All pull requests

Pull requests

• test(packaging): verify installed chain and witness receipt commands

  #171·dinakarjs opened Oct 29, 2026Contributor·

  ·
  3

• chore(deps): bump the actions group with 5 updates

  dependencies
  #170·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• chore(deps): bump the python group with 2 updates

  dependencies
  #169·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• test: add a portable offline verifier corpus

  #167·dinakarjs opened Oct 25, 2026Contributor·

  ·
  3

• fix(aggregator,checkpoint): validate aggregator parameters/raw_bytes and enforce anchor profile in entry_leaf_digest (#161)

  #166·drk-ram opened Oct 25, 2026·5 tasks done·

  ·
  1

  1

• fix(mmr): enforce exact int types and strict schema validation in InclusionProof/ConsistencyProof.from_dict (#160)

  #165·drk-ram opened Oct 25, 2026·

  ·
  1

• fix(tools): enforce duplicate-key, non-finite, and dict-type checks across NDJSON registry loaders (#159)

  #164·drk-ram opened Oct 25, 2026·

  ·
  1

• fix(cli): reject non-global IP URLs and validate leaf_index/leaf_count in __main__ (#158)

  #163·drk-ram opened Oct 25, 2026·

  ·
  1

• fix(signature): enforce strict JSON/profile and producer key binding across envelopes and claims (#157)

  #162·drk-ram opened Oct 25, 2026·

  ·
  1

• docs: propose authenticated readback for unknown witness submissions

  #156·dinakarjs opened Oct 24, 2026Contributor·

  ·

• fix(aggregator): enforce strict Content-Length and producer validation in server and use loads_unique in CheckpointLog (#151)

  #155·drk-ram opened Oct 23, 2026·5 tasks done·

  ·
  1

  6

• fix(tools): enforce redirect allowlists and reject duplicate JSON keys in check_mirrors and capture_witness_receipt (#150)

  #154·drk-ram opened Oct 23, 2026·5 tasks done·

  ·
  1

  6

• fix(trace_verify/_witness): enforce lowercase hex on signature, registry_key, and witness_key and reject non-finite JSON constants (#149)

  #153·drk-ram opened Oct 23, 2026·5 tasks done·

  ·
  1

  5

• fix(trace_verify/_checkpoint): enforce canonical lowercase hex on key_id, root, and signature and reject unknown CheckpointRecord fields (#148)

  #152·drk-ram opened Oct 23, 2026·5 tasks done·

  ·
  1

  5

• fix(trace_verify,tools): enforce registry-anchor-v1 surrogate/number rules, reject private JWKs, and harden MMR/JSON parsing

  #147·drk-ram opened Oct 23, 2026·5 tasks done·

  ·
  1

  5

• feat: stage witness captures in a durable fail-closed journal

  #144·dinakarjs opened Oct 21, 2026Contributor·

  ·

• evidence: receipts from a second witness for checkpoints 1 and 2

  #143·ogasurfproject-jpg opened Oct 20, 2026Contributor·5 of 6 tasks·

  ·
  9