App Shield: attestation API, network guard, and iOS App Attest fixes - #5486

Open

shai-almog wants to merge 97 commits into

feature/app-shield

Commits on Jul 29, 2026

Add App Shield attestation API, and fix the broken iOS App Attest linkage

shai-almog
and
claude
committed
Carry the shield status by id so ShieldException stays serializable

shai-almog
and
claude
committed
Fix App Attest error handling and guard ordering found in review

shai-almog
and
claude
committed
Build the shield simulation menu without adding it, like its siblings

shai-almog
and
claude
committed
Honour the configured failure mode, refresh the chain, and measure time monotonically

shai-almog
and
claude
committed
Stop the shield header following cross-host redirects

shai-almog
and
claude
committed
Install the network guard, without which protect() did nothing

shai-almog
and
claude
committed
Do not assert before the backend has registered the key

shai-almog
and
claude
committed
Keep tokens off plaintext URLs, and stop over-eager invalidation

shai-almog
and
claude
committed
Fix an MCP transport leak, SPKI collection and attestation registration

shai-almog
and
claude
committed
Guard the failure path, and stop asserting for a discarded key

shai-almog
and
claude
committed
Satisfy the PMD gate for the new shield code

shai-almog
and
claude
committed
Close five races and bypasses in the attestation client

shai-almog
and
claude
committed
Fold hostnames by ASCII, and close two more reset races

shai-almog
and
claude
committed
Close the recovery race, stale guard state, and a legacy read

shai-almog
and
claude
committed
Restore ASCII-only sources, and close three more locale/lock gaps

shai-almog
and
claude
committed
Give the request hook back its legacy certificate view

shai-almog
and
claude
committed
Key WebSocket headers case-insensitively, fail a refused reset

shai-almog
and
claude
committed
Invalidate on partial reset, and retry a flaky Central resolution

shai-almog
and
claude
committed
Keep the throttle deadline when the keychain refuses the write

shai-almog
and
claude
committed
Ask the guard only about URLs it selected, and reset the backoff

shai-almog
and
claude
committed
Fail closed for a registered engine, and serialize the iOS coordinator

shai-almog
and
claude
committed
Acknowledge a specific attested key, not whatever is pending

shai-almog
and
claude
committed
Treat an absent chain as unavailable, and hold the key across the write

shai-almog
and
claude
committed
Fall back to the flat chain instead of skipping enforcement

shai-almog
and
claude
committed
Remove headers case-insensitively, and do not resubmit a spent key

shai-almog
and
claude
committed
Commit preference writes, guard the native callback, persist the retry

shai-almog
and
claude
committed
Check the marker write, and stop sharing the KeyStore across tiers

shai-almog
and
claude
committed
Honour the exhausted recovery, and clear it on success

shai-almog
and
claude
committed
Run the request hook only when the request asked for it

shai-almog
and
claude
committed
Resolve implicit host policies late, and hold the spent marker in memory

shai-almog
and
claude
committed
Use a per-start generation, and confirm the marker deletion

shai-almog
and
claude
committed
Compose the shield guard, and stop a stale MCP reader closing a live transport

shai-almog
and
claude
committed
Reuse the App Attest key when Apple says it never processed the attestation

shai-almog
and
claude
committed
Release the bootstrap queue when a native callback returns nothing

shai-almog
and
claude
committed

Commits on Jul 30, 2026

Commits on Jul 31, 2026

Commits on Aug 1, 2026

Commits on Aug 2, 2026

Commits on Aug 3, 2026