appplayer_secure 0.1.1

AppPlayer security library (merged) — domain-neutral primitives (SIGN/STORE/CRYPTO/TRUST/AUDIT/MAUTH/BIO) + AppPlayer domain layer (roles/events/facade).

0.1.1 - 2026-06-28

Added

• PassphraseSealer — seals/unseals a Map<String, String> under an operator passphrase (PBKDF2-HMAC-SHA256, 210k iterations → ChaCha20-Poly1305 AEAD), producing a portable, opaque base64 blob with the KDF salt + AEAD nonce embedded. Unlike AtRestSealer — whose symmetric key lives only in the machine keychain and cannot leave the device — the key is derived purely from the passphrase, so a sealed blob can be migrated to another machine and reopened with the same passphrase (e.g. operational-credential portability). Exported from the barrel. Additive — no existing surface changed.

0.1.0 - 2026-06-18 - Initial publish

Added

• Domain-neutral security primitives: signature · secure_storage · cryptography · trust_chain · audit · mutual_auth · biometric, plus shared types / error.
• AppPlayer domain layer: roles (SignerRole / TrustRole + MakeMind Root CA registry), events (AuditEvent catalog), AppPlayerSecure facade.
• First publish — merges the former secure primitives and appplayer_secure domain wrapper into one package.