Smartable Wallet Core v1.0.0

Exported from Smartable Wallet 2.2.0 (build 21).

Added

• The code that keeps Smartable Wallet non-custodial on the device, published
  for the first time:
  • one form for every typed secret, Unicode NFC, then PBKDF2-HMAC-SHA256
    at 600,000 rounds — or, for a split-backup share, Argon2id with 64 MiB
    of memory per guess;
  • encrypted-only secret storage that reports a secret it cannot decrypt
    instead of deleting it;
  • each recovery phrase sealed under a random key of its own, which the
    password only wraps, and every way one is opened: the password, the PIN
    and biometric unlock;
  • the rule a password meets before anything is sealed under it: at least
    twelve characters, and not mostly a run, a repeat, a year or a common
    word;
  • the platform keys the wallet is sealed under: Android Keystore, StrongBox
    first, and the iOS Secure Enclave;
  • the app PIN: every guess a key-store operation on the phone, then sealed
    by a device key that on Android 15 and later works only while the phone is
    unlocked;
  • biometric unlock bound to a key released once per use;
  • one lockout for every password and PIN check, measured on the boot clock;
  • SLIP-39 split backup, 2-of-3 and 3-of-5, each share sealed under a key
    derived from the wallet password; a share written on paper leaves only a
    note on the phone, never its words.

---

Checking this release — see docs/releasing.md:

sha256sum -c SHA256SUMS
gh attestation verify smartable-wallet-core-v1.0.0.tar.gz --repo getsmartable-app/core