docs(release): add v4.8.1 changelog for StrongBox op rejection fix

This commit is contained in:
Enginex0
2026-03-18 03:24:58 +01:00
parent 7e2fc0b288
commit 03c71bd202
+6
View File
@@ -1,3 +1,9 @@
## TEESimulator-RS v4.8.1: StrongBox Op Rejection Fix
- **StrongBox op limit gate fix** — `trackAndEnforceOpLimit` was only called in the `Domain.KEY_ID` not-found path, so software-generated keys (found via `Domain.APP`) bypassed `STRONGBOX_MAX_CONCURRENT_OPS=4` entirely. DuckDetector's concurrent signing handles test created 24+ operations that all succeeded via LRU pruning instead of being rejected with `TOO_MANY_OPERATIONS (-29)`. Now enforced for all StrongBox createOperation paths.
---
## TEESimulator-RS v4.8: StrongBox Hardening & LRU Pruning ## TEESimulator-RS v4.8: StrongBox Hardening & LRU Pruning
Tested against DuckDetector on OnePlus (Android 16, KSU). Tamper score dropped from 32 to 8. Tested against DuckDetector on OnePlus (Android 16, KSU). Tamper score dropped from 32 to 8.