c473a0e102GLM complementary review remediation on the wallet stack:
- The Pi status adapter content string now reflects the structured
connected flag ("Wallet is not connected.") instead of an
unconditional "Wallet status is available." that contradicted
connected:false; bound by a new REQUIRE on the disconnected path.
- The wallet_status_json fuzzer clock now advances its monotonic
component from fuzz input, so fuzzed frames traverse the deeper
revalidation ladder and deadline paths instead of a single fixed-
authority success path.
- docs/architecture.md: documented the one-strike authority teardown
contract (no retry/resync by the bridge) and the ABA generation-
reuse defense living in authority contracts, gated on adversarial
authority tests before any live composition.
Validation (umask 0022): dev CTest 79/79, ASan/UBSan 79/79,
TSan 79/79; wallet_status_json fuzzer 10,000 units fuzz_exit=0;
clang-format clean; git diff --check clean.
|
||
|---|---|---|
| .. | ||
| prompts | ||
| architecture.md | ||
| build.md | ||
| client-adoption-matrix.md | ||
| future-work.md | ||
| host-setup.md | ||
| hostile-content-analysis.md | ||
| managed-client-setup.md | ||
| quickstart.md | ||
| session-policy.md | ||
| threat-model.md | ||
| validation-surface.md | ||