Stas Skipper
0 Followers · 0 Following

  • My pronounces are: your/fucking/boss

  • Joined on 2025-09-03
Repositories Projects Packages Public Activity Starred Repositories
Skipper pushed to main at MarketTakers/arbiter 2026-04-05 16:26:52 +00:00
5ee1b49c43 Merge pull request 'feat(server): integrity envelope engine for EVM grants with HMAC verification' (#51) from integrity-envelope into main
00745bb381 tests(server): fixed for new integrity checks
b122aa464c refactor(server): rework envelopes and integrity check
9fab945a00 fix(server): remove stale mentions of miette
aeed664e9a chore: inline integrity proto types
Compare 6 commits »
Skipper merged pull request MarketTakers/arbiter#51 2026-04-05 16:26:51 +00:00
feat(server): integrity envelope engine for EVM grants with HMAC verification
Skipper commented on pull request MarketTakers/arbiter#53 2026-04-05 16:26:34 +00:00
feat(server): implement useragent_delete_grant hard delete cleanup

Well, after some chill I though of another idea: we could just use shared_grant_id (id of evm_basic_grant) instead of grant specific id. In this way, we would avoid writing generic invocation…

Skipper opened issue MarketTakers/arbiter#74 2026-04-05 16:23:12 +00:00
Zombie user-agent sessions can block all new client approvals
Skipper opened issue MarketTakers/arbiter#73 2026-04-05 16:23:12 +00:00
Consumed bootstrap token is not zeroized in memory
Skipper opened issue MarketTakers/arbiter#72 2026-04-05 16:23:11 +00:00
Bootstrap token comparison is not constant-time
Skipper opened issue MarketTakers/arbiter#71 2026-04-05 16:23:11 +00:00
Wallet-access revocation deletes by wallet_id instead of entry id
Skipper opened issue MarketTakers/arbiter#70 2026-04-05 16:23:10 +00:00
Client approval quorum differs from documented consensus model
Skipper opened issue MarketTakers/arbiter#69 2026-04-05 16:23:10 +00:00
Integrity MAC depends on unordered SQLite row ordering
Skipper opened issue MarketTakers/arbiter#68 2026-04-05 16:23:09 +00:00
RequestTracker allows arbitrary gaps across request flows
Skipper opened issue MarketTakers/arbiter#67 2026-04-05 16:23:09 +00:00
Bootstrap token RNG seeding should be made explicit
Skipper opened issue MarketTakers/arbiter#66 2026-04-05 16:23:08 +00:00
Transaction logs can be tampered with to reset rate limits
Skipper opened issue MarketTakers/arbiter#65 2026-04-05 16:23:08 +00:00
Integrity envelopes do not survive root key rotation
Skipper opened issue MarketTakers/arbiter#64 2026-04-05 16:23:07 +00:00
User-agent signing endpoint accepts arbitrary client_id
Skipper opened issue MarketTakers/arbiter#63 2026-04-05 16:23:07 +00:00
SDK client metadata is silently rewritten on reconnect
Skipper opened issue MarketTakers/arbiter#61 2026-04-05 16:23:06 +00:00
User-agent auth accepts integrity-unavailable state while sealed
Skipper opened issue MarketTakers/arbiter#62 2026-04-05 16:23:06 +00:00
Bootstrap token registration lacks proof of possession
Skipper opened issue MarketTakers/arbiter#59 2026-04-05 16:23:05 +00:00
Bootstrap token persists on disk with weak file permissions
Skipper opened issue MarketTakers/arbiter#60 2026-04-05 16:23:05 +00:00
Unseal and bootstrap handshake lack brute-force protection
Skipper opened issue MarketTakers/arbiter#58 2026-04-05 16:15:41 +00:00
Client key is not integrity-protected