What changes in Kleidos, a hardware password manager for the ESP32-S3 and the classic ESP32: each milestone as it starts working or starts being built, with the file in the repository that makes it true. https://docs.jmrp.io/kleidos/ en-gb Wed, 21 Oct 2026 00:00:00 GMT © José M. Requena Plens mail@jmrp.io (José Manuel Requena Plens) mail@jmrp.io (José Manuel Requena Plens) 1440 site/src/utils/rss.ts https://www.rssboard.org/rss-specification https://docs.jmrp.io/kleidos/assets/favicon-48x48.png https://docs.jmrp.io/kleidos/ 48 48 https://docs.jmrp.io/kleidos/#status-fleet https://docs.jmrp.io/kleidos/#status-fleet@2026-10-21 Every board registers its own hardware — its screen, its power controller, its buttons or keyboard — into the same firmware, and the drawings in “The devices” are generated from the same measured boards (src/boards/). Working Wed, 21 Oct 2026 00:00:00 GMT https://docs.jmrp.io/kleidos/#status-vault https://docs.jmrp.io/kleidos/#status-vault@2026-10-21 Entries are stored as encrypted, authenticated records, with separate keys for encryption, authentication and the unlock check, and the host test suite covers the round trip and the refusals (src/vault/). Working Wed, 21 Oct 2026 00:00:00 GMT https://docs.jmrp.io/kleidos/#status-unlock https://docs.jmrp.io/kleidos/#status-unlock@2026-10-21 The two-button boards dial a PIN on the timing arc, the boards with a keyboard take a passphrase, and the touch boards are offered either (src/ui/entry/). Working Wed, 21 Oct 2026 00:00:00 GMT https://docs.jmrp.io/kleidos/#status-typing https://docs.jmrp.io/kleidos/#status-typing@2026-10-21 The device becomes a Bluetooth keyboard for the session it is told to start, types over a bonded and authenticated link, and shuts the radio down again when the session ends (src/ble/). Working Wed, 21 Oct 2026 00:00:00 GMT https://docs.jmrp.io/kleidos/#status-updates https://docs.jmrp.io/kleidos/#status-updates@2026-10-21 On the boards with room for two app partitions, firmware is uploaded from the admin panel; an image built for another board or an older version is refused, and an update that boots but never confirms itself rolls back on its own (src/platform/ota.cpp). Working Wed, 21 Oct 2026 00:00:00 GMT https://docs.jmrp.io/kleidos/#status-panel https://docs.jmrp.io/kleidos/#status-panel@2026-10-21 In development. It is already where entries are added, imported from another manager and exported as an encrypted backup, and it is still changing (src/web/). Being built Wed, 21 Oct 2026 00:00:00 GMT https://docs.jmrp.io/kleidos/#status-hardened https://docs.jmrp.io/kleidos/#status-hardened@2026-10-21 In development. Secure Boot, flash encryption and encrypted settings are configured for the 8 MB boards, and nothing provisions the per-chip key on the ESP32-S3 ones yet, so a hardened build cannot create a vault there today (docs/security/secure-provisioning-checklist.md). Being built Wed, 21 Oct 2026 00:00:00 GMT