Skip to content

EvidenceVeil v1.0.1

Choose a tag to compare

View all tags
@MrTaherAmine MrTaherAmine released this 25 Aug 06:13
· 13 commits to main since this release
v1.0.1
6eb6c3f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

EvidenceVeil v1.0.1

Maintenance and integrity release focused on reversible IP pseudonymization correctness and safer restoration behavior.

Fixed

  • Resolved a collision defect where distinct public IPv4 addresses could map to the same reversible pseudonym and silently overwrite restoration mappings.
  • Added collision-safe deterministic IP pseudonymization with a larger special-use IPv4 output space.
  • Added defensive mapping guards so conflicting reversible mappings fail closed instead of silently corrupting restoration data.
  • Scoped forward mappings to prevent cross-semantic pseudonym reuse.
  • Added deterministic pre-seeding so collision handling remains stable across equivalent datasets.
  • Fixed .tar.gz / .tgz detection so compressed tar archives are identified as tar inputs before generic gzip handling.
  • Hardened restoration to avoid cascading substitutions during reverse mapping.

Validation

Validated locally on macOS 26.6.2 with Python 3.14.7:

  • 50 automated tests passed
  • 92.44% branch-aware coverage
  • Ruff lint passed
  • Ruff formatting passed
  • mypy passed
  • pip check passed
  • pip-audit: no known vulnerable third-party dependencies
  • Bandit security scan passed
  • Exact Issue #2 regression passed
  • 1,000-public-IPv4 stress / round-trip validation passed
  • Reversed-order collision determinism validated
  • Cross-semantic mapping isolation validated
  • Non-cascading restoration regression passed
  • Archive detection regression passed
  • Wheel and source distribution built successfully
  • Twine validation passed for both artifacts

Compatibility

The vault schema remains compatible with valid, non-corrupted v1.0.0 vaults.

Existing v1.0.0 bundles that already suffered an IP pseudonym collision cannot recover an overwritten mapping and should be re-sanitized from the original evidence using v1.0.1.

Credits

Thanks to @yamanin-ninamay for the detailed collision report and for contributing the .tar.gz / .tgz detection fix.

Created and maintained by Taher Amine ELHOUARI

https://www.taheramine.org
https://github.com/MrTaherAmine/evidenceveil

Apache-2.0

Contributors

yamanin-ninamay
Assets 5
Loading