Enhancement: Elya Slot Boundary Protection#3062

Closed

ghost wants to merge 201 commits into

mainfrom

unknown repository

Commits on Apr 12, 2026

feat: implement RIP-309 Phase 1 Fingerprint Check Rotation
Michael Sovereign
committed
fix: address Codex review for RIP-309 Phase 1
Michael Sovereign
committed
fix: complete RIP-309 integration with reward gating and signature fix
Michael Sovereign
committed
fix: integrate canonical RIP-309 rotation module for reward weighting
Michael Sovereign
committed

Commits on Apr 20, 2026

fix: bind _handle_get_state signature to msg_id and ttl (arity fix #2288)
MichaelSovereign
committed

Commits on May 2, 2026

Security: Hardened P2P sync with replay protection, nonces, and deterministic JSON
MichaelSovereign
committed
Security: Prevent mining reward type confusion in mempool and UTXO apply
MichaelSovereign
committed
Security: Hardened Server Proxy with path whitelisting and header forwarding
MichaelSovereign
committed
Security: Atomic balance checks and secure hash generation for Bridge API
MichaelSovereign
committed
Security: Fix voting precision by migrating from REAL to INTEGER weights
MichaelSovereign
committed
Enhancement: Added environment variable support and API authentication for auto-settler
MichaelSovereign
committed
Security: Implemented cryptographic authentication for bounty claims and contract updates
MichaelSovereign
committed
Enhancement: Added address validation and security checks for x402 configuration
MichaelSovereign
committed
Security: Fixed potential SQL injection in passport listing
MichaelSovereign
committed
Security: Protected Hall of Rust from SQL injection and data vandalism
MichaelSovereign
committed
Security: Hardened LLM JSON extraction in Sophia Governor
MichaelSovereign
committed
Security: Switched to full SHA-256 for machine identity to prevent collisions
MichaelSovereign
committed
Security: Added robustness to cache feature extraction to prevent crashes on empty data
MichaelSovereign
committed
Security: Switched from float to Decimal for precise financial calculations in payouts
MichaelSovereign
committed
Security: Switched from print to logging and improved error handling in claims eligibility
MichaelSovereign
committed
Security: Enforced commitment matching in BCOS attestation to prevent report tampering
MichaelSovereign
committed
Security: Added database-level CHECK constraints for transaction amounts to prevent negative value injection
MichaelSovereign
committed
Security: Hardened claim ID generation to prevent potential ID collisions
MichaelSovereign
committed
Security: Prevented field-level DoS in hardware binding by capping MAC address and flag storage
MichaelSovereign
committed
Security: Implemented HMAC authentication for P2P state and attestation endpoints to prevent data leakage
MichaelSovereign
committed
Security: Implemented atomic transactions for IP rate limiting to prevent race condition bypass
MichaelSovereign
committed
Security: Implemented input sanitization to prevent prompt injection in Sophia Inspector
MichaelSovereign
committed
Enhancement: Added environment variable support and timeout protection for Ergo anchoring
MichaelSovereign
committed
Security: Prevented Sybil attacks in Warthog rewards by enforcing unique WART addresses per epoch
MichaelSovereign
committed
Security: Enforced global uniqueness for GitHub accounts and wallets in airdrop to prevent double-claiming
MichaelSovereign
committed
Security: Implemented strict table whitelisting to prevent SQL injection in sync manager
MichaelSovereign
committed
Security: Improved error handling and logging in rewards settlement to prevent silent failures
MichaelSovereign
committed
Security: Implemented HMAC for subnet hashing to prevent rainbow table attacks on miner IPs
MichaelSovereign
committed
Security: Implemented monotonic and future-limit validation for block timestamps
MichaelSovereign
committed
Security: Implemented atomic fetch-and-lock for withdrawals to prevent double payout race conditions
MichaelSovereign
committed
Security: Implemented 'settling' status to prevent double settlement in case of server crash
MichaelSovereign
committed
Security: Hardened external subprocess calls and improved error handling in hardware fingerprinting
MichaelSovereign
committed
Security: Prevented network mapping by removing internal peer history from sync status response
MichaelSovereign
committed
Security: Hardened consensus probe with secure HTTP requests and error sanitization
MichaelSovereign
committed
Enhancement: Implemented fee-based mempool prioritization to prevent transaction spam
MichaelSovereign
committed
Enhancement: Added application-level support for transaction fees in TX handler
MichaelSovereign
committed
Security: Prevented authentication bypass in governor inbox when admin key is unconfigured
MichaelSovereign
committed
Security: Enforced strict admin authentication for passport updates and log entries
MichaelSovereign
committed
Security: Doubled Beacon agent ID length to prevent hash collisions in large-scale deployments
