fix(tbtc/signer): gate plaintext state, zeroize FFI buffers, allow periodic reshare#4124

Merged

mswilkison merged 12 commits into

extraction/frost-signer-mirror-2026-05-26from

fix/signer-review-findings

Jul 1, 2026

Commits on Jun 30, 2026

fix(tbtc/signer): gate plaintext state, zeroize FFI buffers, allow periodic reshare

mswilkison
and
claude
committed
fix(tbtc/signer): address self-review findings on the review-fix PR

mswilkison
and
claude
committed
fix(tbtc/signer): gate plaintext rollback-path tests to debug builds

mswilkison
and
claude
committed
fix(tbtc/signer): wire plaintext rollback opt-in through init config

mswilkison
and
claude
committed
fix(tbtc/signer): backfill legacy refresh fingerprint before overwriting

mswilkison
and
claude
committed
fix(tbtc/signer): preserve total refresh count across history pruning

mswilkison
and
claude
committed
fix(tbtc/signer): backfill refresh_count from history on legacy state load

mswilkison
and
claude
committed
fix(tbtc/signer): harden signer FFI (secret fields, panic hook, quarantine recheck)

mswilkison
and
claude
committed
fix(tbtc/signer): synthesize refresh fingerprint record for legacy empty history

mswilkison
and
claude
committed

Commits on Jul 1, 2026