse TTL clamps, faster walk-back reconnects (#1338)

2026-06-12 10:38:39 +02:00

BLEDirectedRelaySpoolTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLEFanoutSelectorTests.swift

Consolidate duplicate BLE links after restore; duplicate fragment-stream suppression; onChange coalescing (#1426)

2026-07-09 19:35:18 +02:00

BLEFileTransferHandlerTests.swift

Make panic wipe deterministic and device-bound (#1431)

2026-07-26 10:28:50 +02:00

BLEFileTransferPolicyTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLEFragmentAssemblyBufferTests.swift

Originate v2 source routes and wire fragmentIdFilter targeted resync (#1378)

2026-07-07 14:42:53 +02:00

BLEFragmentHandlerTests.swift

Reconnect hygiene: paced acks, persistent gift-wrap dedup, self-fragment sync fix (#1398)

2026-07-07 21:08:10 +02:00

BLEInboundWriteBufferTests.swift

[codex] Refine BLE ingress fanout (#1280)

2026-05-31 14:08:30 +02:00

BLEIngressLinkRegistryTests.swift

Heal peer-ID rotation: rebind link on verified announce, retire ghost peer (#1401)

2026-07-08 10:08:23 +02:00

BLEIngressPacketGuardTests.swift

Heal peer-ID rotation: rebind link on verified announce, retire ghost peer (#1401)

2026-07-08 10:08:23 +02:00

BLELinkStateStoreTests.swift

[codex] Extract BLE link state store (#1310)

2026-05-31 14:24:09 +02:00

BLELocalIdentityStateStoreTests.swift

Fix BLE identity state races (#1428)

2026-07-26 11:38:16 +02:00

BLELogRateLimiterTests.swift

[codex] Extract BLE service policy helpers (#1321)

2026-06-01 14:16:44 +02:00

BLEMaintenancePolicyTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLENoisePacketHandlerTests.swift

Bind Noise sessions to claimed peer identities; require signed leaves (#1432)

2026-07-26 10:30:55 +02:00

BLENoisePayloadFactoryTests.swift

[codex] Refactor BLE outbound scheduling and Noise queues (#1306)

2026-05-31 14:16:11 +02:00

BLENoiseSessionQueuesTests.swift

[codex] Refactor BLE outbound scheduling and Noise queues (#1306)

2026-05-31 14:16:11 +02:00

BLEOutboundFragmentPlannerTests.swift

[codex] Extract BLE service policy helpers (#1321)

2026-06-01 14:16:44 +02:00

BLEOutboundFragmentTransferSchedulerTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

BLEOutboundLinkPlannerTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

BLEOutboundNotificationBufferTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

BLEOutboundWriteBufferTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

BLEPacketFreshnessPolicyTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLEPeerEventDebouncerTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLEPeerPublishCoalescerTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLEPeerRegistryTests.swift

Pin announce signing keys to stop mesh identity spoofing (#1349)

2026-07-26 11:38:24 +02:00

BLEPeerSenderDisplayNameTests.swift

[codex] Extract BLE service policy helpers (#1321)

2026-06-01 14:16:44 +02:00

BLEPublicMessageHandlerTests.swift

Bridge dedup: content-derived stable mesh message ID (#1419)

2026-07-09 16:44:47 +02:00

BLEPublicMessagePolicyTests.swift

Expand store-and-forward: open couriers, spray-and-wait, persistent outbox, 6h public history (#1372)

2026-07-06 19:33:16 +02:00

BLEReceivePipelineTests.swift

Fix security audit findings: 3 critical, 7 high

2026-06-12 14:07:28 +02:00

BLERecentPeripheralCacheTests.swift

BLE background presence: pending-connect wake-on-proximity + wake-window maintenance (#1396)

2026-07-07 19:54:10 +02:00

BLERedundantLinkPolicyTests.swift

Consolidate duplicate BLE links after restore; duplicate fragment-stream suppression; onChange coalescing (#1426)

2026-07-09 19:35:18 +02:00

BLERouteForwardingPolicyTests.swift

Harden REQUEST_SYNC and stop gossip-sync re-send loops (#1371)

2026-07-06 19:17:26 +02:00

BLEScanDutyPolicyTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLEScheduledRelayStoreTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLESelfBroadcastTrackerTests.swift

Extract BLE and chat architecture policies (#1324)

2026-06-02 09:01:59 +02:00

BLESourceRouteFailureCacheTests.swift

Originate v2 source routes and wire fragmentIdFilter targeted resync (#1378)

