Commit Graph

Select branches

Hide Pull Requests

Client-key-replacement-attack

PoC-terrors

check-uac-cerf

cleverwild/sznwsuou

critical-fix-CI-check-all-features

enforcing-integrity

error-handling-hardening

feat-auto-fix-lints

feat-shamir

feat-shamir-custody

feat-shamir-v2

fix-proto-build-script

hashable-integrable-macro

impl-useragent_delete_grant

key-alternative

main

push-lspnytwuyulm

push-wxnlsulvnrpz

push-yyxvkwvyspxv

push-zvwxtnqkumlx

security-breaktrougth

terminate-VaultGate-connection-after-vault-lockout

terrors-refactor

win-service

zeroized-bootstrap-token

#100

#101

#102

#103

#104

#105

#106

#107

#108

#17

#21

#22

#23

#24

#25

#26

#27

#29

#30

#31

#33

#34

#35

#36

#38

#39

#41

#42

#43

#44

#45

#46

#47

#48

#49

#50

#51

#53

#76

#77

#78

#80

#81

#82

#83

#87

#88

#89

#90

#91

#92

#93

#94

#95

#98

#99

Mono Color

• 7e23b3b2ec security(evm): remove client-controlled wallet_access_id from grant revocation CleverWild 2026-06-09 19:36:44 +02:00
• e4db36f145 docs: move to folder and update to new challenge payload Skipper 2026-04-18 15:14:03 +02:00
• bb28d311a1 feat(evm): add wallet_access_id to grant deletion requests and revocation logic CleverWild 2026-06-09 19:16:21 +02:00
• 602be3aa11 merge: feat-lints into main Skipper 2026-04-18 13:55:45 +02:00
• 3302bb8995 refactor(evm): implement revoke_grant method for grant revocation CleverWild 2026-06-09 19:11:39 +02:00
• 1d15e04a6b fix(lints): remove unstable ones CleverWild 2026-04-10 01:00:21 +02:00
• d8a03fcdbe Merge pull request 'refactor-integrity-check' (#90) from refactor-integrity-check into main Stas 2026-04-18 11:54:30 +00:00
• 772936937b Merge branch 'security-hash-revoke_at' of ssh://git.markettakers.org:22222/MarketTakers/arbiter into security-hash-revoke_at CleverWild 2026-06-09 19:10:57 +02:00
• d4084ded35 feat: rustc and clippy linting CleverWild 2026-04-10 00:42:43 +02:00
• 8392f27ce4 housekeeping(server): clippy warns fix Skipper 2026-04-18 13:53:03 +02:00
• 7a64bcd1bf revert(server): bind grant revocation state (revoked_at) to integrity hash CleverWild 2026-06-09 18:45:30 +02:00
• 943d0ee72f security(server): bind grant revocation state (revoked_at) to integrity hash CleverWild 2026-04-08 12:09:54 +02:00
• e6724cb8d3 merge: refactor-integrity-check into main Skipper 2026-04-18 13:40:46 +02:00
• 6221debd84 Merge pull request 'housekeeping(server): dependencies upgrade' (#89) from push-zmvtzuwrnyyv into main Stas 2026-04-17 19:20:50 +00:00
• 6b572d0c86 housekeeping(server): clean too-broad visibility markers and organize imports Skipper 2026-04-18 13:29:45 +02:00
• d7ca0b4fc8 housekeeping(server): dependencies upgrade Skipper 2026-04-14 19:09:56 +02:00
• bf63279f73 merge: refactor-integrity-check into main Skipper 2026-04-18 13:08:28 +02:00
• 96b4eb1d98 Merge pull request 'refactor(hashing): introduce Hashable derive macro and migrate server types' (#82) from hashing-proc-macro into main Stas 2026-04-08 00:18:40 +00:00
• 539265e3b1 docs: updated to new auth challenge format and removed stale TOCTOU race condition note Skipper 2026-04-17 18:25:31 +02:00
• cddf9e02ba fix(useragent): now using new challenge format Skipper 2026-04-17 18:19:39 +02:00
• 270e843598 fix(server::tests): api surface of auth challenge changed Skipper 2026-04-17 17:49:06 +02:00
• 0a48839321 refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database Skipper 2026-04-17 16:14:45 +02:00
• f6151293d4 refactor(server): now keeps track of useragents, instead of Skipper 2026-04-16 23:48:47 +02:00
• 3bbf713e67 refactor(server::grpc::vault_gate): standard approach using / traits Skipper 2026-04-16 22:14:55 +02:00
• 810656702b fix(server): sending fixed vault state when on stage Skipper 2026-04-16 18:39:12 +02:00
• 4823a291f8 WIP: kameo::messages wiring for transport generalization hdbg 2026-04-12 12:04:03 +02:00
• 1d9b572565 feat(user-agent): add VaultGate for sealed vault authentication hdbg 2026-04-08 18:29:52 +02:00
• af7e90dcad fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly hdbg 2026-04-08 17:45:49 +02:00
