Repository navigation
Conversation
…ellar-Wallet#475) Issue Vellar-Wallet#474: triages each single point of failure named in open-work-catalogue.md (sponsor secret key, npm publish rights, Render account/DNS, M5 multisig attestor) as accept/mitigate/eliminate, with a concrete sponsor-key rotation procedure and a Render/DNS recovery path. M5 itself stays tracked only in security-audit.md to avoid two sources of truth. Issue Vellar-Wallet#475: re-ran the RA-4 fail-closed persistence boot guard tests (pnpm test persistence in packages/service-kit, 9/9 passing) and confirmed wallet-service, policy-service, and verification-service all wire it correctly at boot, and that the actually-deployed services/all-in-one process imports each of them as self-starting modules, so the guard runs during the real combined boot sequence. Documents the remaining infra steps (establish the DB's actual creation date, provision Neon, migrate with the keyId to contractId mapping verified, confirm a backup) that require Render/Neon dashboard access this change doesn't have, plus a follow-up gap: no test in the repo spawns the actual all-in-one boot sequence as a subprocess to confirm the exit-on-fail path fires end to end.
|
@themancalledemma is attempting to deploy a commit to the david's projects Team on Vercel. A member of the Team first needs to authorize it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
closes #474
closes #475
Changes
open-work-catalogue.md(sponsor secret key, npm publish rights, Render account/DNS, M5 multisig attestor) as accept/mitigate/eliminate, with a concrete sponsor-key rotation procedure and a Render/DNS account recovery path. M5 itself stays tracked only insecurity-audit.mdto avoid two sources of truth for the same item.pnpm test persistenceinpackages/service-kit, 9/9 passing) and confirmedwallet-service,policy-service, andverification-serviceall wire it correctly at boot, and that the actually-deployedservices/all-in-oneprocess imports each of them as self-starting modules, so the guard runs during the real combined boot sequence. Documents the remaining infra steps (establish the DB's actual creation date, provision Neon, migrate with the keyId→contractId mapping verified, confirm a backup) that require Render/Neon dashboard access I don't have from here, plus a follow-up gap I found but didn't rush: no test in the repo spawns the actualall-in-oneboot sequence as a subprocess to confirm the exit-on-fail path fires end to end.Both issues are mostly operational decisions and infra actions (key rotation, account access, database migration) rather than pure code changes, so this PR is the triage/documentation/verification half that's achievable from a repo checkout. The remaining dashboard-access-gated steps are called out explicitly in
contrib/issues-474-475-ops-security/decisions.mdrather than silently left undone.Test plan
pnpm test persistenceinpackages/service-kit: 9/9 passing, confirms the RA-4 fail-closed boot guard still holds.contrib/-only perCONTRIBUTING.md.