fenleon 2ff994751c registration: the prefpane presents the LOGIN RUN's anisette set (session-wide reuse, wire-pinned) ...

The trapped-binary decode (2026-10-15) shows ONE anisette mint serves the whole session — GSA hops, 2FA validate, postdata, both prefpane POSTs — so the PET is paired with the OTP window it was issued under. The rev-25/26 'fresh set at the sign-in POST' reading is corrected (confounded with the replay-guard era). GsaLoginChain mints one cpd per login run and exposes it as lastLoginAnisette (Client-Time frozen at the mint); GsaDelegateLoginClient's prefpane branch reuses a supplied Client-Time instead of re-minting. VEN step-2 wire fact recorded in spec rev 46: zero anisette on initializeValidation, no step-2 binding. Also wire-proven live: the GSA init 'ps' field is REQUIRED (omission answers ec=-80001).

2026-10-15 18:57:00 +02:00

..

imessage-protocol-spec.md

registration: the prefpane presents the LOGIN RUN's anisette set (session-wide reuse, wire-pinned)

2026-10-15 18:57:00 +02:00

USAGE.md

JitPack publishing (maven-publish on all modules), docs/USAGE.md, CI + weekly drift probe

2026-10-12 23:36:32 +02:00