• 97e6b1950d fix(useragent): unsafe, but working implementation of ml-dsa hdbg 2026-04-07 15:41:50 +02:00
• d2f41e693c fix(server::user_agent): useragents now self-sign themselves on bootstrap hdbg 2026-04-08 12:34:32 +02:00
• 9650407093 refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus hdbg 2026-04-07 23:54:29 +02:00
• 247cb90fbf refactor(hashing): introduce Hashable derive macro and migrate server types CleverWild 2026-04-08 01:32:59 +02:00
• 100c257e95 Merge pull request 'Post-quantum crypto and better useragent security' (#80) from push-xrxykvkuxpsv into main Stas 2026-04-07 19:26:54 +00:00
• a49baf7386 housekeeping(server): fixed clippy warns hdbg 2026-04-07 16:25:21 +02:00
• 6b814f4869 refactor(server): moved shared module crypto into arbiter-crypto hdbg 2026-04-07 15:41:50 +02:00
• 97b7b483ff docs: ml-dsa scheme everywhere hdbg 2026-04-07 14:59:03 +02:00
• 4c2e00b56d refactor(server): migrated auth to ml-dsa hdbg 2026-04-07 11:43:21 +02:00
• 13fb31f841 fix(server::bootsrapper): token compare is now constant-time hdbg 2026-04-06 18:27:46 +02:00
• 2df25b8641 tests(server::client::auth): integrity envelope insertion for valid paths hdbg 2026-04-06 18:19:56 +02:00
• 11ad5df426 feat(server): add integrity verification for client keys hdbg 2026-04-06 17:53:06 +02:00
• 307822187c Merge pull request 'fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing' (#77) from push-opwuyuwxknyo into main Stas 2026-04-06 15:42:47 +00:00
• bd0a8f3907 tests(server): property-based testing for ordering independency for hash hdbg 2026-04-06 16:35:07 +02:00
• d482ed37aa fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing hdbg 2026-04-06 15:45:46 +02:00
• dcf42b0e4e fix(server): added chain_id check and covered check_shared_constraints with unit tests hdbg 2026-04-06 12:05:55 +02:00
• 38284d84b6 tests(server): initial cargo-mutants hdbg 2026-04-05 16:00:13 +02:00
• 498e2e3145 fix(server): simplify hash function for debug profile hdbg 2026-04-05 16:00:13 +02:00
• e1b32165e9 Merge pull request 'feat(server): integrity envelope engine for EVM grants with HMAC verification' (#51) from integrity-envelope into main Stas 2026-04-05 16:26:51 +00:00
• 9173be2920 tests(server): fixed for new integrity checks hdbg 2026-04-05 14:35:41 +02:00
• d55e9880ec refactor(server): rework envelopes and integrity check hdbg 2026-04-05 10:47:21 +02:00
• ba7bfe9b6f fix(server): remove stale mentions of miette hdbg 2026-04-05 10:44:45 +02:00
• 6a0c512773 chore: inline integrity proto types CleverWild 2026-04-05 00:53:36 +02:00
• 4bd8a2df33 feat(server): integrity envelope engine for EVM grants with HMAC verification CleverWild 2026-04-04 21:52:50 +02:00
• 6f33d44697 docs: add recovery operators and multi-operator details hdbg 2026-04-04 10:32:44 +02:00
• cdf2394963 docs: add multi-operator governance section hdbg 2026-04-03 22:43:37 +02:00
• 37fa954933 merge: @main into client-integrity-verification hdbg 2026-04-05 10:13:19 +02:00
• 5c3421de1e housekeeping(server): fixed clippy warns hdbg 2026-04-04 14:33:20 +02:00
• be23f87e67 refactor(user-agent): remove backfill pubkey integrity tags hdbg 2026-04-04 14:31:39 +02:00
• 29f2174dcf fix(server): previously, user agent auth accepted invalid signatures hdbg 2026-04-04 14:26:04 +02:00
• 149035ecf5 refactor(server): separate crypto by purpose and moved outside of actor into separate module hdbg 2026-04-04 13:40:52 +02:00
• 17ea8d8dc9 feat(auth): implement attestation status verification for public keys CleverWild 2026-04-04 12:10:45 +02:00
• e9e2888e95 fix(keyholder): comment drift CleverWild 2026-04-04 12:02:50 +02:00
• 0b30416a7b refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag CleverWild 2026-04-04 12:00:39 +02:00
• e2e2c4fc07 feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill CleverWild 2026-03-30 00:17:04 +02:00
• 2b7d3257da style(dashboard): format code and add title margin hdbg 2026-03-29 00:31:28 +01:00
• ed6e102c96 feat(grants-create): add configurable grant authorization fields hdbg 2026-03-29 00:13:45 +01:00
