Skip to content

fix: close verified input factory bypass - #10

Merged
PureSaber merged 1 commit into
mainfrom
codex/m8-verified-input-factory
Aug 31, 2026
Merged

fix: close verified input factory bypass#10
PureSaber merged 1 commit into
mainfrom
codex/m8-verified-input-factory

Conversation

@PureSaber

Copy link
Copy Markdown
Owner

范围

  • 移除VerifiedFactorInput模块级认证token和可直接调用的类工厂
  • 改为不可公开构造、不可replace、不可变的opaque loader结果
  • 保留Normalized/Curated两个正式loader的完整快照、hash、上下文、PIT、顺序、L2、TOCTOU校验
  • 版本升级为0.8.1

契约影响

puresaber.verified-factor-input@1.0.0序列化字段不变;Python对象构造方式收紧,消费者必须继续使用两个公开loader。

测试证据

  • 独立只读验收:PASS,P1=0,P2=0
  • Python3.12全新锁环境:479 passed,1个既有Windows符号链接skip
  • 全包纯分支87.83%;全部19个核心模块>=90%
  • Ruff及pip check通过
  • quant-factors正式fixed/session/event/market_event组合测试通过

回滚

Git revert本PR的merge commit并恢复v0.8.0依赖;不移动或重建任何既有tag。

@PureSaber
PureSaber merged commit 8f258f1 into main Aug 31, 2026
3 checks passed
PureSaber added a commit that referenced this pull request Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants