Enhancement: Node Health Diagnostics#2991

Closed

ghost wants to merge 131 commits into

mainfrom

unknown repository

Commits on Apr 12, 2026

feat: implement RIP-309 Phase 1 Fingerprint Check Rotation
Michael Sovereign
committed
fix: address Codex review for RIP-309 Phase 1
Michael Sovereign
committed
fix: complete RIP-309 integration with reward gating and signature fix
Michael Sovereign
committed
fix: integrate canonical RIP-309 rotation module for reward weighting
Michael Sovereign
committed

Commits on Apr 20, 2026

fix: bind _handle_get_state signature to msg_id and ttl (arity fix #2288)
MichaelSovereign
committed

Commits on May 2, 2026

Security: Hardened P2P sync with replay protection, nonces, and deterministic JSON
MichaelSovereign
committed
Security: Prevent mining reward type confusion in mempool and UTXO apply
MichaelSovereign
committed
Security: Hardened Server Proxy with path whitelisting and header forwarding
MichaelSovereign
committed
Security: Atomic balance checks and secure hash generation for Bridge API
MichaelSovereign
committed
Security: Fix voting precision by migrating from REAL to INTEGER weights
MichaelSovereign
committed
Enhancement: Added environment variable support and API authentication for auto-settler
MichaelSovereign
committed
Security: Implemented cryptographic authentication for bounty claims and contract updates
MichaelSovereign
committed
Enhancement: Added address validation and security checks for x402 configuration
MichaelSovereign
committed
Security: Fixed potential SQL injection in passport listing
MichaelSovereign
committed
Security: Protected Hall of Rust from SQL injection and data vandalism
MichaelSovereign
committed
Security: Hardened LLM JSON extraction in Sophia Governor
MichaelSovereign
committed
Security: Switched to full SHA-256 for machine identity to prevent collisions
MichaelSovereign
committed
Security: Added robustness to cache feature extraction to prevent crashes on empty data
MichaelSovereign
committed
Security: Switched from float to Decimal for precise financial calculations in payouts
MichaelSovereign
committed
Security: Switched from print to logging and improved error handling in claims eligibility
MichaelSovereign
committed
Security: Enforced commitment matching in BCOS attestation to prevent report tampering
MichaelSovereign
committed
Security: Added database-level CHECK constraints for transaction amounts to prevent negative value injection
MichaelSovereign
committed
Security: Hardened claim ID generation to prevent potential ID collisions
MichaelSovereign
committed
Security: Prevented field-level DoS in hardware binding by capping MAC address and flag storage
MichaelSovereign
committed
Security: Implemented HMAC authentication for P2P state and attestation endpoints to prevent data leakage
MichaelSovereign
committed
Security: Implemented atomic transactions for IP rate limiting to prevent race condition bypass
MichaelSovereign
committed
Security: Implemented input sanitization to prevent prompt injection in Sophia Inspector
MichaelSovereign
committed
Enhancement: Added environment variable support and timeout protection for Ergo anchoring
MichaelSovereign
committed
Security: Prevented Sybil attacks in Warthog rewards by enforcing unique WART addresses per epoch
MichaelSovereign
committed
Security: Enforced global uniqueness for GitHub accounts and wallets in airdrop to prevent double-claiming
MichaelSovereign
committed
Security: Implemented strict table whitelisting to prevent SQL injection in sync manager
MichaelSovereign
committed
Security: Improved error handling and logging in rewards settlement to prevent silent failures
MichaelSovereign
committed
Security: Implemented HMAC for subnet hashing to prevent rainbow table attacks on miner IPs
MichaelSovereign
committed
Security: Implemented monotonic and future-limit validation for block timestamps
MichaelSovereign
committed
Security: Implemented atomic fetch-and-lock for withdrawals to prevent double payout race conditions
MichaelSovereign
committed
Security: Implemented 'settling' status to prevent double settlement in case of server crash
MichaelSovereign
committed
Security: Hardened external subprocess calls and improved error handling in hardware fingerprinting
MichaelSovereign
committed
Security: Prevented network mapping by removing internal peer history from sync status response
MichaelSovereign
committed
Security: Hardened consensus probe with secure HTTP requests and error sanitization
MichaelSovereign
committed
Enhancement: Implemented fee-based mempool prioritization to prevent transaction spam
MichaelSovereign
committed
Enhancement: Added application-level support for transaction fees in TX handler
MichaelSovereign
committed
Security: Prevented authentication bypass in governor inbox when admin key is unconfigured
MichaelSovereign
committed
Security: Enforced strict admin authentication for passport updates and log entries
MichaelSovereign
committed
Security: Doubled Beacon agent ID length to prevent hash collisions in large-scale deployments
MichaelSovereign
committed
Security: Prevented authentication bypass in review service when admin key is unconfigured
MichaelSovereign
committed
