Contribution records credited to Bordeaux Metropole

Personal Data Vault

• Docs: refresh codebase metrics and add test-suite and architecture-surface sections
  Thu, 07/16/2026 - 09:00
• Docs: add a codebase metrics page (cloc)
  Thu, 07/16/2026 - 06:55
• pdv_webform vault grant link drops the form's query string (breaks Orchestra webform interaction)
  Mon, 07/13/2026 - 10:35
• Webform PDV configuration fields appear on every element/handler edit tab instead of only General
  Tue, 07/07/2026 - 19:15
• Docs: add Mermaid diagrams for the key model and main flows
  Thu, 06/25/2026 - 14:30
• pdv_file: serve upload-mode files the standard webform way instead of a custom route
  Thu, 06/25/2026 - 10:55
• Consent form: move consumer name out of the write-grant checkbox title for consistency
  Thu, 06/25/2026 - 09:45
• Add a link from the streamlined trust prompt to the complete item-by-item access form
  Thu, 06/25/2026 - 08:55
• Add test coverage: cross-owner 403 on per-item routes and Status Report checks
  Thu, 06/25/2026 - 08:05
• Decrypted vault export ZIP can be left at rest in private://pdv-export
  Thu, 06/25/2026 - 07:45
• Master KEK status check false-positives for non-local (Transit) wraps
  Thu, 06/25/2026 - 06:05
• Demo webforms are not translated on the French preview (titles and field labels stay English)
  Wed, 06/24/2026 - 21:55
• Record view page title says "Structured data" instead of naming the item
  Wed, 06/24/2026 - 21:30
• Polish the demo landing-page copy (French quality + consumer/service consistency)
  Wed, 06/24/2026 - 20:20
• Vault item form titles should name the item, not say "structured data" / "file"
  Wed, 06/24/2026 - 19:40
• Tugboat demo: add French as a switchable language to review the UI in French
  Wed, 06/24/2026 - 19:15
• Vault page: hide empty Access/Store request sections, collapse the inventory sections, and explain grants vs. trust
  Wed, 06/24/2026 - 18:50
• Passphrase-locked vault still shows the pdv_file "Save to my vault" checkbox
  Wed, 06/24/2026 - 08:55
• Tugboat preview installs a Drupal core pre-release, breaking the demo front page
  Wed, 06/24/2026 - 07:55
• Link the module name on the Tugboat demo landing page
  Tue, 06/23/2026 - 22:50
• Default body_inline_max_bytes to 16384 so small records are stored inline, not as Files
  Tue, 06/23/2026 - 22:45
• Let owners view a vault file from the Files list and the Edit form
  Tue, 06/23/2026 - 21:50
• Locked vault white-screens on direct decrypt routes (e.g. a stale Edit link); redirect to the unlock form instead
  Tue, 06/23/2026 - 21:05
• Make the vault unlock duration configurable per tenant, with a sliding idle timeout
  Tue, 06/23/2026 - 18:55
• Reorganize vault action buttons and add row batch actions
  Tue, 06/23/2026 - 18:30
• pdv_webform: degrade gracefully when the vault is unreachable (no misleading grant link or save checkboxes)
  Tue, 06/23/2026 - 12:10
• Add a Tugboat preview configuration (single-site, local-mode demo)
  Tue, 06/23/2026 - 10:40
• Owner passphrase: gate vault content with a user-held secret (protect against the operator)
  Mon, 06/22/2026 - 20:35
• pdv_client: encrypt vault handles at rest with an out-of-DB key (remote-compromise resistance)
  Mon, 06/22/2026 - 09:45
• Pre-release audit fixes: tenant-bound Subject KEK AAD, cross-key Master KEK rotation, and 100k/500k scalability hardening
  Sun, 06/21/2026 - 19:55
• Make Master KEK rotation pick up a new Vault/OpenBao Transit key version
  Sun, 06/21/2026 - 17:45
• OpenBao Transit-backed Master KEK: never export the root key
  Sat, 06/20/2026 - 21:10
• pdv_eca: [event:deadline_formatted] uses the current language, not the owner's
  Sat, 06/20/2026 - 16:05
• Add an optional expiry to a trust (standing per-kind authorization)
  Sat, 06/20/2026 - 15:50
• Vault lifecycle hardening: reap re-keyed leftovers, crypto-erase declined offers, reject expired approvals
  Sat, 06/20/2026 - 14:45
• pdv_message: deliver dormancy notifications via the Message stack
  Sat, 06/20/2026 - 10:20
• pdv_eca: ECA integration for delivering pdv events (no-code)
  Fri, 06/19/2026 - 22:35
• Operator test-notification button for dormancy delivery
  Fri, 06/19/2026 - 16:40
• Automatic cleanup of dormant vaults with warn-before-purge
  Fri, 06/19/2026 - 12:35
• Filter Master KEK selection to compatible keys; nudge rotation on change
  Fri, 06/19/2026 - 09:50
• Document multi-tenancy
  Fri, 06/19/2026 - 09:15
• Owner vault export (data portability)
  Fri, 06/19/2026 - 08:00
• Add a health surface via hook_requirements (Status Report)
  Thu, 06/18/2026 - 21:30
• Remove dead update hooks and deprecated-state handling (alpha)
  Thu, 06/18/2026 - 20:40
• Hybrid item-kind catalogue: shared kinds plus optional per-tenant kinds
  Thu, 06/18/2026 - 19:20
• Operator subjects report and purge are not tenant-aware
  Thu, 06/18/2026 - 15:45
• Master KEK rotation is not tenant-aware and collapses per-tenant isolation
  Thu, 06/18/2026 - 15:30
• Multi-tenant support: per-tenant Master KEK and pluggable tenant resolution
  Thu, 06/18/2026 - 13:25
• pdv_file: materialize a vault-picked file into a local upload by default; add a "Link to the vault file" setting
  Wed, 06/17/2026 - 19:00
• kindAccess() ignores per-item write grants, so save-to-vault is blocked despite a valid write grant
  Wed, 06/17/2026 - 15:30