BROWSER DEMO
Web keypair & record demo
Delivery plan §7.5 steps 5–8 milestone: this page generates a hybrid (Ed25519 + ML-DSA-65) capability-signing keypair, encrypts it at rest in IndexedDB (§7.4 Option A: PBKDF2-derived AES-256-GCM, non-extractable, decrypt-on-demand, zeroize-after-use), then puts and projects a real record — entirely in-browser, no server, no RPC.
Generate keypair
Put a record
Sign a capability
Project (verify + decrypt)
IndexedDB persistence check (§7.6)
Reloads this page (a fresh WASM session — the in-memory session state,
including data-encryption keys, is deliberately NOT persisted; see
web::keystore's module doc) and confirms the encrypted
record row written in step 2 is still present in IndexedDB afterwards.
Module status
loading…