SuavePlan/suaveplan
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial Commit

Browse Source
This commit is contained in:
admin
2026-05-27 23:29:53 +01:00
commit fbc70f96e6
10000 changed files with 1102152 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
openspec/archive/2026-05-02-crypto-cipher-spec-conformance/specs/crypto-cipher/spec.md Normal file
View File

@@ -0,0 +1,21 @@
# Capability Spec Delta: crypto-cipher (spec-conformance)
**Package**: `@suaveplan/crypto-cipher`
**Status**: PROPOSED
This delta annotates each existing requirement in `openspec/specs/crypto-cipher/spec.md` with a `**Verified by:**` line. No requirement semantics change.
## MODIFIED Requirements
| Requirement | Verified by |
|---|---|
| Universal AEAD primitive surface | `tests/spec-conformance.test.ts` AND `src/primitives/{aes-256-gcm,chacha20-poly1305,xchacha20-poly1305}/*.test.ts` |
| Per-primitive replaceability | `tests/spec-conformance.test.ts` (impl files + banner) AND per-primitive `throws PrimitiveNotImplemented` |
| Vendored noble source (Phase 0.5) | `tests/spec-conformance.test.ts::"is a Phase-0.5 forward gate; current state is pre-0.5 (noble dep + no vendored/)"` |
| Dangerous-tier CI gate | `tests/spec-conformance.test.ts::"every native is a stub today, so no AEAD has been flipped without an audit"` |
| Constant-time block-cipher and MAC implementation | `tests/spec-conformance.test.ts` (every native still a `PrimitiveNotImplemented` stub) |
| Nonce handling is the caller's responsibility | `tests/spec-conformance.test.ts::"no primitive source file consumes a CSPRNG (no Math.random / crypto.getRandomValues / randomBytes)"` AND per-primitive `rejects wrong nonce length` |
## Newly added tests in this change
- `tests/spec-conformance.test.ts` — pins layout, GENERATED banner, Phase-0.5 consistency, dangerous-tier runtime reflection, native-stub state, and the no-internal-CSPRNG invariant.