CleverWild CleverWild
0 Followers · 0 Following
Repositories Projects Packages Public Activity Starred Repositories
CleverWild commented on issue MarketTakers/arbiter#68 2026-06-19 12:03:23 +00:00
RequestTracker allows arbitrary gaps across request flows

The gap issue is already partially bounded by the checked_add overflow guard. Splitting the tracker per flow would require every request type to carry a flow-type tag in the protobuf message,…

CleverWild commented on issue MarketTakers/arbiter#70 2026-06-19 11:53:43 +00:00
Client approval quorum differs from documented consensus model

The finding is valid but requires a product decision before it can be fixed. The current implementation collects approvals only from currently connected operators — it has no awareness of how…

CleverWild opened issue MarketTakers/arbiter#96 2026-06-19 11:49:22 +00:00
Allow clippy's CI to automatically fix some of the linting issues
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-18 19:16:44 +00:00
670448292a security: feat unseal and bootstrap handshake brute-force protection
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-18 18:59:35 +00:00
85f27d8f09 fix(bootstrap): token persists on disk with weak file permissions #59
CleverWild closed issue MarketTakers/arbiter#62 2026-06-18 18:00:29 +00:00
Bootstrap token registration lacks proof of possession
CleverWild commented on issue MarketTakers/arbiter#62 2026-06-18 18:00:29 +00:00
Bootstrap token registration lacks proof of possession

The finding does not apply to the current implementation. The bootstrap token is consumed and the key registered only inside verify_solution after the challenge-response signature check passes,…

CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-18 17:30:36 +00:00
32ceb27d77 security(server): use SysRng directly for bootstrap token generation
CleverWild created pull request MarketTakers/arbiter#95 2026-06-18 15:16:25 +00:00
security(memory): zeroization of bootstrap token
CleverWild pushed to zeroized-bootstrap-token at MarketTakers/arbiter 2026-06-18 15:16:10 +00:00
dc03923c24 security(memory): zeroization of bootstrap token
CleverWild created branch zeroized-bootstrap-token in MarketTakers/arbiter 2026-06-18 15:16:10 +00:00
CleverWild created pull request MarketTakers/arbiter#94 2026-06-18 14:30:08 +00:00
fix(user-agent): zombie sessions #74
CleverWild created branch fix-zombie-user-agents in MarketTakers/arbiter 2026-06-18 14:29:50 +00:00
CleverWild pushed to fix-zombie-user-agents at MarketTakers/arbiter 2026-06-18 14:29:50 +00:00
b843105533 fix(user-agent): zombie sessions #74
CleverWild pushed to feat-shamir at MarketTakers/arbiter 2026-06-14 13:11:16 +00:00
7ab47ec563 feat(vault)!: implement full Shamir re-key flow and governance execution (§3.3–§3.5)
aff87c13ca refactor(proposal): replace string kind dispatch with ProposalKindTag enum (strum)
Compare 2 commits »
CleverWild pushed to feat-shamir at MarketTakers/arbiter 2026-06-13 21:10:06 +00:00
9f9b6820c2 feat(vault): add recovery passphrase handling for bootstrap and unseal processes
6017ef29ca fix(crypto): handle 1-of-N Shamir split when ordinary_count=1
Compare 2 commits »
CleverWild pushed to feat-shamir at MarketTakers/arbiter 2026-06-13 20:31:14 +00:00
eb16da3a20 feat(server): recovery operators with sleeping/wakeup mechanism (§3.5/§3.6)
CleverWild pushed to feat-shamir at MarketTakers/arbiter 2026-06-13 20:20:53 +00:00
2fda0484fc feat(server): key-rotation proposals require full quorum (§3.3)
CleverWild pushed to feat-shamir at MarketTakers/arbiter 2026-06-13 20:14:28 +00:00
f8c621b20e feat(server): two-operator vault requires at least one recovery share
CleverWild pushed to feat-shamir at MarketTakers/arbiter 2026-06-13 20:05:28 +00:00
3b090cd3ce refactor(server): typed pubkey len via u32::try_from in ReplaceOperator
99e2b841e9 feat(server): ProposalKind::ApproveOneOffTransaction
b2b159b16f feat(server): ProposalKind::ApprovePersistentGrant
ab767fe158 feat(server): ProposalKind::UpdateShamirParameters
f080a8615f feat(server): ProposalKind::ReplaceOperator
Compare 5 commits »