Epic: Local-first hardening, sync & self-host (sequenced)

[kafkade]

Epic — Local-first hardening, sync & self-host (sequenced)

Tracking issue that sequences the technical remediation & feature work into a single, one-at-a-time completion order with priority.

How to use

• Work top to bottom. Don't start an item while its Blocked by issues are open.
• Check the box when the item's PR is merged.
• Priority: P0 foundational/release-blocking → P1 credible next release → P2 backups + self-host polish.
• Version gates: v1.3 after seq 01–12 (foundations + server-optional + onboarding + self-host wizard); v1.4 (Backups) after seq 13–15.

Security-sensitive specifics are tracked in a private security advisory. A separate managed-hosting / business track is tracked privately and is intentionally not part of this public epic.

---

P0 — Foundations (release-blocking) · Milestone 0

• 01 · M0/0a: Harden at-rest encryption of the local working store #295 — Harden at-rest encryption of the local working store · blocked by: —
• 01b · M0/0f: Extend at-rest encryption to iOS (FFI) and web/WASM #315 — Extend at-rest encryption to iOS (FFI) + web/WASM · blocked by: M0/0a: Harden at-rest encryption of the local working store #295
• 02 · M0/0b: Strengthen account authentication key derivation #296 — Strengthen account authentication key derivation · blocked by: —
• 03 · M0/0c: Robust first-admin bootstrap + CORS / deployable web admin #297 — Robust first-admin bootstrap + CORS / deployable web admin · blocked by: —
• 04 · M0/0d: Stable, tenant-scoped vault identifiers #298 — Stable, tenant-scoped vault identifiers · blocked by: —

P1 — Credible next release (server-optional + onboarding + self-host wizard)

• 05 · M0/0e: Threat-model refresh + metadata/privacy inventory #299 — Threat-model refresh + metadata/privacy inventory · blocked by: M0/0a: Harden at-rest encryption of the local working store #295
• 06 · MA/A1: iOS QR-scan device onboarding (CLI/web parity) #300 — iOS QR-scan device onboarding (CLI/web parity) · blocked by: M0/0b: Strengthen account authentication key derivation #296
• 07 · MA/A2: First-class opt-in 'Connect to a server' UX #301 — First-class opt-in "Connect to a server" UX · blocked by: —
• 08 · MA/A3: Docs — the server-optional mental model #302 — Docs: the server-optional mental model · blocked by: —
• 09 · MB/B1: Sealed AEAD initial snapshot + encrypted first-account upload #303 — Sealed AEAD initial snapshot + encrypted first-account upload · blocked by: M0/0a: Harden at-rest encryption of the local working store #295, M0/0b: Strengthen account authentication key derivation #296
• 10 · MB/B2: First-run copy + two-artifact onboarding (no account pre-server) #304 — First-run copy + two-artifact onboarding (no account pre-server) · blocked by: —
• 11 · MB/B3: Account recovery (Secret-Key loss, rotation, revocation) #305 — Account recovery (Secret-Key loss, rotation, revocation) · blocked by: M0/0b: Strengthen account authentication key derivation #296
• 12 · MD/D1: Browser first-boot setup wizard #306 — Browser first-boot setup wizard · blocked by: M0/0c: Robust first-admin bootstrap + CORS / deployable web admin #297

P2 — Backups (v1.4) + self-host polish · Milestone C · Milestone D

• 13 · MC/C1: Device backup/restore — complete encrypted archive #307 — Device backup/restore — complete encrypted archive · blocked by: M0/0a: Harden at-rest encryption of the local working store #295
• 14 · MC/C2: Per-user server export/import with defined restore semantics #308 — Per-user server export/import with defined restore semantics · blocked by: —
• 15 · MC/C3: Restore-convergence tests (offline stale-device replay) #309 — Restore-convergence tests (offline stale-device replay) · blocked by: MC/C2: Per-user server export/import with defined restore semantics #308
• 16 · MD/D2: In-panel health / version / upgrade view #310 — In-panel health / version / upgrade view · blocked by: —
• 17 · MD/D3: Packaged upgrade ergonomics + docs #311 — Packaged upgrade ergonomics + docs · blocked by: —

---

Sequence follows the dependency order: foundations → server-optional (A) → account timing/migration (B) & self-host wizard (D1) → backups (C) → remaining self-host polish.