Merge all the recent features#59

Merged

pulkitpareek18 merged 58 commits into

mainfrom

May 28, 2026

Commits on May 28, 2026

land BFSI v1 production plan under docs/plan/bfsi-v1
pulkitpareek18
committed
add ADR 0011 for dev+main branching workflow
pulkitpareek18
committed
add ADRs 0013/0014/0015 for audit chain + on-chain anchor + circuit version pin
pulkitpareek18
committed
remove demo bypass from proof-pairing submitProof
pulkitpareek18
committed
remove access_token query fallback from console SSE auth
pulkitpareek18
committed
add schema-purity test locking down tenant-scoped table columns
pulkitpareek18
committed
add hash chain to audit_events writes
pulkitpareek18
committed
add /api/admin/audit-integrity endpoint
pulkitpareek18
committed
add biometric-rejection test grepping forbidden payload keys
pulkitpareek18
committed
track audit findings and update threat model for Phase 0 closures
pulkitpareek18
committed
update CLAUDE.md with Phase 0 references and closed P0 findings
pulkitpareek18
committed
add cross-tenant source-level guard for /v1/* routes
pulkitpareek18
committed
lock circuit version with boot-time vkey hash check
pulkitpareek18
committed
mark C-7 and C-12 audit findings closed
pulkitpareek18
committed
add AuditAnchor contract with write-once daily anchors
pulkitpareek18
committed
add seed script for Anchor Bank demo tenant
pulkitpareek18
committed
add nightly CVE monitor with high-severity alert
pulkitpareek18
committed
add trusted-setup ceremony runbook for v1.2 circuit
pulkitpareek18
committed
add Android device-support matrix for tier-1 tier-2 tier-3
pulkitpareek18
committed
add Anchor Bank demo runbook with scene-by-scene operator script
pulkitpareek18
committed
add 12-month compliance roadmap v1

pulkitpareek18
authored and
Pulkit Pareek
committed
add ADR 0016 for zod input validation layer

pulkitpareek18
authored and
Pulkit Pareek
committed
add DPDP section 2t commitments memo skeleton

pulkitpareek18
authored and
Pulkit Pareek
committed
add dashboard users view with no-PII assertion
Pulkit Pareek
committed
set ADMIN_API_KEY in jest setupFiles for admin-audit tests
Pulkit Pareek
committed
add data inventory v1 + PIA template + retention policy v0
Pulkit Pareek
committed
bootstrap mobile/ Android subtree with Compose + module shell
Pulkit Pareek
committed
add kiosk web app skeleton for Scene 2 demo
Pulkit Pareek
committed
add audit-integrity dashboard view skeleton with PASS/FAIL card
Pulkit Pareek
committed
add 20-slide BFSI pitch deck storyboard v0
Pulkit Pareek
committed
add anchor-job service + audit_anchors schema (off-chain half)
Pulkit Pareek
committed
add Postgres-backed rate limit on verify and login
Pulkit Pareek
committed
add enterprise risk register v1 with 10-item baseline
Pulkit Pareek
committed
add SOC 2 control narratives batch 1 (CC1.x..CC8.1)

amitduabits
authored and
Pulkit Pareek
committed
add BFSI bank intel packs and 5-email outreach sequence
Pulkit Pareek
committed
add ADR 0017 blockchain-agnostic platform posture
Pulkit Pareek
committed
gate chain providers behind tenant security_policy opt-in
Pulkit Pareek
committed
add face-first POST /v1/identity/register endpoint
Pulkit Pareek
committed
add face-first POST /v1/identity/verify with commitment check
Pulkit Pareek
committed
add Auth0 differentiation one-pager for BFSI CIO/CISO
Pulkit Pareek
committed
expand biometric-rejection guard to compound keys
Pulkit Pareek
committed
document face-first identity endpoints in api_contract
Pulkit Pareek
committed
add source-level guard for blockchain-agnostic posture
Pulkit Pareek
committed
add mobile face capture flow with CameraX + ML Kit liveness gate
Pulkit Pareek
committed
add Deprecation + Sunset headers to legacy /v1/auth/zkp endpoints
Pulkit Pareek
committed
add mobile face embedding + commitment pipeline (no Poseidon impl yet)
Pulkit Pareek
committed
add live verifications dashboard view with SSE stream
Pulkit Pareek
committed
wire face-first dashboard views into App router
Pulkit Pareek
committed
implement Poseidon-BN128 in mobile/biometric (vendored from android/sec)
Pulkit Pareek
committed
document face-first pivot in CLAUDE.md and update audit findings
Pulkit Pareek
committed
add husky pre-commit + commit-msg hooks (closes audit C-15)
Pulkit Pareek
committed
add per-tenant CORS allowlist middleware
Pulkit Pareek
committed
Postgres-backed session store with write-through cache (closes C-9)
Pulkit Pareek
committed
migrate JWT to RS256 with JWKS endpoint and dual-issuer rollover
Pulkit Pareek
committed
vendor W3 WebView snarkjs prover into mobile/prover
Pulkit Pareek
committed
mark C-9 C-11 C-13 C-15 closed in audit-findings tracker
Pulkit Pareek
committed
fix docs site build: parse .md as CommonMark instead of MDX
Pulkit Pareek
committed
grant security-review workflow issues:write to fix 404 on PR comment
Pulkit Pareek
committed