Assorted keep-frost-net / transport hardening: bound the IPC inspect-socket response read + add a server-side read timeout and connection cap, pin relay certs on nostrconnect bunker start, clamp KEEP_PEER_ANNOUNCE_INTERVAL_SECS, zeroize plaintext JSON of secret-bearing KFP messages, decide on a default-DENY approve_ecdh hook, expose backup-pin staging on mobile (RFC 7469 multi-pin), and split the 3100-line multinode test file.
This groups several tracked sub-tasks; break out individual PRs as you tackle them.
Assorted keep-frost-net / transport hardening: bound the IPC inspect-socket response read + add a server-side read timeout and connection cap, pin relay certs on nostrconnect bunker start, clamp KEEP_PEER_ANNOUNCE_INTERVAL_SECS, zeroize plaintext JSON of secret-bearing KFP messages, decide on a default-DENY approve_ecdh hook, expose backup-pin staging on mobile (RFC 7469 multi-pin), and split the 3100-line multinode test file.
This groups several tracked sub-tasks; break out individual PRs as you tackle them.