All issues

Search results

[tech-debt] Security Audit 闸门长红：multer 需 overrides（升级修不掉）+ lockfile 混源让本地 audit 成为坏掉的量具 + Trivy 未产出 sarif

Status: Open.

#338 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Sep 9, 2026

Resolving the validator from a router does not close the drift hole — Sepolia has ≥11 routers giving 7 different answers

enhancementNew feature or requestNew feature or request

Status: Open.

#320 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Sep 5, 2026

CLOUDFLARE_TUNNEL_TOKEN names two different secrets — the compose tunnel can never start from the committed config

enhancementNew feature or requestNew feature or request

Status: Open.

#317 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Sep 5, 2026

Gate the CLASS: a compiled-in contract address can silently diverge from Registry's canonical pointer

enhancementNew feature or requestNew feature or request

Status: Open.

#314 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Sep 4, 2026

Bounded residual: a transaction hash stored in the env file would be redacted as a key

Status: Open.

#278 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Aug 31, 2026

Flipping setRequireStake(true) on the live validator 0x1A8Db639 would fail-close ALL three nodes at once

Status: Open.

#257 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Aug 31, 2026

CC-89 Protocol B stage 2 — IFraudProofVerifier + guardian-collusion detection (produces paper ρ)

Status: Open.

#222 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Aug 14, 2026

Offline slash soundness: requirements before arming rule ② (Codex blocked inc-2b — absence-evidence quorum + clock-skew + epoch-pinning)

enhancementNew feature or requestNew feature or request

Status: Open.

#202 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Jul 9, 2026

Optimization: evaluate js-libp2p gossipsub instead of hand-rolled SWIM gossip (inc-2a re-implemented its native auth/peer-scoring)

enhancementNew feature or requestNew feature or request

Status: Open.

#201 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Jul 9, 2026

[design] Unify DVT crypto layer (AAStarValidator) with SuperPaymaster economic layer — stake-gated, operator-bound registration

Status: Open.

#163 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Jul 4, 2026

[design] N-of-M co-signing HA — independent operators + coordinator failover (Plan B)

Status: Open.

#157 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Jul 3, 2026

feat: P256/device-passkey owner-authorization — accept a WebAuthn assertion as ownerAuth (unblock device-passkey Tier-3, extends #40)

Status: Open.

#140 In AAStarCommunity/YetAnotherAA-Validator;

· jhfnetboy opened on Jul 1, 2026