MichaelSovereign
committed
Security: Prevented authentication bypass in review service when admin key is unconfigured
MichaelSovereign
committed
Security: Added registration pool limits and deterministic JSON hashing in Elya Service
MichaelSovereign
committed
Security: Hardened file hashing and added algorithm validation in ROM fingerprint database
MichaelSovereign
committed
Security: Fixed potential SQL injection in GPU node filtering by implementing job type whitelisting
MichaelSovereign
committed
Security: Prevented directory traversal in badge metadata storage by sanitizing IDs
MichaelSovereign
committed
Enhancement: Added multi-chain address validation support for RustChain, Base, and Ethereum
MichaelSovereign
committed
Security: Implemented serial number validation and placeholder blocking in hardware binding
MichaelSovereign
committed
Security: Improved double-mining detection by joining with IP metadata and streamlining queries
MichaelSovereign
committed
Security: Implemented basic SSRF protection for LLM endpoints in Sophia Governor
MichaelSovereign
committed
Security: Implemented global mempool size limit to prevent resource exhaustion attacks
MichaelSovereign
committed
Security: Hardened nonce validation by checking transaction history to prevent replay during potential state drifts
MichaelSovereign
committed
Security: Implemented atomic transactions for fingerprint rate limiting to prevent TOCTOU bypass
MichaelSovereign
committed
Security: Prevented Link Injection and Phishing by disabling untrusted X-Forwarded-Host header in feed builders
MichaelSovereign
committed
Security: Implemented score clamping and total re-calculation in BCOS PDF generator to prevent misleading certificates
MichaelSovereign
committed
Enhancement: Added exponential backoff retry logic to payout worker for improved reliability
MichaelSovereign
committed
Security: Implemented input sanitization and type enforcement for WebSocket broadcasts in Elya Service
MichaelSovereign
committed
Security: Hardened oEmbed video ID extraction and prevented Host Injection in embed routes
MichaelSovereign
committed
Security: Prevented authentication bypass in lock ledger when admin key is unconfigured
MichaelSovereign
committed
Security: Implemented permission validation for pinned TLS certificates to prevent MitM via certificate tampering
MichaelSovereign
committed
Bugfix: Fixed broken XML syntax in Atom feed thumbnail generation
MichaelSovereign
committed
Security: Switched to Decimal for precise balance conversion during UTXO genesis migration
MichaelSovereign
committed
Security: Switched to Decimal for precise financial calculations in UTXO transfer endpoint
MichaelSovereign
committed
Security: Hardened WebSocket configuration by restricting CORS and reducing max buffer size
MichaelSovereign
committed
Security: Hardened withdrawal archive storage with directory isolation and strict file permissions
MichaelSovereign
committed
Security: Implemented strict public key validation for epoch enrollment to prevent identity spoofing
MichaelSovereign
committed
Security: Improved Merkle hash calculation efficiency and implemented row limits to prevent DoS
MichaelSovereign
committed
Security: Implemented automatic mempool cleanup to prevent resource exhaustion from expired transactions
MichaelSovereign
committed
Enhancement: Standardized error responses in Elya Service for better integration with block explorer
MichaelSovereign
committed
Security: Hardened wallet hopping detection with stricter thresholds and extended history analysis
MichaelSovereign
committed
Security: Enforced admin authentication for UTXO statistics endpoint to prevent information disclosure
MichaelSovereign
committed
Enhancement: Added server time collection to consensus probe for improved synchronization diagnostics
MichaelSovereign
committed
Security: Implemented room name validation for WebSocket subscriptions to prevent unauthorized channel access
MichaelSovereign
committed
Bugfix: Corrected column name in attestation conflict resolution logic to match database schema
MichaelSovereign
committed
Enhancement: Added RTC unit conversion for mempool transaction display in UTXO endpoints
MichaelSovereign
committed
Enhancement: Added WebSocket status and timestamp to Elya Service health check
MichaelSovereign
committed
Enhancement: Optimized payout batch processing performance with adaptive delays
MichaelSovereign
committed
Security: Switched to cryptographically secure ID generation for airdrop claims and bridge locks
MichaelSovereign
committed
Security: Implemented atomic transactions for GPU escrow creation to prevent over-escrow race conditions
MichaelSovereign
committed
Enhancement: Improved error logging in sync manager with payload context
MichaelSovereign
committed
Security: Enforced strict state transitions for governor inbox entries to prevent status regression
MichaelSovereign
committed
Enhancement: Implemented atomic bulk transaction submission for improved performance and consistency
MichaelSovereign
committed
