Skip to content

fix: resolve crates audit issues [skip-line-limit] - #1749

Draft
hmzakhalid wants to merge 36 commits into
mainfrom
fix/crates-audit-release-readiness
Draft

fix: resolve crates audit issues [skip-line-limit]#1749
hmzakhalid wants to merge 36 commits into
mainfrom
fix/crates-audit-release-readiness

Conversation

@hmzakhalid

Copy link
Copy Markdown
Collaborator

Fixes:

  • B-01: enforce non-zero finality depth for non-local EVM ingestion.
  • B-02: authenticate and authorize protocol gossip before persistence.
  • B-03: acknowledge correctness events only after mailbox admission and durable fanout.
  • B-04: persist EVM effect intents in a retryable outbox.
  • B-05: apply backpressure without permanently deduplicating dropped outbound events.
  • B-06: drive deterministic aggregator failover through persisted leases.
  • B-07: fail node construction when required EVM writers cannot attach.
  • B-08: reject incompatible v0.3 persisted state.
  • B-09: make release promotion fail closed until the complete candidate passes all gates.
  • H-01: replace probabilistic historical ordering barriers with exact IDs.
  • H-02: use stable cryptographic event identity hashes.
  • H-03: require explicit, unique chain IDs.
  • H-04: propagate Sled read failures instead of treating them as missing values.
  • H-05: supervise the required network task and revoke readiness on failure.
  • H-06: enforce admission and execution deadlines for CPU-bound jobs.
  • H-07: ship viable v0.4 deploy and DAppNode configuration using the exact release candidate.
  • H-08: use per-ciphertext KDF salts and separate credential handling from encrypted node state.
  • M-01: flush the commit log to stable media before reporting success.
  • M-02: persist plaintext aggregation deadlines and terminal failure state.
  • M-03: require full proof aggregation and folded-proof contract verification in CI.
  • M-04: pin container, workflow, and release build inputs.
  • M-05: add protocol-aware health, readiness, metrics, alerts, and operator runbooks.
  • M-06: fail circuit lint when nargo is unavailable.
  • M-07: bind the control endpoint only after Ciphernode readiness.
  • L-01: make DAppNode hardening tests executable and run them in CI.
  • L-02: bind release tags to tested commits on protected main ancestry.
  • L-03: remove legacy plaintext transaction payload debt.
  • L-04: use canonical DAppNode image and source metadata.

@vercel

vercel Bot commented Jul 28, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
crisp Ready Ready Preview Aug 16, 2026 10:34am
interfold-dashboard Ready Ready Preview Aug 16, 2026 10:34am
interfold-docs Ready Ready Preview Aug 16, 2026 10:34am

Request Review

@hmzakhalid
hmzakhalid force-pushed the fix/crates-audit-release-readiness branch from ae66863 to b65a5e0 Compare August 16, 2026 10:32
@coderabbitai

coderabbitai Bot commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 3c78cefc-5cc4-450e-ac93-78617b85c8bc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant