Problem
decide() returns "auto_approve" for 0.0 and -20.0 amounts, issuing $0/negative refunds. There is no non-positive check before the limit comparison.
Where
relayg/policy.py (if amount < AUTO_APPROVE_LIMIT, amount unchecked).
Acceptance
Add a failing test first with refund 0.0 and -20.0, expecting anything but "auto_approve". Then fix.
Problem
decide()returns"auto_approve"for0.0and-20.0amounts, issuing $0/negative refunds. There is no non-positive check before the limit comparison.Where
relayg/policy.py(if amount < AUTO_APPROVE_LIMIT, amount unchecked).Acceptance
Add a failing test first with refund
0.0and-20.0, expecting anything but"auto_approve". Then fix.