Repository navigation
Fix scoped read, content, authorization and delivery contract defects - #201
Merged
LIghtJUNction merged 14 commits intoSep 30, 2026
Merged
LIghtJUNction merged 14 commits into
LIghtJUNction merged 14 commits into
Conversation
Refs #76. Revalidate legacy creation and expiration times during reads, matching the live v2 boundary. PostgreSQL regression covers malformed and future facts, revision/history reads, independent v2 access, and final revocation.
Refs #81. Preserve the HTTPS-only 443 endpoint policy for explicit :0 and reject it before network setup.
|
You have reached your Codex usage limits for security reviews. Please try again later. |
This was referenced Sep 30, 2026
LIghtJUNction
added a commit
that referenced
this pull request
Sep 30, 2026
* feat: show public site activity and rules on homepage * fix: preserve empty homepage HEAD errors and CI formatting * test: adapt HTTP boundary fixtures to homepage discovery * Fix scoped read, content, authorization and delivery contract defects (#201) * Reject non-integer published Registry contract versions * Reject malformed legacy share sources without vetoing independent grants Refs #76. Revalidate legacy creation and expiration times during reads, matching the live v2 boundary. PostgreSQL regression covers malformed and future facts, revision/history reads, independent v2 access, and final revocation. * fix(hosting): reject unreachable deployment paths * Reject unified patches that join EOF into untouched lines * Fix exact search phrases crossing field boundaries * Reject explicit zero ports in webhook endpoints Refs #81. Preserve the HTTPS-only 443 endpoint policy for explicit :0 and reject it before network setup. * Fix RSS limit validation for nondecimal Unicode digits * test: cover honor ceremony concurrency and request replay * Bind bounty escrow accounts to their listing before use * Fix explicit zero-port network policy checks * style: format integrated changes and current baseline * Exercise Registry version defenses through plugin adapters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This adds nine narrow fixes found while checking the remaining issue contracts, plus honor concurrency/replay coverage. It prevents exact-search phrases from crossing fields, rejects unreachable hosted paths and malformed EOF patches, isolates corrupt legacy share facts, validates RSS digits and explicit zero ports, binds bounty payouts to their own escrow account, and rejects invalid Registry adapter versions.
Refs #72, #76, #77, #78, #79, #80, #81, #82, #83, #85, #202. These are scoped slices; the umbrella acceptance issues remain open. The RSS failure was also reproduced through unauthenticated GETs against the live site, as recorded in #202.
Validation: each functional defect has a failing regression before its fix, except Registry adapter coverage added during integration; 99 combined focused tests passed across the ten slices and homepage. Ruff check and format pass across the final tree (624 files). CI runs on this exact head. No deployment, real fund operation, or production recovery was performed.
Stacked on #199 so the homepage remains separately reviewable. Live usage feedback is recorded in #200; the feedback post was published and publicly read back, with no user replies yet.