docs: security audit of 2b42864 (report only) #3

Merged

sirius merged 1 commit from wt/t_d85060fb into main 2026-09-10 23:16:59 +00:00

Conversation 0 Commits 1 Files changed 1 +194

sirius commented 2026-09-10 22:53:01 +00:00

Owner

Copy link

Summary

• Adds docs/SECURITY_AUDIT.md for commit 2b42864 (encrypt-at-rest merge).
• Report only: no src/, Cargo.toml, tests, or lockfile changes.
• Baseline recorded: cargo test --locked 100 passed / 3 ignored; clippy -D warnings pass.
• Highest finding: incoming receipt verified=1 on unrelated wallet txid (transfers_match ORs txid vs address+amount).

Lance merges. Do not FF-merge from this worker.

## Summary - Adds `docs/SECURITY_AUDIT.md` for commit `2b42864` (encrypt-at-rest merge). - Report only: no `src/`, `Cargo.toml`, tests, or lockfile changes. - Baseline recorded: `cargo test --locked` 100 passed / 3 ignored; clippy `-D warnings` pass. - Highest finding: incoming receipt `verified=1` on unrelated wallet txid (`transfers_match` ORs txid vs address+amount). Lance merges. Do not FF-merge from this worker.

sirius added 1 commit 2026-09-10 22:53:01 +00:00

docs: security audit of 2b42864 (report only) ... dfa4ea8f39

Evidence-backed audit at docs/SECURITY_AUDIT.md. No src/ changes.

sirius merged commit 0dfd807b10 into main 2026-09-10 23:16:59 +00:00

sirius referenced this pull request from a commit 2026-09-10 23:17:00 +00:00

Merge pull request 'docs: security audit of 2b42864 (report only)' (#3) from wt/t_d85060fb into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: sirius/onionwire#3

No description provided.