fenleon 2ff994751c registration: the prefpane presents the LOGIN RUN's anisette set (session-wide reuse, wire-pinned) ...

The trapped-binary decode (2026-10-15) shows ONE anisette mint serves the whole session — GSA hops, 2FA validate, postdata, both prefpane POSTs — so the PET is paired with the OTP window it was issued under. The rev-25/26 'fresh set at the sign-in POST' reading is corrected (confounded with the replay-guard era). GsaLoginChain mints one cpd per login run and exposes it as lastLoginAnisette (Client-Time frozen at the mint); GsaDelegateLoginClient's prefpane branch reuses a supplied Client-Time instead of re-minting. VEN step-2 wire fact recorded in spec rev 46: zero anisette on initializeValidation, no step-2 binding. Also wire-proven live: the GSA init 'ps' field is REQUIRED (omission answers ec=-80001).

2026-10-15 18:57:00 +02:00

..

src

registration: the prefpane presents the LOGIN RUN's anisette set (session-wide reuse, wire-pinned)

2026-10-15 18:57:00 +02:00

build.gradle.kts

Open Madrid: clean-room Kotlin implementation of Apple's madrid (iMessage) protocol

2026-09-29 00:04:00 +02:00