# Capability Spec Delta: crypto-keys (crypto-spec-restore-versioning)

**Status**: PROPOSED — capability removal

> The `@suaveplan/crypto-keys` package was deleted from genesis as part of the archived change `restore-crypto-fold-keys-vault` (folded into `@suaveplan/crypto`). The live spec at `openspec/specs/crypto/spec.md:204-207` already asserts the package's absence (`grep -rln "@suaveplan/crypto-keys" packages/` MUST return zero matches). This delta removes the orphan stub `openspec/specs/crypto-keys/spec.md` so the corpus stops self-contradicting.

## REMOVED Requirements

### Requirement: Device key creation

**Reason**: The `@suaveplan/crypto-keys` package was deleted from the genesis monorepo (`packages/crypto/crypto-keys/` does not exist). The device-key surface (`createDeviceKey`, `BaseKeySchema` device metadata) was deferred from `crypto-completion` to a follow-up `crypto-keys-port` change that has not been opened. Documenting the requirement now would leave a forward-looking spec with no implementing test, exactly the failure mode this parent change exists to fix.

**Migration**: No migration is needed because the package and its surface never existed on genesis. If `crypto-keys-port` is ever opened, that change will re-introduce its own requirements with backing tests; until then, the requirement does not belong in the live spec corpus.

### Requirement: Device key derivation from master

**Reason**: Same as above — the `deriveDeviceKeyFromMaster` surface was deferred and is not implemented anywhere in `packages/`.

**Migration**: None.

### Requirement: Device UUID generation

**Reason**: Same as above — `generateDeviceUUID` is not implemented in any genesis package.

**Migration**: None.

### Requirement: Device metadata extraction and comparison

**Reason**: Same as above — `extractDeviceMetadata`, `compareDeviceKeys`, `isValidDeviceKey` are not implemented in any genesis package.

**Migration**: None.

### Requirement: generateDerivedDeviceId back-compat alias

**Reason**: Same as above — `generateDerivedDeviceId` is not implemented in any genesis package.

**Migration**: None.