Security: Implemented range validation for transaction nonces to prevent integer overflow and misuse
MichaelSovereign
committed
Security: Enforced strict ineligibility for miners flagged by the fleet immune system
MichaelSovereign
committed
Enhancement: Implemented weighted similarity scoring in hardware binding for improved stability
MichaelSovereign
committed
Enhancement: Added robust database existence checks and directory auto-creation during server startup
MichaelSovereign
committed
Security: Improved P2P message deduplication performance using FIFO buffer to prevent CPU exhaustion
MichaelSovereign
committed
Security: Implemented atomic transactions and stricter authorization for GPU escrow refunds
MichaelSovereign
committed
Enhancement: Added strict format validation for assigned agents in governor inbox
MichaelSovereign
committed
Security: Improved entropy collision detection and reporting with confidence scoring and recency analysis
MichaelSovereign
committed
Enhancement: Added search and score-based sorting to BCOS certified repository directory
MichaelSovereign
committed
Security: Implemented hard limit on block body size during production to prevent resource exhaustion
MichaelSovereign
committed
Enhancement: Added notification deduplication and hashing to review service
MichaelSovereign
committed
Security: Hardened lock forfeiture with atomic transactions and ledger audit logging
MichaelSovereign
committed
Security: Added expiration checking for pinned TLS certificates to prevent connectivity issues with outdated certs
MichaelSovereign
committed
Enhancement: Added video duration metadata to RSS and Atom feeds for better media aggregator support
MichaelSovereign
committed
Security: Implemented IP blacklist validation in claims eligibility to prevent rewards from known abusive addresses
MichaelSovereign
committed
Enhancement: Implemented adaptive collision thresholds based on entropy profile richness
MichaelSovereign
committed
Enhancement: Added structured logging for epoch enrollments in Elya Service
MichaelSovereign
committed
Security: Restricted table schema loading to allowed sync tables to prevent database structure probing
MichaelSovereign
committed
Enhancement: Standardized UTXO transaction application error responses and updated status codes
MichaelSovereign
committed
Security: Implemented mandatory wallet signature verification for airdrop claims to prevent wallet hijacking
MichaelSovereign
committed
Security: Hardened admin authentication with constant-time comparison and minimum key length enforcement
MichaelSovereign
committed
Enhancement: Implemented data truncation for LLM reasoning to prevent database bloat
MichaelSovereign
committed
Enhancement: Improved RustChain slot tracking and error handling in Ergo anchor module
MichaelSovereign
committed
Enhancement: Switched to Decimal for Warthog balance verification and added upper-bound caps
MichaelSovereign
committed
Security: Implemented payload size limits and type validation in sync manager to prevent resource exhaustion
MichaelSovereign
committed
Enhancement: Added audit logging for manual and agent-based status updates in governor inbox
MichaelSovereign
committed
Security: Added pre-emptive mempool size check in UTXO transfer endpoint to prevent resource exhaustion
MichaelSovereign
committed
Enhancement: Added input type validation for WebSocket ping events to prevent unexpected payload processing
MichaelSovereign
committed
Enhancement: Added latency monitoring and duration logging for successful withdrawals
MichaelSovereign
committed
Enhancement: Added automatic cleanup logic for stale hardware bindings to prevent database bloat
MichaelSovereign
committed
Enhancement: Hardened Silicon Ticket consumption with explicit integer time comparisons
MichaelSovereign
committed
Security: Hardened IP address normalization with strict ipaddress module validation
MichaelSovereign
committed
Enhancement: Hardened cache headers and added X-Content-Type-Options for BCOS SVG badges
MichaelSovereign
committed
Enhancement: Replaced internal count helper with a comprehensive integrity check method in sync manager
MichaelSovereign
committed
Enhancement: Added support for BCOS certificate revocation and updated directory to filter revoked entries
MichaelSovereign
committed
Enhancement: Improved slot calculation and integrated centralized get_current_slot in Elya Service
MichaelSovereign
committed
Enhancement: Added robust error handling to attestation nonce cleanup to prevent database locks from interrupting attestation flow
MichaelSovereign
committed
Enhancement: Implemented minimum lock duration policy to ensure protocol stability
MichaelSovereign
committed
Enhancement: Added input validation and sanitization for GPU capability metadata in attestation endpoint
MichaelSovereign
committed
Bugfix: Fixed NameError in withdrawal archive cleanup and improved data integrity during archival
MichaelSovereign
committed
Enhancement: Stratified model selection in Sophia Inspector with three-tiered analysis approach
MichaelSovereign
committed
Enhancement: Implemented safe pagination limits and parameter validation for sync table data retrieval
