# Further Hardening Plan

These tasks should be completed to claim full “mission-ready” status in production deployments.

## Security Review
- Contract an independent audit focused on cryptography, memory handling, and CLI UX.
- Perform static analysis (cargo-audit, cargo-deny) and track advisories.

## Fuzzing & Chaos Testing
- Set up `cargo fuzz` targets for:
  - `DiskVaultV1` CBOR decoding
  - Record parsing and `search_tokens` logic
  - Command-line argument parsing (`clap` fuzz harness)
- Run long-duration chaos tests that repeatedly add/list/remove random records while monitoring for panics or data races.

## Continuous Integration
- Build matrix: {Linux, macOS, Windows} × {debug, release} × {default features, no-mlock}.
- Enforce `cargo fmt`, `cargo clippy --all-targets --all-features`, `cargo test` on every PR.
- Add SLSA/provenance metadata for release artifacts.

## Operational Controls
- Provide signed releases (Ed25519 minisign) with reproducible build instructions.
- Publish operator training covering duress workflows, zero-trace discipline, and share custody.
- Add automated backup verification pipelines using air-gapped hosts.

## Future Features (strictly optional)
- Expand TOTP tooling (e.g., QR ingestion, drift analysis) for UI-less provisioning.
- Headless exported audit reports (still masked) for compliance teams.
- TPM/Yubi integration as an *additive* factor (never replacing software guarantees).

