Commit Graph

  • f6b76f8d92 Mark durable cached vote deliveries explicitly Ben 2026-09-27 13:46:50 -06:00
  • 325675ad19 Separate queued delivery identity from delay validation Ben 2026-09-27 13:46:47 -06:00
  • f26e8e8ce1 Fix queued proxy vote regression expectation Ben 2026-09-27 13:41:06 -06:00
  • a7dcec11d3 Add proxy vote delay regression tests Ben 2026-09-27 13:38:55 -06:00
  • 227e19884b Fix proxy vote delay authorization Ben 2026-09-27 13:38:52 -06:00
  • 1afd9b9b3d Merge pull request #1651 from BenCodez/codex/fix-token-exposure-in-webhook-logging Ben 2026-09-27 13:34:29 -06:00
  • d95bb733cc Merge pull request #1656 from BenCodez/codex/fix-vote-party-counting-vulnerability Ben 2026-09-27 13:33:51 -06:00
  • da0c740091 Require local presence for proxy vote parties Ben 2026-09-27 12:54:50 -06:00
  • 7be4c1c630 Sanitize malformed webhook failures BenCodez 2026-09-27 13:01:27 -06:00
  • d68cf6b42e Retain unmatched Redis bridge vote fences Ben 2026-09-27 12:53:08 -06:00
  • 7f1ed88574 Redact webhook request targets in logs Ben 2026-09-27 12:52:21 -06:00
  • 3657787c76 Create deferred vote indexes on replay worker BenCodez 2026-09-27 12:38:59 -06:00
  • ff2204b565 Fail closed on unsupported NeoForge replay state BenCodez 2026-09-27 12:26:25 -06:00
  • ec819df74f Persist uncertain NeoForge reward outcomes BenCodez 2026-09-27 12:14:56 -06:00
  • 27dc7be78a Preserve deferred vote accounting decisions BenCodez 2026-09-27 11:59:05 -06:00
  • b737cb03fe Index deferred NeoForge replay rows BenCodez 2026-09-27 11:42:48 -06:00
  • e333bd4d5c Merge remote-tracking branch 'origin/master' into neoforge/initial-reward-replay-20260927 BenCodez 2026-09-27 11:26:36 -06:00
  • 4683b3c951 Fix NeoForge reward replay edge cases BenCodez 2026-09-27 11:24:32 -06:00
  • f76f9b8a5a Preserve retained vote context during NeoForge replay BenCodez 2026-09-27 11:13:22 -06:00
  • 296eb3e154 Merge pull request #1640 from BenCodez/security/vote-delay-stable-identity-20260926 Ben 2026-09-27 11:12:49 -06:00
  • f1177e4b14 Preserve unknown delay state across proxy forwarding BenCodez 2026-09-27 11:05:21 -06:00
  • b4ac57a828 Preserve unknown delay state in cached votes BenCodez 2026-09-27 10:56:10 -06:00
  • 222ab749a3 Handle delay validation saturation and config drift BenCodez 2026-09-27 10:40:16 -06:00
  • 1cf9b7cba3 Harden deferred reward replay failure handling BenCodez 2026-09-27 10:32:46 -06:00
  • 8fa44a5211 Merge master and retire completed legacy deliveries BenCodez 2026-09-27 10:23:07 -06:00
  • cb4fc50662 Fix NeoForge reward replay validation BenCodez 2026-09-27 10:15:01 -06:00
  • fb5d8a0fcd Merge remote-tracking branch 'origin/master' into security/vote-delay-stable-identity-20260926 BenCodez 2026-09-27 10:07:56 -06:00
  • 39f2af47e1 Merge pull request #1646 from BenCodez/security/bounded-vote-delivery-state-20260926 Ben 2026-09-27 10:06:48 -06:00
  • c86d803057 Merge pull request #1638 from BenCodez/security/shared-transport-auth-20260926 Ben 2026-09-27 10:02:26 -06:00
  • d010719b0f Merge pull request #1643 from BenCodez/security/service-site-inert-20260926 Ben 2026-09-27 10:01:23 -06:00
  • 60aa4d53ab Merge pull request #1642 from BenCodez/security/gui-authorization-20260926 Ben 2026-09-27 09:59:00 -06:00
  • f2d8860b97 Add initial NeoForge reward replay BenCodez 2026-09-27 09:55:40 -06:00
