-
Notifications
You must be signed in to change notification settings - Fork 27
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Audit readiness: STRIDE threat model v1.0 open items (tracking)
critical-pathBlocks downstream workBlocks downstream workowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractsecuritySecurity findingSecurity findingStatus: Open.Align contracts/events/Cargo.toml version with contractmeta (1.6.0 → 1.7.0)
owner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractStatus: Open.Runbook: verify the fee account holds a trustline before registering a token or rotating the fee account
documentationImprovements or additions to documentationImprovements or additions to documentationowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: lowLow severityLow severityStatus: Open.Dedicated validator role for crowdfunding milestone co-authorization (admin quorum is used today)
enhancementNew feature or requestNew feature or requestowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractsecuritySecurity findingSecurity findingseverity: mediumMedium severityMedium severityStatus: Open.unpause: extend time-based windows by the pause duration
enhancementNew feature or requestNew feature or requestowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: mediumMedium severityMedium severityStatus: Open.Event schema: per-award, cancellation-started, and zero-refund events
enhancementNew feature or requestNew feature or requestowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractStatus: Open.propose_manager: emit a cancellation event when replacing a pending proposal
enhancementNew feature or requestNew feature or requestowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: lowLow severityLow severityStatus: Open.process_cancel_batch: reject max_refunds == 0
owner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: lowLow severityLow severityStatus: Open.claim_milestone: record the claim before transferring, matching claim_prize
owner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: lowLow severityLow severityStatus: Open.select_winners: use saturating arithmetic for the anchor index (Scout finding)
owner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: lowLow severityLow severityStatus: Open.Cap reputation_bump per award (events) and delta per call (profile)
owner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractsecuritySecurity findingSecurity findingseverity: mediumMedium severityMedium severityStatus: Open.Grant submissions are unreachable: add a grant application path or reject grants in submit explicitly
bugSomething isn't workingSomething isn't workingowner-contractDev A: fullstack and smart contractDev A: fullstack and smart contractseverity: mediumMedium severityMedium severityStatus: Open.