Discovery & Verification

Codebase & Feature Coverage

Verification mapping of source files and architectural mechanics to their corresponding developer documentation pages.

📂 Codebase Inventory

All core source files in the client and server codebases have been audited and documented.

Core Framework & State Management
Cryptography & Database Systems
UI & Custom Components
Networking & Background Services
  • [✓] wiltkey_client/lib/core/notifications/background_handler.dart → Notifications & BG
  • [✓] wiltkey_client/lib/core/notifications/notification_service.dart → Notifications & BG
  • [✓] wiltkey_client/lib/core/notifications/pending_inbox.dart → Notifications & BG
  • [✓] wiltkey_client/lib/core/localization/locale_controller.dart → Localization
  • [✓] wiltkey_client/lib/features/proximity/controllers/ble_pairing_manager.dart → BLE Sync & Pairing
Go Relay Server

🛠️ Feature Mapping & Mechanics

Validation status of key protocol mechanics and custom app requirements.

Protocol & Logic Coverage Checkpoints
  • [✓] OTP Counter Math: Counters, seed hashing, SHA-256 counter mode pad expansion (128KB chunks) → Encryption & OTP
  • [✓] Forward Secrecy: Absolute keystream offset markers stashed within envelopes → Encryption & OTP
  • [✓] Reuse Invariant: Prevention of pad byte reuse and forward-only tracking → Encryption & OTP
  • [✓] Lanes Model: 1-on-1 partitioned incoming/outgoing lanes → 1-on-1 Lanes
  • [✓] Optimistic UI: Pending message bubble rendering with unique client-generated txIds → 1-on-1 Lanes
  • [✓] Failed-Send Rollback: Auto-refunding offset values during send failures → 1-on-1 Lanes
  • [✓] Byte Borrowing: KEystream borrowing via disjoint multi-range grants → 1-on-1 Lanes
  • [✓] Group Geometry: Shared pad geometry (Info Lane at offset 0, Member Lanes at 1MB+) → Group Shared Pad
  • [✓] Slot Assignment: Group slot allocation distributed over BLE handshake → Group Shared Pad
  • [✓] Full-Mesh Delivery: Spoke-to-spoke individual envelope encryption and resync → Group Shared Pad
  • [✓] BLE Handshake: Advertising, scanning, pairing challenge-responses → BLE Sync & Pairing
  • [✓] Streaming Modes: Instant (WebSocket stream) vs Low Power (polling signatures) → Notifications & BG
  • [✓] Pending Inbox buffering: Flat JSONL buffering to bypass database locks in background → Notifications & BG
  • [✓] Lock Cryptography: PBKDF-like SHA-256 key derivation with 5000 iterations → PIN & Security Lock
  • [✓] Biometric key stash: Fingerprint master key decryption → PIN & Security Lock
  • [✓] Android secure flag: Blocking screenshot captures → PIN & Security Lock
  • [✓] Nukes sequences: Local wipe, remote 1-on-1 nuke, full-mesh group nuke → Chat Lifecycle
  • [✓] Reactions meta-channel: Emoji reactions on the AES control channel (no OTP spend) → Message Reactions
  • [✓] Wilting messages: Reveal-gated disappearing text/images, per-recipient countdown, destroy-in-place → Wilting Messages
  • [✓] Wilt confirmation: wilt_done / group wilted_by tally on the AES meta channel → Wilting Messages
  • [✓] Consensual screenshots: FLAG_SECURE-safe RepaintBoundary capture + in-history request cards → Wilting Messages
  • [✓] On-demand downloads: FILE_OFFER / REQUEST_FILE / FILE_TOKEN / GET /api/v1/file / FILE_RECEIVED ACK → Blind Relay Protocol
  • [✓] Sidecar media storage: messages.media_path offloading large bodies to local sidecars → Persistence & SQLite
  • [✓] Tier-aware payload caps: Pre-send 5 MB free / 50 MB Plus validation → 1-on-1 Lanes
  • [✓] Monetization & Shop: EntitlementService, WiltKey Plus 72h hold, 6-month Time Wilt lifetimes, 100-member group limits, local-only cosmetics → System Overview
  • [✓] Time Wilt groups: Time-limited, unlimited budget, per-member BLE host countdown & renewal → Group Shared Pad
  • [✓] Single-upload group delivery: Relay fan-out of single client message uploads with zero-knowledge blindness → Blind Relay Protocol
  • [✓] Democratic vote-to-nuke: Group majority vote proposal & consensus before full-mesh group wipe → Chat Lifecycle
  • [✓] BLE Pairing Deep Dive: Function walkthrough, 512B MTU guards, RSSI smoothing, jitter timers, interactive radar → Deep Dives
  • [✓] Blind Relay Deep Dive: Go server walkthrough, 80% RAM load Postgres fallback, S3 streaming, token bucket flood guard, routing simulator → Deep Dives