MichaelSovereign
committed
Enhancement: Added UTXO snapshot retrieval method to facilitate faster synchronization
MichaelSovereign
committed
Enhancement: Added internal error tracking to WebSocket metrics for improved observability
MichaelSovereign
committed
Enhancement: Added comprehensive health diagnostics endpoint to Integrated Server for better observability
MichaelSovereign
committed
Enhancement: Added latency tracking and detailed logging to attestation submission in Elya Service
MichaelSovereign
committed
Enhancement: Implemented signature verification caching in BCOS routes to optimize performance
MichaelSovereign
committed
Enhancement: Added schema versioning to hardware bindings table for future-proofed migrations
MichaelSovereign
committed
Enhancement: Added Merkle proof generation stub to Sync Manager for future light-client support
MichaelSovereign
committed
Enhancement: Hardened Sophia escalation logic to require deeper analysis for high-risk verdicts with low confidence
MichaelSovereign
committed
Enhancement: Added address-based UTXO filtering for improved wallet integration support
MichaelSovereign
committed
Enhancement: Added client authentication stub to WebSocket Feed for future access control support
MichaelSovereign
committed
Enhancement: Implemented internal caching for airdrop eligibility checks to improve performance and reduce API load
MichaelSovereign
committed
Enhancement: Added human-readable status mapping to bridge status endpoint for improved user feedback
MichaelSovereign
committed
Enhancement: Added Mempool statistics to health diagnostics for better visibility into pending transactions
MichaelSovereign
committed
Enhancement: Added peer discovery logic with randomized bootstrap selection to Elya Service
MichaelSovereign
committed
Enhancement: Added support for tier-based sorting in BCOS directory to highlight high-level certifications
MichaelSovereign
committed
Enhancement: Added hardware binding expiration check to enforce periodic re-attestation
MichaelSovereign
committed
Enhancement: Optimized SQLite connection settings in Sync Manager for improved synchronization performance
MichaelSovereign
committed
Enhancement: Added evidence count to Sophia inspection results for better auditing and transparency
MichaelSovereign
committed
Enhancement: Implemented mempool-aware UTXO retrieval to prevent double-spending in unconfirmed transactions
MichaelSovereign
committed
Enhancement: Added heartbeat monitor stub to WebSocket Feed to prepare for improved connection health management
MichaelSovereign
committed
Enhancement: Migrated anti-Sybil thresholds to environment variables for improved operational flexibility
MichaelSovereign
committed
Enhancement: Introduced standardized error response helper to Bridge API for improved client consistency
MichaelSovereign
committed
Enhancement: Added database snapshot metadata to health diagnostics for tracking state consistency
MichaelSovereign
committed
Enhancement: Increased ticket_id entropy to 16 bytes for improved collision resistance in Elya Service
MichaelSovereign
committed
Enhancement: Expanded BCOS directory search to include certificate IDs for better discoverability
MichaelSovereign
committed
Enhancement: Added force_rebind parameter to hardware binding logic to facilitate administrative overrides
MichaelSovereign
committed
Enhancement: Added table batch synchronization stub to Sync Manager for future bulk data transfer support
MichaelSovereign
committed
Enhancement: Added network health and latency tracking stubs to diagnostics for improved regional monitoring
MichaelSovereign
committed
Enhancement: Added custom JSON error handlers for 404 and 500 errors in Elya Service for better API consistency
MichaelSovereign
committed
Enhancement: Added support for L3 tier badges and updated color scheme for better trust score visualization in BCOS
MichaelSovereign
committed
Enhancement: Added binding conflict resolution stub to Hardware Binding for future multi-wallet ownership support
MichaelSovereign
committed
Enhancement: Standardized logger initialization in Sync Manager to ensure consistent visibility across node logs
MichaelSovereign
committed
Enhancement: Added system load average to health diagnostics for improved resource monitoring
MichaelSovereign
committed
Enhancement: Included ticket expiration timestamp in WebSocket attestation broadcast for better frontend UX
MichaelSovereign
committed
Enhancement: Added Cache-Control headers to BCOS verification endpoint to optimize repeated client requests
MichaelSovereign
committed
Enhancement: Added profile quality scoring to Hardware Binding to quantify the strength of hardware evidence
MichaelSovereign
committed
Enhancement: Added bandwidth limiting stub to Sync Manager to facilitate future network resource management
MichaelSovereign
committed
Enhancement: Added detailed process memory statistics to health diagnostics for improved resource tracking
MichaelSovereign
committed
