Build Capsule's offline end-to-end encrypted data plane#321

Merged

justin13888 merged 13 commits into

feat-core-data-plane

Jun 1, 2026

Commits on May 31, 2026

feat(core): add crypto module foundation with streaming SHA-256
justin13888
committed
feat(core): canonical CBOR encoder (RFC 8949 §4.2)
justin13888
committed
feat(core): crypto primitives, RNG, HKDF-SHA512, Argon2id pwkdf
justin13888
committed
feat(core): key hierarchy — hybrid sigs, DEK KEM, master key, AMKs, keystore
justin13888
committed
feat(core): asset STREAM + metadata-blob encryption
justin13888
committed
feat(core): AlbumAuthority seam + signature-backed ReferenceAuthority
justin13888
committed
feat(core): signed manifests, provenance chain, and verify_asset chokepoint
justin13888
committed
feat(core): pure threat-model validation invariants
justin13888
committed
feat(core): CRDT metadata, Sidecar v1, and privacy-on-export
justin13888
committed
feat(core): backup artifact (export/restore) + escrow + Shamir
justin13888
committed
feat(core): lifecycle Workspace — end-to-end offline data plane integration
justin13888
committed
feat(cli): 'capsule demo' end-to-end data-plane showcase
justin13888
committed
docs: add DEFERRED.md (deferred work + seams left in place)
justin13888
committed