Security: Added registration pool limits and deterministic JSON hashing in Elya Service
MichaelSovereign
committed
Security: Hardened file hashing and added algorithm validation in ROM fingerprint database
MichaelSovereign
committed
Security: Fixed potential SQL injection in GPU node filtering by implementing job type whitelisting
MichaelSovereign
committed
Security: Prevented directory traversal in badge metadata storage by sanitizing IDs
MichaelSovereign
committed
Enhancement: Added multi-chain address validation support for RustChain, Base, and Ethereum
MichaelSovereign
committed
Security: Implemented serial number validation and placeholder blocking in hardware binding
MichaelSovereign
committed
Security: Improved double-mining detection by joining with IP metadata and streamlining queries
MichaelSovereign
committed
Security: Implemented basic SSRF protection for LLM endpoints in Sophia Governor
MichaelSovereign
committed
Security: Implemented global mempool size limit to prevent resource exhaustion attacks
MichaelSovereign
committed
Security: Hardened nonce validation by checking transaction history to prevent replay during potential state drifts
MichaelSovereign
committed
Security: Implemented atomic transactions for fingerprint rate limiting to prevent TOCTOU bypass
MichaelSovereign
committed
Security: Prevented Link Injection and Phishing by disabling untrusted X-Forwarded-Host header in feed builders
MichaelSovereign
committed
Security: Implemented score clamping and total re-calculation in BCOS PDF generator to prevent misleading certificates
MichaelSovereign
committed
Enhancement: Added exponential backoff retry logic to payout worker for improved reliability
MichaelSovereign
committed
Security: Implemented input sanitization and type enforcement for WebSocket broadcasts in Elya Service
MichaelSovereign
committed
Security: Hardened oEmbed video ID extraction and prevented Host Injection in embed routes
MichaelSovereign
committed
Security: Prevented authentication bypass in lock ledger when admin key is unconfigured
MichaelSovereign
committed
Security: Implemented permission validation for pinned TLS certificates to prevent MitM via certificate tampering
MichaelSovereign
committed
Bugfix: Fixed broken XML syntax in Atom feed thumbnail generation
MichaelSovereign
committed
Security: Switched to Decimal for precise balance conversion during UTXO genesis migration
MichaelSovereign
committed
Security: Switched to Decimal for precise financial calculations in UTXO transfer endpoint
MichaelSovereign
committed
Security: Hardened WebSocket configuration by restricting CORS and reducing max buffer size
MichaelSovereign
committed
Security: Hardened withdrawal archive storage with directory isolation and strict file permissions
MichaelSovereign
committed
Security: Implemented strict public key validation for epoch enrollment to prevent identity spoofing
MichaelSovereign
committed
Security: Improved Merkle hash calculation efficiency and implemented row limits to prevent DoS
MichaelSovereign
committed
Security: Implemented automatic mempool cleanup to prevent resource exhaustion from expired transactions
MichaelSovereign
committed
Enhancement: Standardized error responses in Elya Service for better integration with block explorer
MichaelSovereign
committed
Security: Hardened wallet hopping detection with stricter thresholds and extended history analysis
MichaelSovereign
committed
Security: Enforced admin authentication for UTXO statistics endpoint to prevent information disclosure
MichaelSovereign
committed
Enhancement: Added server time collection to consensus probe for improved synchronization diagnostics
MichaelSovereign
committed
Security: Implemented room name validation for WebSocket subscriptions to prevent unauthorized channel access
MichaelSovereign
committed
Bugfix: Corrected column name in attestation conflict resolution logic to match database schema
MichaelSovereign
committed
Enhancement: Added RTC unit conversion for mempool transaction display in UTXO endpoints
MichaelSovereign
committed
Enhancement: Added WebSocket status and timestamp to Elya Service health check
MichaelSovereign
committed
Enhancement: Optimized payout batch processing performance with adaptive delays
MichaelSovereign
committed
Security: Switched to cryptographically secure ID generation for airdrop claims and bridge locks
MichaelSovereign
committed
Security: Implemented atomic transactions for GPU escrow creation to prevent over-escrow race conditions
MichaelSovereign
committed
Enhancement: Improved error logging in sync manager with payload context
MichaelSovereign
committed
Security: Enforced strict state transitions for governor inbox entries to prevent status regression
MichaelSovereign
committed
Enhancement: Implemented atomic bulk transaction submission for improved performance and consistency
MichaelSovereign
committed
Security: Implemented range validation for transaction nonces to prevent integer overflow and misuse
MichaelSovereign
committed
Security: Enforced strict ineligibility for miners flagged by the fleet immune system
MichaelSovereign
committed
Enhancement: Implemented weighted similarity scoring in hardware binding for improved stability
MichaelSovereign
committed