  • ffb2773766 Merge pull request #1647 from BenCodez/codex/webhook-bounded-admission Ben 2026-09-27 09:55:29 -06:00
  • f79e392001 Merge pull request #1641 from BenCodez/security/workflow-hardening-20260926 Ben 2026-09-27 09:53:44 -06:00
  • 0000118d6c Preserve service identifiers in reward actions BenCodez 2026-09-26 23:11:45 -06:00
  • bbe12cc4ff Preserve unknown proxy delay validation state BenCodez 2026-09-26 23:41:27 -06:00
  • deb6433113 Persist semantic HTTP deliveries before encryption BenCodez 2026-09-26 23:31:20 -06:00
  • 6566281c15 Reclaim expired vote reservations before saturation BenCodez 2026-09-26 23:14:49 -06:00
  • a3298b6029 Preserve delay validation across proxy forwarding BenCodez 2026-09-26 23:07:00 -06:00
  • 1f988459cb Guard service names at formatting boundaries BenCodez 2026-09-26 22:46:20 -06:00
  • 27d41a0984 Preserve legacy proxy vote identities BenCodez 2026-09-26 22:40:06 -06:00
  • 893fda2a9f Use durable receipt capacity for vote admission BenCodez 2026-09-26 22:35:24 -06:00
  • 6d55b77e41 Preserve safe encoded service identifiers BenCodez 2026-09-26 22:25:19 -06:00
  • 208609515c Reject stale VoteShop items after reload BenCodez 2026-09-26 22:20:56 -06:00
  • 24ecff6a52 Persist proxy vote delay decisions BenCodez 2026-09-26 22:11:01 -06:00
  • 3942f04c5d Redact webhook URL credentials in logs BenCodez 2026-09-26 21:55:50 -06:00
  • f9a6aab5e8 Avoid full replay-cache scans on duplicates BenCodez 2026-09-26 21:54:34 -06:00
  • 7cff82ffc2 Reject stale VoteShop category purchases BenCodez 2026-09-26 21:52:51 -06:00
  • 574fabbb4f Reject executable service formatting tokens BenCodez 2026-09-26 21:51:51 -06:00
  • 280d8186b4 Fix vote-delay delivery compatibility BenCodez 2026-09-26 21:42:29 -06:00
  • f76884bc80 Use durable vote identity for vote-delay processing BenCodez 2026-09-26 16:16:26 -06:00
  • 723ab02ce0 Verify release tags before Javadoc deployment BenCodez 2026-09-26 21:17:57 -06:00
  • 39e5a641a4 Recheck VoteShop category access at purchase time BenCodez 2026-09-26 21:15:08 -06:00
  • 3b078dab3e Reject ambiguous encoded placeholder delimiters BenCodez 2026-09-26 21:11:42 -06:00
  • 8b3a5adbb4 Preserve compatible mixed receipt journals BenCodez 2026-09-26 21:08:15 -06:00
  • 25bb1b4256 Log terminal webhook delivery failures BenCodez 2026-09-26 21:05:27 -06:00
  • 4be8c974c4 Apply communication encryption to HTTP envelopes BenCodez 2026-09-26 20:35:11 -06:00
  • e6091c4be5 Expire compatibility bridge fences after processing BenCodez 2026-09-26 20:25:52 -06:00
  • a6e4a08122 Keep compatibility bridge copies fenced BenCodez 2026-09-26 20:18:25 -06:00
  • 7a08f9b1ee Keep multi-proxy transport security generation stable BenCodez 2026-09-26 20:10:41 -06:00
  • f6c275a264 Deduplicate bridged legacy vote IDs BenCodez 2026-09-26 19:56:34 -06:00
  • 7ff0b0c2bc Preserve durable HTTP delivery across key changes BenCodez 2026-09-26 19:37:43 -06:00
  • 7fbf3360a9 Use one inbound transport security snapshot BenCodez 2026-09-26 19:21:06 -06:00
  • a15b2bce1b Retire reused Redis callbacks on proxy reload BenCodez 2026-09-26 19:01:39 -06:00
  • 94c08cce32 Apply shared backend security atomically BenCodez 2026-09-26 18:47:15 -06:00
  • 18db8cfcac Preserve optional transport security compatibility BenCodez 2026-09-26 18:32:14 -06:00
  • 74fc0006fb Preserve transport security across rollback BenCodez 2026-09-26 18:13:55 -06:00
