Cyphrme/Cyphr

View on GitHub

Cyphr: Authentication for the Internet

Stars: 3
Forks: 0
Open beginner issues: 0
Indexed issues: 66
Avg merge: 1d 42m
Merged PRs (30d): 11

Dominant language: Rust
License: No license data
Last GitHub push: Apr 26, 2026
Latest indexed: Sep 15, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Open All

66 open issues indexed

Follow-ups found during the EML/EMT refactor Open

Cyphrme/Cyphr#16 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Golden test fixtures don't yet carry a value they're now checked against Open

tech-debt

Cyphrme/Cyphr#20 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Storage consistency model for horizontal scaling: eml log is a cache, target is partitioned single-writer-per-principal Open

documentation

Cyphrme/Cyphr#26 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Audit write path for a per-principal (not global) single-writer invariant before horizontal scaling Open

documentation

Cyphrme/Cyphr#27 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Audit unjustified runtime panics in production code (.unwrap()/.expect()) Open

tech-debt

Cyphrme/Cyphr#37 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support one-way, permanent conversion of a Principal Tree EMT to an EML Open

enhancement

Cyphrme/Cyphr#40 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Follow-ups found during the server-readiness effort Open

Cyphrme/Cyphr#41 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
No principal cache: every write replays full history from cold storage Open

tech-debt

Cyphrme/Cyphr#42 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Follow-ups found during the server authentication effort Open

Cyphrme/Cyphr#58 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Two terminal identity states may be unreachable through any real action Open

Cyphrme/Cyphr#70 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Design doc overstates which identifiers trigger automatic refresh Open

Cyphrme/Cyphr#72 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Workspace test suite has a cross-crate race isolated to cyphr-server's presence in the build Open

Cyphrme/Cyphr#79 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Genesis recovery: constituent keys can be genuinely absent from wire content Open

enhancement tech-debt

Cyphrme/Cyphr#80 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Three more unwrap_or(HashAlg::Sha256) sites default an empty algorithm list, not an ambiguous digest length Open

Cyphrme/Cyphr#81 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Follow-ups found during the server receipts effort Open

Cyphrme/Cyphr#88 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Keyless login: audience-not-configured branch returns a generic 500 instead of an honest capability-absence response Open

tech-debt

Cyphrme/Cyphr#97 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Unchecked `commit_count - 1` subtraction in receipt sequence computation rests on an implicit invariant Open

tech-debt

Cyphrme/Cyphr#98 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`Envelope::is_signed()` reads as a trust predicate but only checks wire shape Open

tech-debt

Cyphrme/Cyphr#99 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Equivocation detection has two latent gaps once key rotation is wired live Open

tech-debt

Cyphrme/Cyphr#100 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Server key-rotation path has no caller in the shipped binary Open

tech-debt

Cyphrme/Cyphr#101 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Receipt/tip root-set is carried by three separately-shaped types Open

tech-debt

Cyphrme/Cyphr#102 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Spec question: may a frozen principal close itself? Open

Cyphrme/Cyphr#104 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Follow-ups found during the server admission and revocation effort Open

Cyphrme/Cyphr#108 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Whole-tree treefmt drift: ~96 files fail --fail-on-change Open

Cyphrme/Cyphr#110 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Flaky test: cyphr-cli test_export_import_roundtrip fails ~10% of runs Open

Cyphrme/Cyphr#111 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Naked-revoke acknowledgment is unsigned even for an attestor server Open

Cyphrme/Cyphr#113 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Invite tokens: multi-use / expiring support (deferred) Open

Cyphrme/Cyphr#117 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Test brittleness: exhaustive ServeArgs literal blocks new config fields Open

Cyphrme/Cyphr#119 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Inconsistent error-body shape on malformed vs absent request fields Open

Cyphrme/Cyphr#122 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Config: reject a too-small max_body_bytes, not only zero Open

Cyphrme/Cyphr#126 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Optional: sound per-identity write-rate limiting (post-verification), if a need appears Open

Cyphrme/Cyphr#127 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Per-principal storage-byte quota was never implemented Open

Cyphrme/Cyphr#129 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Define witness attestation semantics: what does a signed tip report assert about currency? Open

question security

Cyphrme/Cyphr#139 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Witness protocol remediation — tracking Open

correctness security

Cyphrme/Cyphr#141 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Witness/MSS surface not covered by the remediation audit Open

tech-debt

Cyphrme/Cyphr#142 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Equivocation is evadable by choosing among a principal's valid identifier encodings Open

correctness security

Cyphrme/Cyphr#146 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Absent commit root is signalled by an empty string rather than by type Open

correctness tech-debt

Cyphrme/Cyphr#147 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
A malformed witness report reads as "no equivocation" to every consumer Open

security

Cyphrme/Cyphr#148 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Identifier decoder canonicality is relied on but never tested Open

security tech-debt

Cyphrme/Cyphr#150 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Witness sync accepts a replayed authority response as current Open

security tech-debt

Cyphrme/Cyphr#152 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Authenticated witness sync cannot be enabled from the command line Open

enhancement security

Cyphrme/Cyphr#153 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Storage never binds a derived genesis to the identifier it stores under Open

correctness security

Cyphrme/Cyphr#154 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
A zero commit count is guarded in one place and decremented unchecked in three Open

correctness tech-debt

Cyphrme/Cyphr#156 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Witness registration handlers discard the storage write result Open

bug correctness

Cyphrme/Cyphr#158 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Anchor resolution doc claims an unconditional guarantee Open

documentation

Cyphrme/Cyphr#159 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Cross-witness equivocation detection cannot run in a deployed server Open

enhancement security

Cyphrme/Cyphr#160 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Module comment cites a witness-mode specification that was never written Open

documentation

Cyphrme/Cyphr#161 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
A bearer token outlives revocation of the key that authorized it Open

security

Cyphrme/Cyphr#162 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Doc comments cite a paper sentence that does not exist in it Open

documentation

Cyphrme/Cyphr#164 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Doc comments carry internal process identifiers nothing defines Open

documentation tech-debt

Cyphrme/Cyphr#165 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

Cyphrme/Cyphr

Get new issues in your inbox