security(desktop): fix API-key encryption using a real secret - #355

Open

qnbs wants to merge 5 commits into

fix/desktop-atomic-writesfrom

fix/desktop-api-key-encryption

Commits on Aug 13, 2026

security(desktop): fix API-key encryption using a real secret

qnbs
and
claude
committed
c907739
security(desktop): address review findings on API-key encryption PR

qnbs
and
claude
committed
33c7f39
docs(security): update threat model for the real API-key protection scheme

qnbs
and
claude
committed
ac33b61
fix(desktop): guard malformed key payloads, narrow legacy discard, refresh keys on unlock

qnbs
and
claude
committed
64268cb
fix(desktop): keep QNBS-v3 comments on one physical line

qnbs
and
claude
committed
c16ea10