Enhancement: Added logging for successful administrative access attempts in Sophia Inspector for improved security auditing
MichaelSovereign
committed
Enhancement: Added mandatory field validation to BCOS attestation submission to ensure data integrity
MichaelSovereign
committed
Enhancement: Added MAC address normalization helper to Hardware Binding for improved device tracking consistency
MichaelSovereign
committed
Enhancement: Added peer blacklisting stub to Sync Manager for future reputation-based peer management
MichaelSovereign
committed
Enhancement: Added disk space monitoring for DB partition to health diagnostics for proactive storage management
MichaelSovereign
committed
Enhancement: Optimized SQLite database settings in Elya Service with WAL mode and increased busy timeout for better concurrency
MichaelSovereign
committed
Enhancement: Hardened pagination parameter handling in BCOS directory to prevent errors from malformed client input
MichaelSovereign
committed
Enhancement: Added robust error handling to hardware binding database initialization to prevent startup blocks
MichaelSovereign
committed
Enhancement: Added row-level schema validation stub to Sync Manager to ensure data integrity during synchronization
MichaelSovereign
committed
Enhancement: Added open file descriptor tracking to health diagnostics for improved resource leakage monitoring
MichaelSovereign
committed
Enhancement: Hardened JSON request parsing in Elya Service to gracefully handle malformed or empty payloads
MichaelSovereign
committed
Enhancement: Added minimum length validation for BCOS certificate IDs to ensure sufficient entropy and prevent collisions
MichaelSovereign
committed
Enhancement: Improved hardware serial number sanitization using alphanumeric filtering for better cross-OS consistency
MichaelSovereign
committed
Enhancement: Added synchronization direction control stub to Sync Manager for granular network policy enforcement
MichaelSovereign
committed
Enhancement: Added swap memory statistics to health diagnostics for improved system performance monitoring
MichaelSovereign
committed
Enhancement: Added support for configurable logging level via environment variable in Elya Service
MichaelSovereign
committed
Enhancement: Added accessibility metadata (role, aria-label, title) to BCOS SVG badges for better screen reader support
MichaelSovereign
committed
Enhancement: Added IP-based binding limit stub to Hardware Binding for improved Sybil resistance
MichaelSovereign
committed
Enhancement: Increased SQLite connection timeout in Sync Manager to 60 seconds for improved stability during concurrent bulk writes
MichaelSovereign
committed
Enhancement: Added TCP connection tracking to health diagnostics for improved network resource monitoring
MichaelSovereign
committed
Enhancement: Implemented atomic state snapshot logic for Silicon Tickets to ensure data persistence during node maintenance
MichaelSovereign
committed
Enhancement: Added composite indexes to BCOS attestations table to optimize directory sorting and filtering performance
MichaelSovereign
committed
Enhancement: Added architecture compatibility check stub to Hardware Binding for improved device metadata validation
MichaelSovereign
committed
Enhancement: Improved table schema discovery logic in Sync Manager with enhanced caching for better performance
MichaelSovereign
committed
Enhancement: Added network I/O statistics to health diagnostics for detailed throughput monitoring
MichaelSovereign
committed
Enhancement: Added background peer update loop with randomized jitter to Elya Service for better network state consistency
MichaelSovereign
committed
Enhancement: Added total count and query metadata to BCOS directory response to support better search result UI
MichaelSovereign
committed
Enhancement: Added model name normalization helper to Hardware Binding for improved device tracking and consistency across OS reports
MichaelSovereign
committed
Enhancement: Added safe UPSERT application stub to Sync Manager to facilitate schema-aware data ingestion
MichaelSovereign
committed
Enhancement: Added active thread count to health diagnostics for improved concurrency monitoring
MichaelSovereign
committed
Enhancement: Hardened reward distribution precision in Elya Service by enforcing 8 decimal places to prevent cumulative rounding errors
MichaelSovereign
committed
Enhancement: Added ISO-8601 formatted timestamps to BCOS directory response for improved frontend integration
MichaelSovereign
committed
Enhancement: Migrated hardware serial hashing to HMAC-SHA256 with a static pepper to improve identity privacy and prevent rainbow table attacks
MichaelSovereign
committed
Enhancement: Added synchronization session ID tracking stub to Sync Manager for improved auditing and troubleshooting
MichaelSovereign
committed
Enhancement: Added open socket count to health diagnostics for improved network resource monitoring and leak detection
MichaelSovereign
committed
Enhancement: Added boundary protection to slot-to-epoch conversion in Elya Service to prevent calculation errors from negative slots
MichaelSovereign
committed