By name: webauthn-attestation-hardening description: Use when implementing or tightening attestation statement parsing, verification, and trust checks.
WebAuthn Attestation Hardening
Trigger
Use when touching attestation formats (packed, tpm, android-key, android-safetynet, apple, none) or trust source logic.
Workflow
- Expand coverage by format.
- Add trust-path and failure-mode tests.
- Keep optional module boundaries intact (
webauthn-attestation-mds).