Stas Skipper
  • My pronounces are: your/fucking/boss

  • Joined on 2025-09-03
Skipper closed issue MarketTakers/arbiter#65 2026-06-29 18:00:15 +00:00
Integrity envelopes do not survive root key rotation
Skipper closed issue MarketTakers/arbiter#71 2026-06-29 18:00:15 +00:00
Wallet-access revocation deletes by wallet_id instead of entry id
Skipper commented on pull request MarketTakers/arbiter#95 2026-06-27 11:37:27 +00:00
security: batch of fixes

tests still fail tho

Skipper created pull request MarketTakers/arbiter#98 2026-06-26 10:38:08 +00:00
deps(server): version bump
Skipper created branch push-zvwxtnqkumlx in MarketTakers/arbiter 2026-06-26 10:38:01 +00:00
Skipper pushed to push-zvwxtnqkumlx at MarketTakers/arbiter 2026-06-26 10:38:01 +00:00
e128fecfd8 deps(server): version bump
Skipper commented on pull request MarketTakers/arbiter#95 2026-06-26 10:09:02 +00:00
security: batch of fixes

LGTM, fix merge conflict and tests

Skipper closed issue MarketTakers/arbiter#68 2026-06-19 17:15:51 +00:00
RequestTracker allows arbitrary gaps across request flows
Skipper commented on pull request MarketTakers/arbiter#91 2026-06-19 14:05:28 +00:00
WIP: feat-shamir

so what is the status of this?

Skipper pushed to main at MarketTakers/arbiter 2026-06-19 14:05:00 +00:00
b843105533 fix(user-agent): zombie sessions #74
Skipper deleted branch fix-zombie-user-agents from MarketTakers/arbiter 2026-06-19 14:05:00 +00:00
Skipper merged pull request MarketTakers/arbiter#94 2026-06-19 14:04:58 +00:00
fix(user-agent): zombie sessions #74
Skipper closed issue MarketTakers/arbiter#74 2026-06-19 14:04:58 +00:00
Zombie user-agent sessions can block all new client approvals
Skipper suggested changes for MarketTakers/arbiter#95 2026-06-19 14:03:45 +00:00
security: batch of fixes

Well, we have safe_cell abstraction, so I don't see a need to introduce new zeroize depependency, and potentially new-type wrapper

Skipper deleted branch security-hash-revoke_at from MarketTakers/arbiter 2026-06-11 09:44:30 +00:00
Skipper pushed to main at MarketTakers/arbiter 2026-06-11 09:44:30 +00:00
a8e4a710f1 Merge pull request 'security(server): bind grant revocation state (revoked_at) to integrity hash' (#83) from security-hash-revoke_at into main
d99c87c473 fix: lints
303120c9ac Merge branch 'main' into security-hash-revoke_at
32f317384d security(evm): remove client-controlled wallet_access_id from grant revocation
4bb2c062dc feat(evm): add wallet_access_id to grant deletion requests and revocation logic
Compare 9 commits »
Skipper merged pull request MarketTakers/arbiter#83 2026-06-11 09:44:29 +00:00
security(server): bind grant revocation state (revoked_at) to integrity hash
Skipper closed issue MarketTakers/arbiter#56 2026-06-11 09:44:29 +00:00
revoked_at is not included in signature