Repository navigation

Bastion: security-hardened virtual bank sample - #6081

Merged

shai-almog merged 58 commits into

masterfrom

bastion-bank-sample

Oct 26, 2026

Merged

Bastion: security-hardened virtual bank sample#6081
shai-almog merged 58 commits into
masterfrom
bastion-bank-sample

Commits on Oct 21, 2026
Commits on Oct 22, 2026
Commits on Oct 23, 2026
- CI: guide snippets by include, copyright headers, Play Integrity raises minSdk to 21
  
  shai-almog
  and
  claude
  committed
  7d4d15e
- iOS: publish a sensitive clip local only and expiring on the first write
  
  shai-almog
  and
  claude
  committed
  36bd2e2
- Bastion: a passkey spares the password only when the user was verified
  
  shai-almog
  and
  claude
  committed
  97506d0
- Bastion app: step-up dialog field keeps its height; client matches the server rule
  
  shai-almog
  and
  claude
  committed
  d49007c
- Initializr: resync the Bastion template with the sample
  
  shai-almog
  and
  claude
  committed
  22391ed
- Bastion guide: US spelling for LanguageTool
  
  shai-almog
  and
  claude
  committed
  d6e52af
- Bastion web e2e: check what a field holds, and retype on a doubled keystroke
  
  shai-almog
  and
  claude
  committed
  45f655a
- Bastion: the bank's books - chart of accounts, statements, close, audit
  
  shai-almog
  and
  claude
  committed
  d8a9a81
- FileDialogSupport: mark the intentional Command identity check for PMD
  
  shai-almog
  and
  claude
  committed
  6aebe01
- Bastion app: charts, a staff console, and one way back on every screen
  
  shai-almog
  and
  claude
  committed
  3755090
- Bastion: refined charts, honest volume, fitted phone tables, composed preview
  
  shai-almog
  and
  claude
  committed
  25a22ef
- Merge origin/master into bastion-bank-sample
  
  shai-almog
  and
  claude
  committed
  08103d3
- Bastion: close the red-team findings in the books
  
  shai-almog
  and
  claude
  committed
  432e5f5
- Bastion guide: name the chart styles rather than a wildcard
  
  shai-almog
  and
  claude
  committed
  8d23a71
- Bastion guides: three LanguageTool findings
  
  shai-almog
  and
  claude
  committed
  17f4874
- Bastion: serialize a maker's approvals, explain a refused e2e code
  
  shai-almog
  and
  claude
  committed
  99cd5f4
- Android clipboard: clear a timed clip by in-process ownership, not read-back
  
  shai-almog
  and
  claude
  committed
  a72ade9
- Android clipboard: defer a background clear until the clip is provably ours
  
  shai-almog
  and
  claude
  committed
  cb79ae8
- Android clipboard: retry a deferred clear on window focus, document process death
  
  shai-almog
  and
  claude
  committed
  14be48e
- Bastion: keep the clipboard record until a read decides it, key its digest
  
  shai-almog
  and
  claude
  committed
  bc4500e
- Bastion web e2e: let a typed field settle before reading it back
  
  shai-almog
  and
  claude
  committed
  22e6a62
Commits on Oct 24, 2026
- Flutter bench: accept the Android code-size move from the clipboard handling
  
  shai-almog
  and
  claude
  committed
  3d462bc
- Merge master; gate Bastion in the Initializr on a release that has its APIs
  
  shai-almog
  and
  claude
  committed
  da86028
- Initializr: generate Bastion's probes at its own release, test the refusal below it
  
  shai-almog
  and
  claude
  committed
  0a24a5f
- Bastion: button spacing, a real card, full receipts and statements, no cut-off values
  
  shai-almog
  and
  claude
  committed
  1d248e6
- Bastion: copy buttons, printable reports, and sign-in held to the strongest factor
  
  shai-almog
  and
  claude
  committed
  dc39499
- JavaScript port: typing on a form with text selection on is no longer lost
  
  shai-almog
  and
  claude
  committed
  bac6c12
- Bastion: print reports as a paginated PDF with repeated headers and page numbers
  
  shai-almog
  and
  claude
  committed
  0f36d11
- Bastion: errors and sentences wrap, text selection on every form
  
  shai-almog
  and
  claude
  committed
  1aff508
- Bastion web e2e: one tap opens a market, no retry
  
  shai-almog
  and
  claude
  committed
  a398fd3
- Initializr: resync the Bastion template with the sample
  
  shai-almog
  and
  claude
  committed
  df527af
- docs: Bastion guides, contractions for Vale
  
  shai-almog
  and
  claude
  committed
  39097de
Commits on Oct 25, 2026
- Security: Keccak-256, SHA3-256 and secp256k1 ECDSA in core, shared with the backend
  
  shai-almog
  and
  claude
  committed
  1d79b24
- Bastion: real Ether on chain, security audit fixes, checklist, UI polish
  
  shai-almog
  and
  claude
  committed
  3f6ee30
- docs: compilable secp256k1 snippet, Bastion guide prose gates
  
  shai-almog
  and
  claude
  committed
  5f97f49
- Merge remote-tracking branch 'origin/master' into bastion-bank-sample
  shai-almog
  committed
  d8cede5
- Bastion: adopt master's Instant mapping and PKI; App Attest; skill update
  
  shai-almog
  and
  claude
  committed
  1beee9d
- Merge origin/master; Bastion: App Attest builds on the compiled backend and in the template
  
  shai-almog
  and
  claude
  committed
  9b9d7c3

Commits

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 25, 2026