peach-android / 3f8929c5bbd2

fix: resolve assessment PEACH-AND-REPORT-001 open items, gate green (v2.10.20) PEACH-AND-01-003 FIXED: SecureFlagEffect() added to EntryDetailScreen and EntryEditScreen — the two secret-bearing screens the coverage test named. Release was already covered window-wide; this closes the debug exposure and restores the regression guardrail. PEACH-AND-01-001 FIXED: release gate green again. - Lint NewApi at PasskeyCallerOrigin.kt:52 resolved with a fail-closed Build.VERSION.SDK_INT < 28 guard inside resolve(); passkey callers remain API-34-gated, no annotation cascade. - SyncOutcomeTest: VAULT_LOCKED encoded as warning (intentional since v2.9.35; confirmed against SyncOutcomeReason.kt). - SettingsStackTest: 17dp deck reservation (gap constant 6dp -> 1dp). - SecureFlagCoverageTest centralization test now asserts the current SecureWindowPolicy API (setUserSecure/acquire/release/leases/clearFlags). Gate: 924 tests / 0 failures / 0 errors, lint 0 errors, assembleRelease OK. PEACH-AND-01-002: formal written risk acceptance for the intentional autofill posture (origin verification removed in v2.10.7; picker tap is the trust boundary) recorded in docs/security-findings-verification-2026-08-03.md with owner, rationale, residual risk, and review trigger. Report upgraded to PEACH-AND-REPORT-001 v1.1.0 (Phase-H retest addendum, evidence E-AND-0018/0019).

dev · 3 weeks ago · 2026-08-04 · 5.9 MB

parent: e3cf8dbbbba2