Repository navigation

Admit held email credential presentations behind a default-off flag - #393

Draft

samgbafa wants to merge 29 commits into

mainfrom

skgbafa/tc-1452-held-admission

Draft

Admit held email credential presentations behind a default-off flag#393
samgbafa wants to merge 29 commits into
mainfrom
skgbafa/tc-1452-held-admission

Commits on Oct 20, 2026
- Admit held email credential presentations behind a default-off flag
  Naomi
  committed
  cce6e7a
- Regenerate separate workspace lockfiles for node-server dependencies
  Naomi
  committed
  60ad477
- Enforce held claims, expiry cap and maxAgeSeconds pin
  Naomi
  committed
  f0c4844
Commits on Oct 21, 2026
- Harden held email verifier against beta.31 reference rules
  Naomi
  committed
  59f16b6
- Expire held nonces and refuse malformed owner as client error
  Naomi
  committed
  0b86665
- Match beta.31 held-presentation refusals; commit TS differential table
  dryrun
  committed
  25fdd10
- Refuse seconds above 59 in held RFC 3339; commit reproducible differential generator
  dryrun
  committed
  647a068
- Cover held admission gates, handler order, and strict Ed25519 (TC-1452, TC-1541)
  dryrun
  committed
  9f3eb78
- Refuse undisclosed claims, pin held route gate, and use spec issuer (TC-1452, TC-1541)
  dryrun
  committed
  2fb689d
- Merge remote-tracking branch 'origin/main' into skgbafa/tc-1452-held-admission
  dryrun
  committed
  235ec77
- Wrap mint_held_presentation signature for rustfmt (TC-1452)
  dryrun
  committed
  5c5fbac
- Regenerate S1 differential from js-sdk #645 with literal email issuer
  dryrun
  committed
  1e9171b
- test(held): pin admission refusals for requirement, max-age, kid, casing, credential type
  dryrun
  committed
  143bad7
- test(held): pin v3 issuer signature to verify_strict
  dryrun
  committed
  4c40dc9
- test(held): pin presentation-capabilities-mismatch label for non-array capabilities
  dryrun
  committed
  253ca13
- test(held): pin v3 presentation capabilities and binding refusals
  dryrun
  committed
  c2cdf7c
- fix(held): match TS audience origin, did:pkh casing, and SIWE millisecond times
  dryrun
  committed
  78bd705
- test(held): regenerate S1 differential from published sdk-core beta.37
  dryrun
  committed
  b2e8417
- docs(changelog): note held credential admission under unreleased
  dryrun
  committed
  71035f3
- test(held): pin high-S SIWE refusal; correct recovery comment
  dryrun
  committed
  36bc627
- test(held): build high-S fixture without deprecated GenericArray calls
  dryrun
  committed
  0092ee2
- test(held): pin credential-field shape refusal on the flag-on route
  dryrun
  committed
  cf100fc
- Rebuild TS differential table to 333 cases with explicit deviations
  dryrun
  committed
  5752aa1
- Point high-S comments at the recorded differential deviation
  dryrun
  committed
  c93a3ac
- Let held test harness pin explicit credential issuer and custom projections
  dryrun
  committed
  f7936e0
- Add real-time held mint fixture and mint-path tests
  dryrun
  committed
  76c55cd
- Add non-canonical S at group order refusal test for issuer signatures
  dryrun
  committed
  414b048
- test(held): pin disclosed vct on the held route and the signed-credential path
  dryrun
  committed
  93100bf
- held: index held_credential_nonce.expires_at; pin caps and v3 S+L
  dryrun
  committed
  922f02f

Commits

Commits on Oct 20, 2026

Commits on Oct 21, 2026