feat: native Matrix encrypted messaging #33

Merged
severus-snape merged 1 commit from feat/minato-native-matrix-e2ee into main 2026-11-01 14:20:47 +00:00

Scope

Native Rust SDK Matrix encryption for the existing Hayate adapter. Reuses the recovered fleet crypto candidate rather than adding another transport. No credentials, crypto-store resets, Matrix writes, service changes or GitOps activation.

Review provenance

The three plugin runtime files exactly match the candidate reviewed APPROVED in the independent specialist receipt at session 20261030_161904_45837a message 787582 (2026-10-30). Original plugin patch SHA256 ed29dc7ec3d0e6c1f30ac2347c0b6917db27fbe2ffd6abed5ecadd0e06661024. Separate reviewer, same model family; no cross-family review established. Reused unchanged scope, not a new native repository approval.

Verification on current main

Core base d560721841746065f06d2bd8ce52a4fbea6bfc68; Plugins base 8d1db98351. Typecheck and build pass; 58 focused real-crypto/Matrix/native tests pass on macOS and Linux ARM64 Node22. Final immutable remote plugin materialization and normal typecheck/build pass. Linux exact Node24.22.1 image was blocked by Docker disk exhaustion; no target-platform image claim.

Full macOS suite remains RED: 1151 tests, 1145 pass, 3 fail, 3 skip. Two unrelated memory-worker failures reproduce against isolated current release baseline (30/32 pass); TUI failure passes focused rerun 12/12 but concurrent-suite cause is unresolved. No tests weakened. Do not merge past a required red gate.

Release/activation boundary

Plugins PR must be integrated first by distinct authorized integrator Severus. Core pins immutable published plugin commit ea3ff26df5 and adds crypto dependency plus Docker native rebuild/import smoke. Existing release CI must build/publish an immutable image; Miles owns GitOps pin promotion. Parent owns Minato activation and fresh encrypted inbound/decrypted response acceptance in its own room with Karsten, never HEX room. No live encryption acceptance yet. Own persistent device/store required.

## Scope Native Rust SDK Matrix encryption for the existing Hayate adapter. Reuses the recovered fleet crypto candidate rather than adding another transport. No credentials, crypto-store resets, Matrix writes, service changes or GitOps activation. ## Review provenance The three plugin runtime files exactly match the candidate reviewed APPROVED in the independent specialist receipt at session 20261030_161904_45837a message 787582 (2026-10-30). Original plugin patch SHA256 ed29dc7ec3d0e6c1f30ac2347c0b6917db27fbe2ffd6abed5ecadd0e06661024. Separate reviewer, same model family; no cross-family review established. Reused unchanged scope, not a new native repository approval. ## Verification on current main Core base d560721841746065f06d2bd8ce52a4fbea6bfc68; Plugins base 8d1db9835137dd9e96334fa6106fe4b60bdddc7e. Typecheck and build pass; 58 focused real-crypto/Matrix/native tests pass on macOS and Linux ARM64 Node22. Final immutable remote plugin materialization and normal typecheck/build pass. Linux exact Node24.22.1 image was blocked by Docker disk exhaustion; no target-platform image claim. Full macOS suite remains RED: 1151 tests, 1145 pass, 3 fail, 3 skip. Two unrelated memory-worker failures reproduce against isolated current release baseline (30/32 pass); TUI failure passes focused rerun 12/12 but concurrent-suite cause is unresolved. No tests weakened. Do not merge past a required red gate. ## Release/activation boundary Plugins PR must be integrated first by distinct authorized integrator Severus. Core pins immutable published plugin commit ea3ff26df5a35ed33c7dd66f74266c980586a45f and adds crypto dependency plus Docker native rebuild/import smoke. Existing release CI must build/publish an immutable image; Miles owns GitOps pin promotion. Parent owns Minato activation and fresh encrypted inbound/decrypted response acceptance in its own room with Karsten, never HEX room. No live encryption acceptance yet. Own persistent device/store required.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
harness/plugins!33
No description provided.