22b3a0062a
Some checks are pending
ci / test (pull_request) Waiting to run
Wire format lives in docs/PROTOCOL.md so the handshake, invite, and frames can be read without the Rust. Threat model points at it. The in-house audit notes are a finding-status table, not a third-party audit. SDK README no longer claims the legacy concat invite signature is what we encode. |
||
|---|---|---|
| .. | ||
| PROTOCOL.md | ||
| README.md | ||
| SECURITY_AUDIT.md | ||
| THREAT_MODEL.md | ||
OnionWire docs
Read these in order if you are evaluating the protocol without the Rust:
- PROTOCOL.md — wire format, handshake, invite, frames. This is the document a second implementation would use.
- THREAT_MODEL.md — what v1 claims, and what it refuses to claim.
- SECURITY_AUDIT.md — in-house review notes and which findings are still open. Not a public third-party audit.
Operator / product docs stay in the root README. Android build notes: android/README.md. SDK: crates/onionwire-sdk/README.md.