feat: keystore v3 — random-salt KEK, no machine/user identity - #95

Merged

StuartMeeks merged 2 commits into

mainfrom

feat/keystore-v3-random-salt-no-machine-binding

Sep 21, 2026

Commits on Sep 21, 2026

feat: derive local keystore KEK from a random salt, drop machine/user identity (v3)

StuartMeeks
and
claude
committed
bc763fc
docs: update README and SECURITY for the v3 keystore (no machine binding)

StuartMeeks
and
claude
committed
78082e0