Implement and deploy signed wallet-security portal with durable PostgreSQL state #5
Loading…
Reference in a new issue
No description provided.
Delete branch "bb/wallet-security-portal-rust-typescript-postgresq-thr_wur9hgwhec"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Deploys the noncustodial Rust/TypeScript/PostgreSQL portal at https://security.cl8y.com. Wallets authenticate with one-use ADR-036 proofs; added wallets and assignment candidates independently prove control. Delayed dual-consent profile roles preserve old timers and never confer token authority. Encrypted verified-contact workflows, transactional warning outbox, bounded retries/uncertainty, finalized receipt ingestion and reviewed ABI integration are implemented. Direct token signing remains in the wallet; the API holds no wallet keys or privileged transaction path.
Workload source:
e44569e45b15dbee4b0347dff742f92bd85bedb2. Tested immutable image:sha256:07b476118ac7ca8a8af9653471026d02c0e615ace174231bd50aea06392b607e. Separately reviewed deployment hook:b8aa303154b25d3017816c258b0daeb8954b7b26, which selects this deployment's unique private database hostname while preserving credentials and trust.Validation passed: nine focused backend checks, nine frontend checks, 13 exact-image migration/privilege/owned-restore assertions and all 16 live owned-wallet smoke assertions. Independent review checked source, actual HTTPS/headers/proxy behavior, exact source/migration, advancing worker heartbeat and runtime privilege/network boundaries. No real-recipient messages or chain transactions were sent.
Acceptance stays scoped: there are zero deployed security-v1 contracts, so chain controls remain unavailable pending independently verified identities/custody. Notification provider activation is still under agent-owned scoped Mailu/Telegram enrollment and review; no delivery is claimed. Off-host encrypted backup/key-preservation proof remains a deployment hardening continuation. Issues #1–#4 remain open for their outstanding acceptance; source merge does not assert whole-program production completion. Runtime/operations receipts are published separately.
Implement signed multi-wallet security portal with durable PostgreSQL stateto Implement signed multi-wallet portal, durable alerts and reviewed ABI integrationIndependent source review receipt for
138849ca4caa1defb41ee07ac45e0355a62e921e:Reviewer
thr_rbd98geirafound no remaining exploitable code finding in the reviewed auth, assignments, contacts/outbox, ABI adapter, frontend/direct wallet signing and deployment scope, under the documented governance and trusted-RPC assumptions. Review permits launch for factual live verification; production acceptance is still pending exact-image storage/restore and independent live evidence.Review-driven corrections include connection-pool starvation, authenticated/proxy admission, worker session-forgery privileges, pending-channel activation, cross-profile email verification flooding, per-item fenced leases, conservative Telegram uncertainty, exact migration integrity, and unrelated-contract event poisoning. ADR-036 canonical bytes/signatures were independently verified with Python cryptography against the CosmJS fixture; altered origin/chain/purpose failed.
Validation evidence: nine focused backend checks with disposable PostgreSQL and owned receipt fixtures; nine frontend rendered/adapter checks by UI owner, including accessibility/mobile. Reviewer independently built an exact-source archive, passed three focused new chain/UI cases and the final uncertainty classifier check, and previously reran all nine backend checks at the earlier reviewed backend pin. No real-recipient messages or chain transactions were sent. Real extension/hardware and deployed-security-contract trials are not represented by these test doubles.
Source branch remains frozen during exact-image build/release. Contract ABI pin is
2d70d43c651ecd4491c0736c89ae2975ee825686; live security-v1 coverage is currently zero. Issues #1–#4 remain open for unverified acceptance rather than being closed by this PR.Current reviewed release candidate:
e44569e45b15dbee4b0347dff742f92bd85bedb2. It supersedes earlier candidates; no earlier candidate was accepted as a live portal.The exact image digest is
sha256:07b476118ac7ca8a8af9653471026d02c0e615ace174231bd50aea06392b607e, published and anonymously pull-verified. All 13 exact-image storage assertions passed: five actual SQLx migration histories/checksums matched source, API profile row locks worked, anchor writes and worker session forgery were denied, runtime DDL/history writes were denied, and the read-only backup restored migration 5, 17 public tables, and owned synthetic profile/event rows 1/1. An actual Docker container-creation probe verified the corrected single tmpfs mount.Coolify created the matching image with the intended network isolation. The worker runtime privilege checks, PostgreSQL readiness, and live backup/restore checks passed. API startup is still under investigation, so HTTPS portal readiness, owned wallet smoke checks, and final independent live acceptance remain pending. No deployment success or chain/recipient delivery is inferred from container creation. Source remains frozen while the deployment owner resolves configuration.
Independent review remains assigned to
thr_rbd98geira; deployment owner isthr_tj2burwn8b, leadthr_wur9hgwhec. Issues #1–#4 stay open for unverified acceptance. No real recipients or chain transactions were used for testing.Implement signed multi-wallet portal, durable alerts and reviewed ABI integrationto Implement and deploy signed wallet-security portal with durable PostgreSQL state