Repository navigation

security: audit rounds 2-3 — 55 findings across money safety, identity, and silent failure - #279

Merged

ralyodio merged 28 commits into

masterfrom

audit-vulns-round2

Aug 19, 2026

Commits on Aug 19, 2026

fix(security): CAS the forward claim, add missing uniqueness, gate Stripe reads

ralyodio
and
claude
committed
b754bf0
fix(security): require proof of possession for identity and multisig actions

ralyodio
and
claude
committed
9390b04
fix(security): protect exported key material and verify prepared transactions

ralyodio
and
claude
committed
ae8ca48
fix(security): stop transmitting wallet seeds, require proof for wallet claims

ralyodio
and
claude
committed
eaa03b5
fix(security): enforce spend controls at broadcast, validate escrow payees

ralyodio
and
claude
committed
2d7f22b
fix(security): close device-flow phishing, login-CSRF and email enumeration

ralyodio
and
claude
committed
44e788c
fix(ci): mask secrets extracted from the ENV_FILE blob

ralyodio
and
claude
committed
de3e33c
fix(scripts): restore sweep-balances, which has never been runnable

ralyodio
and
claude
committed
a8b0644
fix(escrow): stop stranding funds at expiry and make refunds two-sided

ralyodio
and
claude
committed
2056379
fix(reputation,wallets): repair queries against columns that do not exist

ralyodio
and
claude
committed
28eaee0
fix(swaps,sweeps): stop reporting success on lost keys and stalled batches

ralyodio
and
claude
committed
f900a72
fix(payments): implement DOGE forwarding oracle, add Stripe and series idempotency

ralyodio
and
claude
committed
442d020
fix(wallets,realtime): validate payout addresses, stop leaking session tokens

ralyodio
and
claude
committed
9da5f28
fix(escrow,sdk): unstarve settlement windows, survive a failed swap poll

ralyodio
and
claude
committed
70b68e4
fix(invoices): one numbering implementation instead of four

ralyodio
and
claude
committed
0a5c015
fix(providers,ci,plugin): bound silent amount adjustment, pin the image lockfile

ralyodio
and
claude
committed
3b7204b
fix(monitor,payouts): deadline every balance lookup, give indeterminate an exit

ralyodio
and
claude
committed
d7ee500
fix(proposals): enforce the deadline everywhere, and give 'expired' a producer

ralyodio
and
claude
committed
47b4324
fix(escrow): reserve the platform arbiter's derivation index

ralyodio
and
claude
committed
9bc141e
fix(subscriptions): bound how many unpaid checkouts one merchant can hold

ralyodio
and
claude
committed
35b912d
fix(collections): take the network fee out of the sweep, not on top of it

ralyodio
and
claude
committed
710c683
fix(escrow,webhook,docker): close three P4 items, verify three more as clean

ralyodio
and
claude
committed
9e17c1e
fix(collections): stop two payments sharing a derivation index

ralyodio
and
claude
committed
b60eda0
fix(x402): an unnamed asset must not mean any asset will do

ralyodio
and
claude
committed
51cb80f
fix(stripe,lightning): stop --apply unsubscribing handlers, stop storing the platform key

ralyodio
and
claude
committed
87d37b1
fix(fossbilling,escrow): dedup webhook payments, unbreak the fallback series path

ralyodio
and
claude
committed
9cc7b75
security(rls): stop reputation_receipts relying on a missing grant

ralyodio
and
claude
committed
0abeae7
docs: correct the scale claim on reputation_receipts

ralyodio
and
claude
committed
5548b18

Navigation Menu

Repository navigation

security: audit rounds 2-3 — 55 findings across money safety, identity, and silent failure - #279

security: audit rounds 2-3 — 55 findings across money safety, identity, and silent failure#279
ralyodio merged 28 commits into
masterfrom
audit-vulns-round2

Commits on Aug 19, 2026

fix(security): CAS the forward claim, add missing uniqueness, gate Stripe reads

fix(security): require proof of possession for identity and multisig actions

fix(security): protect exported key material and verify prepared transactions

fix(security): stop transmitting wallet seeds, require proof for wallet claims

fix(security): enforce spend controls at broadcast, validate escrow payees

fix(security): close device-flow phishing, login-CSRF and email enumeration

fix(ci): mask secrets extracted from the ENV_FILE blob

fix(scripts): restore sweep-balances, which has never been runnable

fix(escrow): stop stranding funds at expiry and make refunds two-sided

fix(reputation,wallets): repair queries against columns that do not exist

fix(swaps,sweeps): stop reporting success on lost keys and stalled batches

fix(payments): implement DOGE forwarding oracle, add Stripe and series idempotency

fix(wallets,realtime): validate payout addresses, stop leaking session tokens

fix(escrow,sdk): unstarve settlement windows, survive a failed swap poll

fix(invoices): one numbering implementation instead of four

fix(providers,ci,plugin): bound silent amount adjustment, pin the image lockfile

fix(monitor,payouts): deadline every balance lookup, give indeterminate an exit

fix(proposals): enforce the deadline everywhere, and give 'expired' a producer

fix(escrow): reserve the platform arbiter's derivation index

fix(subscriptions): bound how many unpaid checkouts one merchant can hold

fix(collections): take the network fee out of the sweep, not on top of it

fix(escrow,webhook,docker): close three P4 items, verify three more as clean

fix(collections): stop two payments sharing a derivation index

fix(x402): an unnamed asset must not mean any asset will do

fix(stripe,lightning): stop --apply unsubscribing handlers, stop storing the platform key

fix(fossbilling,escrow): dedup webhook payments, unbreak the fallback series path

security(rls): stop reputation_receipts relying on a missing grant

docs: correct the scale claim on reputation_receipts