galz10 161ba76f65 fix(core): remove filesystem binding for secret storage stability ...

Removes Inode and Birthtime from the Master Key derivation shards.
These identifiers were too volatile for atomic write operations (which change inodes) and did not survive extension re-installs or file moves.

Master Key security remains extremely high, relying on:
- OS Keychain Shard (Tier 1)
- Physical Shard (~/.gemini_id) (Tier 2)
- Deep Hardware Binding (Motherboard, Disk, MAC) (Tier 3)
- Cryptographic Pepper (Tier 4)

2026-02-24 13:33:06 -08:00

..

a2a-server

fix(a2a-server): Remove unsafe type assertions in agent (#19723)

2026-02-23 22:40:55 +00:00

cli

fix(core): add encrypted file fallback for secret storage

2026-02-24 11:44:50 -08:00

core

fix(core): remove filesystem binding for secret storage stability

2026-02-24 13:33:06 -08:00

devtools

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00

sdk

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00

test-utils

fix(security): rate limit web_fetch tool to mitigate DDoS via prompt injection (#19567)

2026-02-20 17:18:07 +00:00

vscode-ide-companion

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00