Skip to content

feat(android): apply authenticated RVD1 budgets to RVT1 clients - #306

Merged
turinglambdaai merged 5 commits into
mainfrom
feature/android-rvt1-negotiated-budgets
Oct 22, 2026
Merged

turinglambdaai merged 5 commits into
mainfrom
feature/android-rvt1-negotiated-budgets

Conversation

@turinglambdaai

Copy link
Copy Markdown
Owner

Scope

  • Add createDeviceRVT1Client as the explicit post-RVD1 construction boundary; consume accepted per-session payload/pending limits, never an untrusted discovery value.
  • Reject oversized outgoing RVT1 requests without writing to the network while keeping the same session usable; bound received frame payload before allocation/decoding.
  • Pin both directions with deterministic Kotlin/JVM regressions and validate malicious/invalid acceptance limits.

Validation

Kotlin tests and the full GitHub matrix are queued on this PR; not claimed green until the checks complete. This is a framework handoff/budget slice, not device pairing, credential storage, or mobile packaging.

Base: 1248a90cdf347edfb44731ff7c8f69c94df96d59.

@turinglambdaai
turinglambdaai marked this pull request as ready for review October 22, 2026 15:38
@turinglambdaai
turinglambdaai merged commit 356e03a into main Oct 22, 2026
25 of 26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant