Commit Graph

Select branches

Hide Pull Requests

Client-key-replacement-attack

PoC-terrors

check-uac-cerf

critical-fix-CI-check-all-features

enforcing-integrity

feat-auto-fix-lints

feat-shamir

fix-proto-build-script

hashable-integrable-macro

impl-useragent_delete_grant

key-alternative

main

push-lspnytwuyulm

push-wxnlsulvnrpz

push-yyxvkwvyspxv

push-zvwxtnqkumlx

security-breaktrougth

terminate-VaultGate-connection-after-vault-lockout

terrors-refactor

win-service

zeroized-bootstrap-token

#100

#17

#21

#22

#23

#24

#25

#26

#27

#29

#30

#31

#33

#34

#35

#36

#38

#39

#41

#42

#43

#44

#45

#46

#47

#48

#49

#50

#51

#53

#76

#77

#78

#80

#81

#82

#83

#87

#88

#89

#90

#91

#92

#93

#94

#95

#98

#99

Mono Color

• a30bef11da fix: terminate VaultGate connection after vault lockout terminate-VaultGate-connection-after-vault-lockout CleverWild 2026-06-30 20:07:01 +02:00
• 0779d0db13 feat(macros): enhance Integrable derive with validation and versioning improvements hashable-integrable-macro CleverWild 2026-06-30 19:55:28 +02:00
• 357726bc5d Merge pull request 'security: batch of fixes' (#95) from zeroized-bootstrap-token into main main Stas 2026-06-29 18:00:14 +00:00
• 11a2d8c8f3 refactor(integrity): migrate impl Integrable to #[derive(Integrable)] CleverWild 2026-06-29 16:58:36 +02:00
• d861ff80be feat(macros): add #[derive(Integrable)] proc-macro CleverWild 2026-06-29 16:58:35 +02:00
• 647f0c8519 refactor(crypto): move Integrable trait to arbiter-crypto CleverWild 2026-06-29 16:58:35 +02:00
• 23827c613e test(client-auth): update metadata test to reflect frozen-metadata behavior zeroized-bootstrap-token Clippy Bot 2026-06-28 12:06:06 +02:00
• 8381b68a52 Merge branch 'main' into zeroized-bootstrap-token Clippy Bot 2026-06-27 13:25:27 +02:00
• e128fecfd8 deps(server): version bump push-zvwxtnqkumlx Skipper 2026-06-26 12:10:29 +02:00
• 022003ac5e fix: lints Clippy Bot 2026-06-25 20:09:18 +02:00
• cc21036448 fix(clippy): apply auto-fixable linting suggestions feat-auto-fix-lints Clippy Bot 2026-06-23 18:47:23 +00:00
• 4fd75701c7 ci(clippy): add auto-fix bot pipeline CleverWild 2026-06-23 20:41:41 +02:00
• 00ddf99d77 fix!: protect evm_wallet integrity and bind key ciphertext to wallet address CleverWild 2026-06-22 17:53:34 +02:00
• b7ab5c79b7 fix(client-auth): freeze client metadata after initial operator approval CleverWild 2026-06-22 16:07:58 +02:00
• b8e092b9d7 fix(operator): bind sign-transaction to operator-approved client set CleverWild 2026-06-22 15:58:40 +02:00
• 9c9dc1fbb5 fix(integrity): return AttestationStatus::Unavailable for key version mismatch CleverWild 2026-06-22 15:50:43 +02:00
• 77bf19f99e fix(wallet): delete access entries by entry ID instead of wallet ID CleverWild 2026-06-22 14:55:32 +02:00
• f0456157d5 security(bootstrap): use SafeCell for token storage instead of zeroize CleverWild 2026-06-19 22:53:28 +02:00
• c12c12d73e fix(UA): signing endpoint accepts arbitrary client_id CleverWild 2026-06-19 22:21:48 +02:00
• 670448292a security: feat unseal and bootstrap handshake brute-force protection CleverWild 2026-06-18 21:16:38 +02:00
• 85f27d8f09 fix(bootstrap): token persists on disk with weak file permissions #59 CleverWild 2026-06-18 20:59:24 +02:00
• 32ceb27d77 security(server): use SysRng directly for bootstrap token generation CleverWild 2026-06-18 19:30:31 +02:00
• dc03923c24 security(memory): zeroization of bootstrap token CleverWild 2026-06-18 17:16:06 +02:00
• b843105533 fix(user-agent): zombie sessions #74 CleverWild 2026-06-18 16:29:43 +02:00
• 7ab47ec563 feat(vault)!: implement full Shamir re-key flow and governance execution (§3.3–§3.5) feat-shamir CleverWild 2026-06-14 15:11:11 +02:00
• aff87c13ca refactor(proposal): replace string kind dispatch with ProposalKindTag enum (strum) CleverWild 2026-06-14 15:02:25 +02:00
• 9f9b6820c2 feat(vault): add recovery passphrase handling for bootstrap and unseal processes CleverWild 2026-06-13 23:09:49 +02:00
• 6017ef29ca fix(crypto): handle 1-of-N Shamir split when ordinary_count=1 CleverWild 2026-06-13 23:08:53 +02:00
