Skip to main content

TideCloak 0.14.19

Summary​

TideCloak 0.14.19 adds Android Play Store distribution for the Tide Authenticator (via Trusted Web Activity packaging) and lands a cluster of IGA correctness fixes for how contested owner sets are handled under multiAdmin governance.

Key Features​

Android Play Store Distribution (Trusted Web Activity) : The Tide Authenticator PWA is now packaged as an Android app via Trusted Web Activity, using the existing Play Store listing com.tideprotocol.mfa. Android users can install directly from Google Play. Includes production Play App Signing fingerprint in assetlinks.json and versioning that increments cleanly against the current Play Store release across Bubblewrap rebuilds.

IGA multiAdmin Signing Correctness : Cluster of correctness fixes for how contested owner sets are handled in multi-admin governance. Each owner set is now signed once per batch after every replay; edge sets are no longer re-signed on lanes whose class does not sign them; contested owner sets are refused as an interim guard rather than corrupted; multiAdmin approval carriers are framed over the whole contested group; and framed carriers are verified once their whole basis has applied, not after their own replay.

Enclave SRI : sha256-yfrxxXzDHsMCNvLsn0AsRy15tImn0xspMMSRb+Ozizk=

Upgrade Notes (0.14.17 → 0.14.19)​

  • Android users can now install the Tide Authenticator from Google Play using the listing com.tideprotocol.mfa.
  • No breaking changes.

Detailed changelog​

For a granular per-repository breakdown of changes, see the detailed changelog.