Block a user
Specify and enforce path invariants (UTF-8, forward-slash, relative, no traversal)
Fix AddFile to verify actual bytes read matches declared size
Add decompression size limit in deserializeInner()
Add deterministic file ordering in Builder.Build()
Consolidate scanner/checker: delete internal/ duplicates, use mfer/ package
please provide a detailed and critical design review of this format and implementation
Noted the design decisions:
- No separate/sidecar files
- No version byte — protobuf handles versioning
- Shell out to GPG for 1.0
Creating individual issues for each Phase 1 implementation…
Fix FindExtraFiles reporting manifest and dotfiles as extra (closes #16)
Fix newTimestampFromTime panic on extreme dates (closes #15)
Fix IsHiddenPath treating current directory as hidden (closes #14)
Fix URL encoding for file paths in fetch command (closes #13)
Fix errors.Is with errors.New() never matching in checker (closes #12)
Non-darwin KeychainUnlocker stub returns errors instead of panicking (closes #7)
Remove redundant longterm.age encryption in Init command (closes #6)
Zero plaintext after copying to memguard in DecryptWithIdentity (closes #5)
Fix NumSecrets() always returning 0 (closes #4)
Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)
Bound blob cache during restore with LRU eviction (closes #29)