Radical ablation, adversarial testing, and strict least privilege

A distilled look at August: the written corpus was cut hard, security testing turned adversarial, and services surrendered unnecessary privileges.

In short

August was defined by simplification and privilege reduction. The methodology corpus was condensed from dozens of workflow documents, skills, and templates into a single core guide plus four templates, supported by ongoing pruning of living plans. Security transitioned from theoretical reasoning to active probing through three scanner-driven passes with human triage, while machine credentials and encryption key materialization were locked down to dedicated services. Mobile established a layered test pyramid and a real-device test harness. Meanwhile, the admin console remained quiet, focusing on dependency maintenance and clearer operator indicators.

Documentation & methodology

The dominant priority was deliberate deletion. The methodology corpus was reduced to one core document and four templates on the principle of removing context first and observing what an AI agent actually needs—relying on Git history as the sole archive. Every coupling point was rewired simultaneously, and the public explorer was republished on the slimmed-down foundation. Two curated pruning lanes now continuously retire stale planning prompts and non-canonical documents. In the same spirit of precision, aspirational planning language around SOC 2 audit readiness was reframed into a plain, grounded statement of actual operational discipline—avoiding any suggestion of a formal certification roadmap while upholding honest security claims.

Code hygiene

Weekly dependency triage maintained a steady rhythm across the Java stack, admin console, SDK, and mobile, incorporating a Spring Boot point release and centralizing shared library versions in the parent build configuration. To improve failure transparency, broad exception catching was prohibited and systematically remediated across modules, backed by dedicated tests to permanently lock error handling boundaries. Transaction boundaries were audited and restricted strictly to state-mutating operations, and Windows-specific script wrappers were eliminated in favor of a single, portable Bash contract.

Admin UI

A quieter maintenance period centered on operational transparency. Key rotation UI feedback was refined to accurately represent its asynchronous background execution (replacing premature completion indicators with active progress states while the operation finalizes), shard counters were switched to human-readable indices, and the completion estimate for key draining was corrected. An audit integrity workflow fix now prevents closed investigation views from inadvertently reopening. The remaining effort addressed baseline dependency updates, version pinning, and resolving high-severity security advisories.

Mobile app

Reliability and protocol integrity took center stage. The mobile application introduced an explicit layered test contract covering critical enrollment, verification, and installation-scoped key isolation—ensuring cryptographic protocol regressions are caught in continuous integration rather than on physical devices. A dedicated campaign runner now automates validation against real hardware. On the user experience side, experimental messaging was retired, in-app updates were enabled for the app store channel, and client-side error handling was tightened to interpret only structured API errors explicitly emitted by Ezkey. Routine platform upgrades continued across React Native, camera, and navigation libraries, alongside the first curated mobile static analysis pass.

Backend & API contracts

The core focus was strict privilege separation across architectural boundaries. Machine-to-machine (M2M) API keys are now authenticated exclusively by the Integration API; the Admin API rejects them outright, removing a legacy administrative bypass. Similarly, database-level write permissions for encryption keysets were restricted solely to the Admin service, eliminating a startup deadlock where a read-only role could abort the boot sequence. Tenant data isolation was hardened so cross-tenant queries never leak enrollment existence. In the cryptographic tier, key storage transitioned to a standardized envelope format, and re-encryption mechanics were corrected across shard calculations and worker scheduling. Lastly, mobile devices can now fetch signed instance metadata, and OpenAPI schemas were packaged for automated Cloudflare Schema Validation on the edge.

The rest worth mentioning

Security testing: three scanner-driven passes with logged human decisions—an unauthenticated surface baseline, containerized vulnerability scans verifying reverse proxy headers, and schema-driven fuzzing that led to hiding interactive API docs behind the edge proxy. One finding resolved an unhandled server error on missing request fields.
API testing & edge validation: exploratory API collections migrated from Postman to Git-native Bruno collections with CLI test suites, paired with automated packaging and deployment of OpenAPI schemas to Cloudflare Schema Validation rules.
Observability & performance: an opt-in metrics collector for local container environments, accompanied by an analysis routine to profile resource consumption after realistic workloads.
Infrastructure & public site: restored multi-node high-availability parity, streamlined clean-start scripts, and published a bilingual technical article detailing the methodology ablation.

July's digest anticipated that documentation consolidation would require significant attention. August went a step further, demonstrating that radical simplification delivers far higher clarity than mere reorganization. With the September operable-release target immediately ahead, focus now pivots entirely to the runtime surface: finalizing mobile app store readiness, completing the remaining privilege restrictions, and verifying that day-one operational paths perform reliably in production.

Francais: Version francaise de cette note

Back to index: Monthly digests