aeat.adapters.persistence.storage.master_key._recovery_record module

Strict pydantic v2 record for the BIP-39 recovery wrap envelope.

Carries the wrapped DEK, AES-GCM nonce, AES-GCM tag, the 24-word recovery-code word count, the HKDF info string, and the creation timestamp. The mnemonic itself is never stored; only the wrap derived from the mnemonic-bound KEK travels in this envelope.

class RecoveryRecord(**data)

Bases: BaseModel

BIP-39 recovery envelope wrapping one bucket’s DEK.

Parameters:

• wrapped_dek_b64 (str)

• nonce_b64 (str)

• tag_b64 (str)

• mnemonic_word_count (Literal[24])

• hkdf_info (str)

• created_at (datetime)

wrapped_dek_b64: str

nonce_b64: str

tag_b64: str

mnemonic_word_count: Literal[24]

hkdf_info: str

created_at: datetime