I’m was thinking about building native windows UI, wrapping around cross platform library written in swift. I did not know it was that messy and complicated.

However they did not produce any concrete evidence, citing NDA between that security company and their client.

From what i recall, the story was very vague, there were no pictures of the specific chip, no pictures of the motherboard of the motherboard that would include serial, i.e. no details that would accompany a serious security research.

I’m working on project - a password manager, where I have full end to end test harnesses - cli client makes changes, sync them to the server and then observe the data in iOS app running in the emulator. More than once I noticed codex just hard coded expected values from the test harnesses directly into UI layout in iOS app to make the test pass…

Similar issues in the crypto layer - tests were written first , then code was written . During the review I noticed that the code was made to just pass the test - the logic was to check if signature values exists instead of checking if crypto signature is valid.

LLM can help with code reviews as well, but it has to be guided specifically what to look for for. This is with codex 5.4 model

Also, I’m struggling to take it to multiple agents level, mostly because things depend on each other in the project - most changes cut across UI, protocol and the server side, so not clear how agents would merge incompatible versions.

Verification is a tricky part as well, all tests could be passing, including end to end integration and visual tests, but my verification still catches things like data is not persisted or crypto signatures not verified.

I do not see how it would benefits end users in any significant way. Sure, you can look inside the database, how many people need that?

Dumping the database to CSV is not a good backup, schema changes over time, what was dumped from one version of the app would not work for importing into another version if schema changes. Backup it needs a versioned schema format, which would actually look like KDBX format if implemented in XML :-)

It uses SQLCypher as local data store and keeps KeePass-compatible data model - supports import of .kdbx database.

SQLCypher and different schema used in Lockstep alone did not solve any problems that I have with Keepass. Those problems are sync and sharing.

Solving sync and sharing cannot be done on whole database file level, as it implemented now in KeePass. Changes need to be tracked at the password record level, all changes need to persisted as operations log and that log needs to be distributed across devices.

The above means writing a whole protocol, and that's a lot more work than changing local storage.

The project is pre-alfa https://github.com/lockstepvault-hq/lockstep

However, I do want to have full control of my secret data beyond the secrets themselves, ideally w/out self hosting, i.e. I want to have crypto-proven control over whom I'm sharing secrets with, I want to have have cryto-level assurance that the service cannot use recovery/escrow mechanism to unlock my secrets data stored on the cloud w/out my consent.

Apple Passwords comes closest to what I want, but it's not cross platform.

Would you mind sharing what user experiences are not ideal with 1Password, I'd like to know I can address those those in Lockstep.

Sync requires a server, however server does not see any secret data, it is only used to relay encrypted hash-chained ops log between devices. It's intended to be self-hosting friendly - server is single binary backed by SQLite.

It's project is early-alfa, CLI app, Keepass import and sever/sync work for the most part, there is MacOS app in progress and plans for a iOS app and a browser extension.

Not ready for production and it's not audited.

I'm currently using KeepassXC/Keepasium with Syncting, but I want a better solution - something that supports trouble-free sync natively and allows me to own the system

Current release candidate supports detecting Teams Meeting and Slack Huddle.

https://github.com/kantselovich/LuxaforPresence/pull/3

https://github.com/kantselovich/LuxaforPresence

https://github.com/kantselovich/LuxaforPresence