  • ffcbafdc03 Merge pull request #1645 from BenCodez/fix-proxy-voteparty-offline-state Ben 2026-09-26 18:01:22 -06:00
  • 6d7eed5cce Merge pull request #1648 from BenCodez/feature/automatic-time-change-controls Ben 2026-09-26 17:58:48 -06:00
  • b56ad17144 Fix proxy offline votes counting toward VoteParty Ben 2026-09-26 17:57:21 -06:00
  • 96f6c64112 Merge remote-tracking branch 'origin/master' into security/shared-transport-auth-20260926 BenCodez 2026-09-26 17:56:08 -06:00
  • f3aa70c9ab Keep ban cache refresh when automatic rollover is disabled Ben 2026-09-26 17:54:51 -06:00
  • f036fca34e Fix backend config diff check Ben 2026-09-26 17:49:57 -06:00
  • 63a4196ee8 Fix automatic time change review findings Ben 2026-09-26 17:46:50 -06:00
  • 817d9fee66 Add automatic time change controls Ben 2026-09-26 17:40:23 -06:00
  • fc123b7bcf Bound backend vote replay state BenCodez 2026-09-26 17:23:43 -06:00
  • 81a12f5cdd Bound webhook admission and retries BenCodez 2026-09-26 17:31:50 -06:00
  • 3f7427ad35 Merge pull request #1644 from BenCodez/agents-compatibility-guardrails-20260926 Ben 2026-09-26 17:19:30 -06:00
  • fe812a8044 docs: enforce compatibility-first agent guidance Ben 2026-09-26 17:12:24 -06:00
  • ccc1052272 Keep external vote service identifiers inert BenCodez 2026-09-26 16:56:02 -06:00
  • fed067f200 Reload proxy transport encryption policy BenCodez 2026-09-26 16:48:10 -06:00
  • 6a0195cd49 Enforce GUI authorization consistently BenCodez 2026-09-26 16:28:21 -06:00
  • 6ebbdfb3ee Harden VotingPlugin GitHub workflows BenCodez 2026-09-26 16:26:01 -06:00
  • 41da204190 Authenticate shared proxy transport messages BenCodez 2026-09-26 12:59:43 -06:00
  • d12d0f3584 Merge pull request #1639 from BenCodez/codex/neoforge-deferred-completion-20260926 Ben 2026-09-26 15:07:48 -06:00
  • 839f63b0b4 Add durable NeoForge deferred vote completion BenCodez 2026-09-26 14:10:50 -06:00
  • e86a88279c Merge pull request #1621 from BenCodez/codex/guaranteed-proxy-delivery Ben 2026-09-26 13:11:07 -06:00
  • c760b8b6fa Merge pull request #1637 from BenCodez/codex/neoforge-deferred-votes-20260926 Ben 2026-09-26 13:08:32 -06:00
  • 388099c67d Merge pull request #1636 from BenCodez/codex/neoforge-accepted-vote-processor-20260926 Ben 2026-09-26 13:06:37 -06:00
  • cdc99d8cea Isolate malformed deferred vote queues BenCodez 2026-09-26 12:03:09 -06:00
  • 77017a931b Defer completed vote retirement design BenCodez 2026-09-26 11:54:23 -06:00
  • 07f8038543 Reject malformed deferred vote text BenCodez 2026-09-26 11:50:27 -06:00
  • 687e141cbf Bound and stabilize deferred vote retries BenCodez 2026-09-26 11:46:17 -06:00
  • 6f69d71f0d Persist deferred NeoForge votes BenCodez 2026-09-26 11:32:24 -06:00
  • ffbad36675 Add NeoForge accepted-vote processor BenCodez 2026-09-26 11:03:52 -06:00
  • 850e1978d3 Merge pull request #1635 from BenCodez/codex/neoforge-persistent-accounting-20260926 Ben 2026-09-26 10:55:28 -06:00
  • 2b2cd46c08 Add persistent NeoForge vote accounting BenCodez 2026-09-26 10:34:18 -06:00
  • 6c707902aa Merge pull request #1634 from BenCodez/codex/neoforge-vote-site-config-20260926 Ben 2026-09-26 10:37:54 -06:00
  • ce6c8512b9 Add NeoForge vote-site configuration adapter BenCodez 2026-09-26 10:13:14 -06:00
  • e8560ca6ee Merge pull request #1633 from BenCodez/workflow/pre-push-review-gate-20260926 Ben 2026-09-26 09:40:50 -06:00