• eb16da3a20 feat(server): recovery operators with sleeping/wakeup mechanism (§3.5/§3.6) CleverWild 2026-06-13 22:31:10 +02:00
• 2fda0484fc feat(server): key-rotation proposals require full quorum (§3.3) CleverWild 2026-06-13 22:20:48 +02:00
• f8c621b20e feat(server): two-operator vault requires at least one recovery share CleverWild 2026-06-13 22:13:07 +02:00
• 3b090cd3ce refactor(server): typed pubkey len via u32::try_from in ReplaceOperator CleverWild 2026-06-13 21:53:46 +02:00
• 99e2b841e9 feat(server): ProposalKind::ApproveOneOffTransaction CleverWild 2026-06-13 21:32:23 +02:00
• b2b159b16f feat(server): ProposalKind::ApprovePersistentGrant CleverWild 2026-06-13 21:27:41 +02:00
• ab767fe158 feat(server): ProposalKind::UpdateShamirParameters CleverWild 2026-06-13 21:20:06 +02:00
• f080a8615f feat(server): ProposalKind::ReplaceOperator CleverWild 2026-06-13 16:46:04 +02:00
• 514a4cb2d1 feat(server): ProposalKind ::GrantWalletAccess and ::ApproveServerUpdate CleverWild 2026-06-13 15:51:22 +02:00
• 0b331d90bf test(server): governance integration tests CleverWild 2026-06-13 15:06:57 +02:00
• f981ddeb79 feat(server::grpc): wire governance RPCs through operator session CleverWild 2026-06-13 15:06:51 +02:00
• 8517b981f2 feat(server): introduce ProposalManager actor with quorum voting logic CleverWild 2026-06-13 15:06:43 +02:00
• af13465c03 feat(crypto): expose governance signing context and make shamir_threshold pub const CleverWild 2026-06-13 15:06:36 +02:00
• d7950beb09 feat(db): add proposal and proposal_vote tables CleverWild 2026-06-13 15:06:30 +02:00
• 0cb0de759b feat(proto): add governance proposal/vote RPC definitions CleverWild 2026-06-13 15:06:23 +02:00
• 6f270ef0c4 housekepping: add fixme for start_bootstrap's operator_id CleverWild 2026-06-12 22:01:17 +02:00
• 0098c3c08a refactor(server::crypto): use fixed-size [u8; 32] and KeyCell throughout seal key API CleverWild 2026-06-12 21:15:07 +02:00
• a3b98ca024 fix(server::tests): tighten unseal test seal_key params to &[u8; 32] CleverWild 2026-06-12 21:11:48 +02:00
• 0d364d1951 feat(server::grpc): wire Shamir committee bootstrap and unseal proto messages CleverWild 2026-06-12 19:43:17 +02:00
• 6f65c907a3 feat(server): introduce VaultCoordinator for multi-operator Shamir bootstrap/unseal CleverWild 2026-06-12 19:43:09 +02:00
• 9764b0d5ce refactor(server::actors::vault): clean up Bootstrap/TryUnseal, remove Bootstrapping state CleverWild 2026-06-12 19:43:02 +02:00
• 50fe18d6ce feat(server::crypto): add Shamir secret sharing utilities CleverWild 2026-06-12 19:42:56 +02:00
• 3e5f0cb3df feat(server::db): add share_salt column to operator table CleverWild 2026-06-12 19:42:49 +02:00
• 34850137df feat(server::actors::evm): implement operator_delete_grant CleverWild 2026-06-12 19:42:43 +02:00
• d1b96c8409 fix(server::peers::operator::auth): make ChallengeContext pub for smlang state machine CleverWild 2026-06-12 19:42:37 +02:00
• a8e4a710f1 Merge pull request 'security(server): bind grant revocation state (revoked_at) to integrity hash' (#83) from security-hash-revoke_at into main Stas 2026-06-11 09:44:28 +00:00
• d99c87c473 fix: lints CleverWild 2026-06-09 21:07:01 +02:00
• 303120c9ac Merge branch 'main' into security-hash-revoke_at CleverWild 2026-06-09 20:58:07 +02:00
• 32f317384d security(evm): remove client-controlled wallet_access_id from grant revocation CleverWild 2026-06-09 19:36:44 +02:00
• 4bb2c062dc feat(evm): add wallet_access_id to grant deletion requests and revocation logic CleverWild 2026-06-09 19:16:21 +02:00
• b0a3f37cea refactor(evm): implement revoke_grant method for grant revocation CleverWild 2026-06-09 19:11:39 +02:00
• 58a72da46c Merge branch 'security-hash-revoke_at' of ssh://git.markettakers.org:22222/MarketTakers/arbiter into security-hash-revoke_at CleverWild 2026-06-09 19:10:57 +02:00
• e287459b10 revert(server): bind grant revocation state (revoked_at) to integrity hash CleverWild 2026-06-09 18:45:30 +02:00
• 3c482da917 fix(smlang::statemachine): macro invocation requires inner types to be public CleverWild 2026-06-08 18:00:52 +02:00
• 9dbb18ae82 WIP: some things Skipper 2026-05-01 10:58:10 +02:00
• a773255935 refactor(server::db): introduced newtype wrappers for entity id's in database Skipper 2026-04-27 13:07:12 +02:00