2026-07-07 14:42:53 +02:00

BLESourceRouteOriginationPolicyTests.swift

Originate v2 source routes and wire fragmentIdFilter targeted resync (#1378)

2026-07-07 14:42:53 +02:00

BLESubscriptionAnnounceLimiterTests.swift

[codex] Extract BLE service policy helpers (#1321)

2026-06-01 14:16:44 +02:00

BoardAlertsModelTests.swift

Unified notices: one pin, one sheet for board pins + location notes (#1392)

2026-07-07 17:40:12 +02:00

BoardStoreTests.swift

Geohash bulletin board: persistent signed notices over mesh sync (#1379)

2026-07-07 14:13:25 +02:00

BridgeCourierServiceTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

BridgeDropDedupStoreTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

BridgeServiceTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

FavoritesPersistenceServiceTests.swift

Fix favorites end-to-end: peer-list duplicates, Nostr sync, /fav key corruption (v1.5.4) (#1367)

2026-07-06 17:17:21 +02:00

GatewayServiceTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

GeohashChatActivityTrackerTests.swift

Empty-mesh liveliness: nearby conversations, echoes, wave, dead drops, radar (#1409)

2026-07-08 13:24:44 +02:00

GeohashPresenceServiceTests.swift

Make panic wipe deterministic and device-bound (#1431)

2026-07-26 10:28:50 +02:00

GroupProtocolTests.swift

Private groups: creator-managed encrypted group chat over the mesh (#1383)

2026-07-07 15:59:55 +02:00

GroupStoreTests.swift

Private groups: creator-managed encrypted group chat over the mesh (#1383)

2026-07-07 15:59:55 +02:00

LocationStateManagerTests.swift

fix: use country-level resolution for low-precision geohashes (#1044)

2026-07-10 15:16:02 +02:00

MeshDiagnosticsTests.swift

Private groups: creator-managed encrypted group chat over the mesh (#1383)

2026-07-07 15:59:55 +02:00

MeshSightingsTrackerTests.swift

Empty-mesh liveliness: nearby conversations, echoes, wave, dead drops, radar (#1409)

2026-07-08 13:24:44 +02:00

MeshTopologyTrackerTests.swift

Originate v2 source routes and wire fragmentIdFilter targeted resync (#1378)

2026-07-07 14:42:53 +02:00

MessageOutboxStoreTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

MessageRouterTests.swift

Harden PTT audio and the 1.7.1 release (#1423)

2026-07-10 14:04:09 +02:00

NetworkActivationServiceTests.swift

Make panic wipe deterministic and device-bound (#1431)

2026-07-26 10:28:50 +02:00

NetworkReachabilityGateTests.swift

Make panic wipe deterministic and device-bound (#1431)

2026-07-26 10:28:50 +02:00

NoiseEncryptionServiceTests.swift

Bind Noise sessions to claimed peer identities; require signed leaves (#1432)

2026-07-26 10:30:55 +02:00

NostrRelayManagerTests.swift

perf: verify Nostr inbound signatures once, off the main actor (#1352)

2026-07-26 11:27:57 +02:00

NostrTransportTests.swift

Courier: deposit in parallel when the only route is a send queue (#1368)

2026-07-06 17:45:57 +02:00

NotificationServiceTests.swift

BitFoundation module to centralize shared components (#1089)

2026-04-14 14:10:03 -05:00

PrivateChatManagerTests.swift

Quality pass on the 1.7.0 batch: fix confirmed bugs, bump to 1.7.1 (#1418)

2026-07-09 16:44:02 +02:00

RelayControllerTests.swift

Public-mesh push-to-talk: signed live voice bursts in the mesh channel (#1406)

2026-07-08 09:23:16 +02:00

SecureIdentityStateManagerTests.swift

Pin announce signing keys to stop mesh identity spoofing (#1349)

2026-07-26 11:38:24 +02:00

SecureIdentityStateManagerVouchTests.swift

Transitive verification: vouch for verified peers over Noise (#1380)

2026-07-07 14:48:37 +02:00

TransferProgressManagerTests.swift

Raise positive waitUntil timeouts to 5s for loaded CI runners (#1340)

2026-06-12 10:08:42 +02:00

UnifiedNoticesTests.swift

Unified notices: one pin, one sheet for board pins + location notes (#1392)

2026-07-07 17:40:12 +02:00

UnifiedPeerServiceTests.swift

Quality pass on the 1.7.0 batch: fix confirmed bugs, bump to 1.7.1 (#1418)

2026-07-09 16:44:02 +02:00

VerificationServiceTests.swift

Remove noise service exposure; single-owner selection state

2026-06-11 15:29:07 +02:00