• a7e031faca refactor(useragent::evm::grants): split into more files & flutter_form_builder usage hdbg 2026-03-28 19:35:58 +01:00
• 8736a01e1f fix(useragent::dashboard): screen pushed twice due to improper listen hook hdbg 2026-03-28 19:17:55 +01:00
• 11c45ca4e1 refactor(grants): wrap grant list in SingleChildScrollView hdbg 2026-03-28 18:18:28 +01:00
• 5323eea129 style(dashboard): remove const from _CalloutBell and add title to nav rail hdbg 2026-03-28 18:13:13 +01:00
• 238a9206e1 refactor(useragent): moved shared CreamPanel and StatePanel into generic widgets hdbg 2026-03-28 17:57:50 +01:00
• 0048d627eb feat(evm): add EVM grants screen with create UI and list hdbg 2026-03-28 14:00:13 +01:00
• 8aaeec078b refactor(proto): restructure wallet access messages for improved data organization hdbg 2026-03-28 12:49:47 +01:00
• 3ca2554468 refactor(server::evm): removed repetetive errors and error variants hdbg 2026-03-27 15:32:40 +01:00
• d982954a11 refactor(useragent::evm::table): broke down into more widgets hdbg 2026-03-26 20:46:15 +01:00
• 3b75d146a9 refactor(useragent::evm): moved out header into general widget hdbg 2026-03-26 20:42:48 +01:00
• 27230f975f feat(useragent): vibe-coded access list hdbg 2026-03-25 11:52:10 +01:00
• e79fc055d4 fix(errors)!: forbid interpolated details in wire-facing internal errors error-handling-hardening CleverWild 2026-08-09 00:11:03 +02:00
• a30bef11da fix: terminate VaultGate connection after vault lockout terminate-VaultGate-connection-after-vault-lockout CleverWild 2026-06-30 20:07:01 +02:00
• 0779d0db13 feat(macros): enhance Integrable derive with validation and versioning improvements hashable-integrable-macro CleverWild 2026-06-30 19:55:28 +02:00
• 357726bc5d Merge pull request 'security: batch of fixes' (#95) from zeroized-bootstrap-token into main Stas 2026-06-29 18:00:14 +00:00
• 11a2d8c8f3 refactor(integrity): migrate impl Integrable to #[derive(Integrable)] CleverWild 2026-06-29 16:58:36 +02:00
• d861ff80be feat(macros): add #[derive(Integrable)] proc-macro CleverWild 2026-06-29 16:58:35 +02:00
• 647f0c8519 refactor(crypto): move Integrable trait to arbiter-crypto CleverWild 2026-06-29 16:58:35 +02:00
• 23827c613e test(client-auth): update metadata test to reflect frozen-metadata behavior zeroized-bootstrap-token Clippy Bot 2026-06-28 12:06:06 +02:00
• 8381b68a52 Merge branch 'main' into zeroized-bootstrap-token Clippy Bot 2026-06-27 13:25:27 +02:00
• 022003ac5e fix: lints Clippy Bot 2026-06-25 20:09:18 +02:00
• cc21036448 fix(clippy): apply auto-fixable linting suggestions feat-auto-fix-lints Clippy Bot 2026-06-23 18:47:23 +00:00
• 4fd75701c7 ci(clippy): add auto-fix bot pipeline CleverWild 2026-06-23 20:41:41 +02:00
• 00ddf99d77 fix!: protect evm_wallet integrity and bind key ciphertext to wallet address CleverWild 2026-06-22 17:53:34 +02:00
• b7ab5c79b7 fix(client-auth): freeze client metadata after initial operator approval CleverWild 2026-06-22 16:07:58 +02:00
• b8e092b9d7 fix(operator): bind sign-transaction to operator-approved client set CleverWild 2026-06-22 15:58:40 +02:00
• 9c9dc1fbb5 fix(integrity): return AttestationStatus::Unavailable for key version mismatch CleverWild 2026-06-22 15:50:43 +02:00
• 77bf19f99e fix(wallet): delete access entries by entry ID instead of wallet ID CleverWild 2026-06-22 14:55:32 +02:00
• f0456157d5 security(bootstrap): use SafeCell for token storage instead of zeroize CleverWild 2026-06-19 22:53:28 +02:00
• c12c12d73e fix(UA): signing endpoint accepts arbitrary client_id CleverWild 2026-06-19 22:21:48 +02:00
• 670448292a security: feat unseal and bootstrap handshake brute-force protection CleverWild 2026-06-18 21:16:38 +02:00
• 85f27d8f09 fix(bootstrap): token persists on disk with weak file permissions #59 CleverWild 2026-06-18 20:59:24 +02:00
• 32ceb27d77 security(server): use SysRng directly for bootstrap token generation CleverWild 2026-06-18 19:30:31 +02:00
• dc03923c24 security(memory): zeroization of bootstrap token CleverWild 2026-06-18 17:16:06 +02:00
• b843105533 fix(user-agent): zombie sessions #74 CleverWild 2026-06-18 16:29:43 +02:00