• 3f801abdff housekeeping(server): deps upgrade + diesel migration to AsyncFnOnce Skipper 2026-05-01 11:00:58 +02:00
• 2b44570ab4 fix(server): MacOS build version Skipper 2026-04-19 13:47:38 +02:00
• 1f9b253433 housekeeping(server): removed unused deps Skipper 2026-04-19 13:44:09 +02:00
• a1c3ffd2d1 refactor: rename to to better reflect meaning Skipper 2026-04-19 13:35:18 +02:00
• fd25de32a1 docs: move to folder and update to new challenge payload Skipper 2026-04-18 15:14:03 +02:00
• 9ab074170b merge: feat-lints into main Skipper 2026-04-18 13:55:45 +02:00
• 18b8a3bbf5 Merge pull request 'refactor-integrity-check' (#90) from refactor-integrity-check into main Stas 2026-04-18 11:54:30 +00:00
• 38cf1b98b9 housekeeping(server): clippy warns fix Skipper 2026-04-18 13:53:03 +02:00
• 9cf87b2058 merge: refactor-integrity-check into main Skipper 2026-04-18 13:40:46 +02:00
• 929d50b589 housekeeping(server): clean too-broad visibility markers and organize imports Skipper 2026-04-18 13:29:45 +02:00
• 70acfc99b5 merge: refactor-integrity-check into main Skipper 2026-04-18 13:08:28 +02:00
• 28f84d03ab Merge pull request 'housekeeping(server): dependencies upgrade' (#89) from push-zmvtzuwrnyyv into main Stas 2026-04-17 19:20:50 +00:00
• 4a8e51ef32 docs: updated to new auth challenge format and removed stale TOCTOU race condition note Skipper 2026-04-17 18:25:31 +02:00
• 9ee86afc19 fix(useragent): now using new challenge format Skipper 2026-04-17 18:19:39 +02:00
• 790026e93b fix(server::tests): api surface of auth challenge changed Skipper 2026-04-17 17:49:06 +02:00
• 0e09afda5d refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database Skipper 2026-04-17 16:14:45 +02:00
• 51e6571d80 refactor(server): now keeps track of useragents, instead of Skipper 2026-04-16 23:48:47 +02:00
• 3b828d5874 refactor(server::grpc::vault_gate): standard approach using / traits Skipper 2026-04-16 22:14:55 +02:00
• a6f94e3115 fix(server): sending fixed vault state when on stage Skipper 2026-04-16 18:39:12 +02:00
• f49e995c2f WIP: kameo::messages wiring for transport generalization hdbg 2026-04-12 12:04:03 +02:00
• 694c569c08 feat(integrity): introduce sealed provenance markers for Verified enforcing-integrity CleverWild 2026-04-15 19:45:59 +02:00
• e88df432fb housekeeping(server): dependencies upgrade Skipper 2026-04-14 19:09:56 +02:00
• 8c4c63f51e WIP: kameo::messages wiring for transport generalization push-wxnlsulvnrpz hdbg 2026-04-12 12:04:03 +02:00
• 87ee0fe87b feat(user-agent): add VaultGate for sealed vault authentication hdbg 2026-04-08 18:29:52 +02:00
• bec82e036e feat(integrity): derive-like macro VerifiedFields that allows to inherit Verified<T> type's provenance to all fields of T CleverWild 2026-04-11 03:53:25 +02:00
• 9e1ab51398 security(useragent): validate server cert fingerprint and host instead of accepting all certificates check-uac-cerf CleverWild 2026-04-10 14:44:16 +02:00
• 41b3fc5d39 fix(lints): remove unstable ones CleverWild 2026-04-10 01:00:21 +02:00
• f6a0c32b9d feat: rustc and clippy linting CleverWild 2026-04-10 00:42:43 +02:00
• 205227a3df fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly hdbg 2026-04-08 17:45:49 +02:00
• a4070e7df7 fix(useragent): unsafe, but working implementation of ml-dsa hdbg 2026-04-07 15:41:50 +02:00
• 6b8da567dd fix(server::user_agent): useragents now self-sign themselves on bootstrap hdbg 2026-04-08 12:34:32 +02:00
• 1585f90cae refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus hdbg 2026-04-07 23:54:29 +02:00
• 5a34463228 security(server): bind grant revocation state (revoked_at) to integrity hash CleverWild 2026-04-08 12:09:54 +02:00
• 62dff3f810 Merge pull request 'refactor(hashing): introduce Hashable derive macro and migrate server types' (#82) from hashing-proc-macro into main Stas 2026-04-08 00:18:40 +00:00
• 6e22f368c9 refactor(hashing): introduce Hashable derive macro and migrate server types CleverWild 2026-04-08 01:32:59 +02:00
• f3cf6a9438 Merge pull request 'Post-quantum crypto and better useragent security' (#80) from push-xrxykvkuxpsv into main Stas 2026-04-07 19:26:54 +00:00