cashu-cdk-seller: corrections for advisor findings F1-F6 - #988

Open

maxy-player wants to merge 17 commits into

MakePrisms:mainfrom

maxy-player:w/cashu-cdk-seller

Commits on Sep 9, 2026

cashu-cdk-seller: measured findings — CDK 0.17.2 pins, mintd [ln] schema correction, v0.5.8 image not published
w-cashu-cdk-seller
committed
b401d24
cashu-cdk-seller: specialist sandbox image + loopback fakewallet test-mint rig
w-cashu-cdk-seller
committed
016388f
cashu-cdk-seller: protoc in the mint builder stage (cdk-signatory build.rs needs it even without grpc)
w-cashu-cdk-seller
committed
ef54b5a
cashu-cdk-seller: [ln] min/max mint+melt are required by struct Ln; mint now boots and serves /v1/info
w-cashu-cdk-seller
committed
46d32e4
cashu-cdk-seller: acceptance harness (issue, swap, double-spend, melt, failed payment, restart, loopback)
w-cashu-cdk-seller
committed
8e7e0b0
cashu-cdk-seller: acceptance gate PASSES 22/22 — failure injection needs check_payment_state=Unpaid too
w-cashu-cdk-seller
committed
c449ba2
cashu-cdk-seller: seat memory index + corpus/mint/API/drift topic files
w-cashu-cdk-seller
committed
03cc6d9
cashu-cdk-seller: runbook + evidence — build complete (22/22 acceptance), live readiness blocked on human credential provisioning
w-cashu-cdk-seller
committed
aa8e831
cashu-cdk-seller: F1/F2/F3/F6 — runtime Rust+CDK cache, container-path knowledge, test state out of /work, locked deps and digest-pinned bases
w-cashu-cdk-seller
committed
c15f0ad
cashu-cdk-seller: F4/F5 — correct recovery semantics, exact negative predicates, full-residual-spend after mint restart
w-cashu-cdk-seller
committed
0ac777d
cashu-cdk-seller: F1 fix — keep the Rust toolchain on PATH in login shells too (/etc/profile clobbered it)
w-cashu-cdk-seller
committed
719bf2d
cashu-cdk-seller: F1 fix — ship a C linker and prove the offline CDK build at image build time
w-cashu-cdk-seller
committed
4201f6b
cashu-cdk-seller: delta evidence — real bind-mounted runs for F1/F2/F3/F5 (offline compile, knowledge paths, state isolation, 39/10 gate)
w-cashu-cdk-seller
committed
f59a05f
cashu-cdk-seller: document the exact supported protected-auth provisioning path (claude setup-token -> daemon env -> per-job placeholder)
w-cashu-cdk-seller
committed
5413b84

Commits on Sep 10, 2026

cashu-cdk-seller: F4/F5 — correct the BAKED recovery topic, bind both recovery branches to complete value, quoted fees not derived, check reserved
w-cashu-cdk-seller
committed
b8492cf
cashu-cdk-seller: targeted predicate regression — reproduces the stranded-reserve counterexample and proves the corrected oracles reject it
w-cashu-cdk-seller
committed
a3b6a70
cashu-cdk-seller: F6 — authoritative immutable-image addendum with provenance bounds, non-root bound-workdir recipe, human-only selected-field VPS setup; bound AUTH claims and cross-link both ways
w-cashu-cdk-seller
committed
2e3cab0

Navigation Menu

cashu-cdk-seller: corrections for advisor findings F1-F6 - #988

cashu-cdk-seller: corrections for advisor findings F1-F6#988
maxy-player wants to merge 17 commits into
MakePrisms:mainfrom
maxy-player:w/cashu-cdk-seller

Commits on Sep 9, 2026

cashu-cdk-seller: measured findings — CDK 0.17.2 pins, mintd [ln] schema correction, v0.5.8 image not published

cashu-cdk-seller: specialist sandbox image + loopback fakewallet test-mint rig

cashu-cdk-seller: protoc in the mint builder stage (cdk-signatory build.rs needs it even without grpc)

cashu-cdk-seller: [ln] min/max mint+melt are required by struct Ln; mint now boots and serves /v1/info

cashu-cdk-seller: acceptance harness (issue, swap, double-spend, melt, failed payment, restart, loopback)

cashu-cdk-seller: acceptance gate PASSES 22/22 — failure injection needs check_payment_state=Unpaid too

cashu-cdk-seller: seat memory index + corpus/mint/API/drift topic files

cashu-cdk-seller: runbook + evidence — build complete (22/22 acceptance), live readiness blocked on human credential provisioning

cashu-cdk-seller: F1/F2/F3/F6 — runtime Rust+CDK cache, container-path knowledge, test state out of /work, locked deps and digest-pinned bases

cashu-cdk-seller: F4/F5 — correct recovery semantics, exact negative predicates, full-residual-spend after mint restart

cashu-cdk-seller: F1 fix — keep the Rust toolchain on PATH in login shells too (/etc/profile clobbered it)

cashu-cdk-seller: F1 fix — ship a C linker and prove the offline CDK build at image build time

cashu-cdk-seller: delta evidence — real bind-mounted runs for F1/F2/F3/F5 (offline compile, knowledge paths, state isolation, 39/10 gate)

cashu-cdk-seller: document the exact supported protected-auth provisioning path (claude setup-token -> daemon env -> per-job placeholder)

Commits on Sep 10, 2026

cashu-cdk-seller: F4/F5 — correct the BAKED recovery topic, bind both recovery branches to complete value, quoted fees not derived, check reserved

cashu-cdk-seller: targeted predicate regression — reproduces the stranded-reserve counterexample and proves the corrected oracles reject it

cashu-cdk-seller: F6 — authoritative immutable-image addendum with provenance bounds, non-root bound-workdir recipe, human-only selected-field VPS setup; bound AUTH claims and cross-link both ways