All pull requests

Pull requests

• Let a sponsor govern its descendants permits and keys

  #282·PetrefiedThunder opened Nov 1, 2026Collaborator·9 of 10 tasks·

  ·
  1

  22

• Release the quote and the idempotency record on pre-charge faults

  #279·PetrefiedThunder opened Nov 1, 2026Collaborator·5 tasks done·

  ·
  22

• docs: make PROOF_MATRIX, threat-model and TESTING_TIERS match the code

  #274·PetrefiedThunder opened Oct 31, 2026Collaborator·9 of 10 tasks·

  ·
  1

  31

• fix(gateway): narrow the failure lab's registered upstream service

  #267·PetrefiedThunder opened Oct 30, 2026Collaborator·10 tasks done·

  ·
  21

• fix(mcp): stop leaking exception text from /mcp/tools/{id}/invoke

  #244·PetrefiedThunder opened Oct 26, 2026Collaborator·

  ·
  22

• fix(sdk): mcp serve forwards caller permit and idempotency key, surfaces denials (SEL-355, option B)

  #225·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  3

• Prove the refund amount in receipt evidence, not just its existence

  #214·PetrefiedThunder opened Oct 24, 2026Collaborator·9 of 10 tasks·

  ·
  1

• fix(gateway): carry the failure lab target safety fuse into the monorepo

  #207·PetrefiedThunder opened Oct 24, 2026Collaborator·10 tasks done·

  ·
  41

• Stabilize ACP checkout latency check in CI

  #206·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  1

• ops: GitHub organization runbook, settings scripts, grouped Dependabot, secret-scan base after the history rewrite

  #194·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  38

• [audit-high] Agent docs misstate wallet freeze, MCP errors, and who can call

  #63·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  11

• [audit-high] Failure lab could bless a baseline that never did the work

  #60·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  15

• [audit-high] MCP example pinned one retry key and hid a failed replay

  #56·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  12

• [qa] Python SDK hardening: 104 new tests and 6 small fail-closed fixes

  #50·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  7

• [qa] Router QA: quote 500 on bad stored category, unbounded rotation-log limit

  #49·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  3

• [audit-high] Fix sandbox tenant leak, puzzle false allows, and SSRF numeric gap

  #40·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  8

• [audit-high] Refuse bad idempotency keys before money moves

  #32·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  8