Enhancement: Added robust database existence checks and directory auto-creation during server startup
MichaelSovereign
committed
Security: Improved P2P message deduplication performance using FIFO buffer to prevent CPU exhaustion
MichaelSovereign
committed
Security: Implemented atomic transactions and stricter authorization for GPU escrow refunds
MichaelSovereign
committed
Enhancement: Added strict format validation for assigned agents in governor inbox
MichaelSovereign
committed
Security: Improved entropy collision detection and reporting with confidence scoring and recency analysis
MichaelSovereign
committed
Enhancement: Added search and score-based sorting to BCOS certified repository directory
MichaelSovereign
committed
Security: Implemented hard limit on block body size during production to prevent resource exhaustion
MichaelSovereign
committed
Enhancement: Added notification deduplication and hashing to review service
MichaelSovereign
committed
Security: Hardened lock forfeiture with atomic transactions and ledger audit logging
MichaelSovereign
committed
Security: Added expiration checking for pinned TLS certificates to prevent connectivity issues with outdated certs
MichaelSovereign
committed
Enhancement: Added video duration metadata to RSS and Atom feeds for better media aggregator support
MichaelSovereign
committed
Security: Implemented IP blacklist validation in claims eligibility to prevent rewards from known abusive addresses
MichaelSovereign
committed
Enhancement: Implemented adaptive collision thresholds based on entropy profile richness
MichaelSovereign
committed
Enhancement: Added structured logging for epoch enrollments in Elya Service
MichaelSovereign
committed
Security: Restricted table schema loading to allowed sync tables to prevent database structure probing
MichaelSovereign
committed
Enhancement: Standardized UTXO transaction application error responses and updated status codes
MichaelSovereign
committed
Security: Implemented mandatory wallet signature verification for airdrop claims to prevent wallet hijacking
MichaelSovereign
committed
Security: Hardened admin authentication with constant-time comparison and minimum key length enforcement
MichaelSovereign
committed
Enhancement: Implemented data truncation for LLM reasoning to prevent database bloat
MichaelSovereign
committed
Enhancement: Improved RustChain slot tracking and error handling in Ergo anchor module
MichaelSovereign
committed
Enhancement: Switched to Decimal for Warthog balance verification and added upper-bound caps
MichaelSovereign
committed
Security: Implemented payload size limits and type validation in sync manager to prevent resource exhaustion
MichaelSovereign
committed
Enhancement: Added audit logging for manual and agent-based status updates in governor inbox
MichaelSovereign
committed
Security: Added pre-emptive mempool size check in UTXO transfer endpoint to prevent resource exhaustion
MichaelSovereign
committed
Enhancement: Added input type validation for WebSocket ping events to prevent unexpected payload processing
MichaelSovereign
committed
Enhancement: Added latency monitoring and duration logging for successful withdrawals
MichaelSovereign
committed
Enhancement: Added automatic cleanup logic for stale hardware bindings to prevent database bloat
MichaelSovereign
committed
Enhancement: Hardened Silicon Ticket consumption with explicit integer time comparisons
MichaelSovereign
committed
Security: Hardened IP address normalization with strict ipaddress module validation
MichaelSovereign
committed
Enhancement: Hardened cache headers and added X-Content-Type-Options for BCOS SVG badges
MichaelSovereign
committed
Enhancement: Replaced internal count helper with a comprehensive integrity check method in sync manager
MichaelSovereign
committed
Enhancement: Added support for BCOS certificate revocation and updated directory to filter revoked entries
MichaelSovereign
committed
Enhancement: Improved slot calculation and integrated centralized get_current_slot in Elya Service
MichaelSovereign
committed
Enhancement: Added robust error handling to attestation nonce cleanup to prevent database locks from interrupting attestation flow
MichaelSovereign
committed
Enhancement: Implemented minimum lock duration policy to ensure protocol stability
MichaelSovereign
committed
Enhancement: Added input validation and sanitization for GPU capability metadata in attestation endpoint
MichaelSovereign
committed
Bugfix: Fixed NameError in withdrawal archive cleanup and improved data integrity during archival
MichaelSovereign
committed
Enhancement: Stratified model selection in Sophia Inspector with three-tiered analysis approach
MichaelSovereign
committed
Enhancement: Implemented safe pagination limits and parameter validation for sync table data retrieval
MichaelSovereign
committed
Enhancement: Added UTXO snapshot retrieval method to facilitate faster synchronization
MichaelSovereign
committed
Enhancement: Added internal error tracking to WebSocket metrics for improved observability
MichaelSovereign
committed
Enhancement: Added comprehensive health diagnostics endpoint to Integrated Server for better observability
MichaelSovereign
committed
Refactor: System-wide CI health check re-trigger for PR #2991
MichaelSovereign
committed