CleverWild CleverWild
0 Followers · 0 Following
Repositories Projects Packages Public Activity Starred Repositories
CleverWild closed issue MarketTakers/arbiter#60 2026-06-30 18:01:01 +00:00
Unseal and bootstrap handshake lack brute-force protection
CleverWild pushed to hashable-integrable-macro at MarketTakers/arbiter 2026-06-30 17:55:31 +00:00
0779d0db13 feat(macros): enhance Integrable derive with validation and versioning improvements
11a2d8c8f3 refactor(integrity): migrate impl Integrable to #[derive(Integrable)]
d861ff80be feat(macros): add #[derive(Integrable)] proc-macro
647f0c8519 refactor(crypto): move Integrable trait to arbiter-crypto
Compare 4 commits »
CleverWild created branch hashable-integrable-macro in MarketTakers/arbiter 2026-06-30 17:55:31 +00:00
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-28 11:24:26 +00:00
23827c613e test(client-auth): update metadata test to reflect frozen-metadata behavior
CleverWild commented on pull request MarketTakers/arbiter#95 2026-06-27 11:36:48 +00:00
security: batch of fixes

Done

CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-27 11:25:33 +00:00
8381b68a52 Merge branch 'main' into zeroized-bootstrap-token
b843105533 fix(user-agent): zombie sessions #74
Compare 2 commits »
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-25 18:09:23 +00:00
022003ac5e fix: lints
CleverWild created branch feat-auto-fix-lints in MarketTakers/arbiter 2026-06-24 13:01:43 +00:00
CleverWild pushed to feat-auto-fix-lints at MarketTakers/arbiter 2026-06-24 13:01:43 +00:00
cc21036448 fix(clippy): apply auto-fixable linting suggestions
4fd75701c7 ci(clippy): add auto-fix bot pipeline
Compare 2 commits »
CleverWild closed issue MarketTakers/arbiter#52 2026-06-22 15:54:08 +00:00
Come up with mechanism for enforcing integrity protection usage
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-22 15:53:39 +00:00
00ddf99d77 fix!: protect evm_wallet integrity and bind key ciphertext to wallet address
CleverWild opened issue MarketTakers/arbiter#97 2026-06-22 15:53:09 +00:00
Require explicit VERSION in Integrable trait
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-22 14:08:03 +00:00
b7ab5c79b7 fix(client-auth): freeze client metadata after initial operator approval
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-22 13:58:44 +00:00
b8e092b9d7 fix(operator): bind sign-transaction to operator-approved client set
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-22 13:50:49 +00:00
9c9dc1fbb5 fix(integrity): return AttestationStatus::Unavailable for key version mismatch
CleverWild commented on issue MarketTakers/arbiter#66 2026-06-22 13:04:47 +00:00
Transaction logs can be tampered with to reset rate limits

A key limitation of the system: sign_entity and verify_entity protect against modification of existing entries, but not against their deletion. If an attacker deletes an entry from `evm_transac…

CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-22 12:55:38 +00:00
77bf19f99e fix(wallet): delete access entries by entry ID instead of wallet ID
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-19 20:53:33 +00:00
f0456157d5 security(bootstrap): use SafeCell for token storage instead of zeroize
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-19 20:21:53 +00:00
c12c12d73e fix(UA): signing endpoint accepts arbitrary client_id
CleverWild commented on pull request MarketTakers/arbiter#95 2026-06-19 20:17:22 +00:00
security: batch of fixes

Well, the absence of zeroize was supposed to make me think over. Gonna be fixed.