fix(node): bound replay of authenticated gossip ref-update events - #334

Open

beardthelion wants to merge 11 commits into

fix/p2p-gossip-ingest-authfrom

fix/gossip-replay-bound

Commits on Sep 10, 2026

feat(node): add the freshness check and replay guard, not yet wired
beardthelion
committed
9ead5c0
fix(node): bound replay of authenticated gossip ref-update events
beardthelion
committed
97a2b2c
fix(review): bound the saturated guard's rescan and the log it writes
beardthelion
committed
6fcc52a
test(node): close the replay guard's remaining proof gaps, and fix the sibling window
beardthelion
committed
3032aca
fix(core): stop an attacker-supplied created timestamp from overflowing the window check
beardthelion
committed
3455644
fix(review): reconcile the replay guard with the unsigned-admission split
beardthelion
committed
3d424f6
fix(node): render rejected gossip timestamps bounded before logging

kevincodex1
authored and
beardthelion
committed
b0f0220
test(node): pass the replay guard to the post-fork shed tests
beardthelion
committed
2466807
test(node): drive the live-mesh publish and refusal path end to end
beardthelion
committed
f4f2732
fix(node): harden the gossip rejection path against unauthenticated bytes
beardthelion
committed
8f0e116
fix(node): dedupe the ref-update row on the replay key, not on a random id
beardthelion
committed
77b4ebc