Everything HuShield does

A Call Directory extension blocks known-bad numbers outright and labels suspected ones, driven entirely by the locally-synced list.

REQ-08

An SMS Filter extension classifies incoming messages with no network access at all. Filtering must work in airplane mode.

REQ-09

Report spam or not-spam, look up a number, and contribute a community caller-ID name.

REQ-10

One framework handles App Attest enrolment, token refresh, and blocklist delta sync, shared across the app and both extensions via an App Group.

REQ-11

Any attested device can report a number as spam or not-spam. A device's identity is an Apple App Attest key and nothing else — no account, no phone number, no contact upload.

REQ-01

Each report contributes trust_weight × category_multiplier × exponential_decay(age, 30-day half-life). Not-spam votes subtract. Crossing 2.0 labels a number; 5.0 blocks it. An admin override always wins.

REQ-02

A device's vote weight is a pure function of its reporting tenure, volume, and how often its votes disagreed with the eventual community outcome. This is what makes brigading expensive.

REQ-02

Keyset pagination, neighbour-spoof widening, crowd-sourced caller ID, and removal tombstones so a number that stops being blockable is explicitly un-blocked on clients rather than silently vanishing from the feed.

REQ-03

Imports FTC and FCC public complaint datasets via synthetic seed devices, so the blocklist is useful before the first real user arrives.

REQ-04

attest → verify → assert-refresh, with strictly-increasing counter replay protection. Tokens refresh without re-attesting.

REQ-05

Look up the current reputation of a single number without pulling the whole blocklist.

REQ-06

Server-initiated APNs silent pushes nudge clients to resync so a newly-blocked number reaches devices without waiting for the next poll.

REQ-07

Apple App Attest verification has only ever been exercised against injected test material. No genuine attestation from a physical iPhone has been verified end to end.

Claim issue #8 →

Real App Attest validated on physical hardware, a shared challenge store for multi-instance deploys, and scheduled score recomputation.

REQ-12

The Dockerfile has never been built — it was authored without a Docker daemon and sets no GOARCH. Production uses systemd instead. Fixing or removing it are both welcome.

Claim issue #1 →

The existing smoke test fabricates attestations, so it only works against a mock-mode server and cannot verify a real deployment.

Claim issue #2 →

There is no CI. The test gate lives in a local Makefile, which means a contributor cannot see their PR pass before a maintainer runs it by hand.

Claim issue #10 →