Skip to content

CI rehearsal only (do not merge) - #26

Open
michael-moffett wants to merge 9 commits into
mainfrom
pay-kit-388-py-x402-extra-signer-a1-next
Open

michael-moffett wants to merge 9 commits into
mainfrom
pay-kit-388-py-x402-extra-signer-a1-next

Conversation

@michael-moffett

Copy link
Copy Markdown
Member

Fork CI only. Do not merge.

`ExactVerifier.verify` refuses a transaction whose required signers include anyone other than the fee payer and the transfer authority.

scheme_exact_svm.md §2.1.4: "The transaction MUST NOT require any signatures beyond the client and the sponsor (feePayer)." Rust refuses this transaction and Python accepts it (FINDINGS.md#x402-extra-required-signer-accepted).
@greptile-apps

greptile-apps Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

RetriggerView in GreptileConfidence Score: 5/5

[Medium impact] No code issues block merging, but the author explicitly requested that this rehearsal PR not be merged.

Summary

The Python x402 exact verifier now rejects required signers other than the fee payer and transfer authority.

  • Python’s x402 verifier rejects transactions that require an extra signer.
  • Review runs now receive shared context from earlier reviews.

No actionable issues were found. Tests were not run.

michael-moffett marked this PR “Fork CI only. Do not merge.” That stated intent is separate from the code assessment.

Reviews (1) · Last reviewed commit: "greptile.json: review on request only" · Reviewed by Greptile

lgalabru and others added 7 commits October 23, 2026 18:33
`ExactVerifier.verify` refuses a transaction whose required signers include anyone other than the fee payer and the transfer authority.

scheme_exact_svm.md §2.1.4: "The transaction MUST NOT require any signatures beyond the client and the sponsor (feePayer)." Rust refuses this transaction and Python accepts it (FINDINGS.md#x402-extra-required-signer-accepted).
@michael-moffett

Copy link
Copy Markdown
Member Author

@greptileai

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants