fix(security): SDK hardening from the pre-bounty audit; 0.6.2 - #6

Merged

SaulBuilds merged 12 commits into

mainfrom

Sep 25, 2026

Commits on Sep 25, 2026

fix(crypto): never publish Shamir key shares in deploy calldata (PBA-L6b-003)

BerryManifold
and
claude
committed
c61030d
fix(transport): refuse whitespace/control chars and non-http(s) schemes in the transport gate (PBA-L6b-026)

BerryManifold
and
claude
committed
4b7a335
fix(identity): gate verify_wallet_address_on_chain and assert chain id + factory code (PBA-L6b-027)

BerryManifold
and
claude
committed
5c71bd8
fix(learning): unguessable default invite code; enrollWithCode(bytes) ABI parity (PBA-L6b-028, PBA-L6b-040)

BerryManifold
and
claude
committed
cb76e43
fix(identity): require numeric exp/iat and typ JWT; pin sub on refresh; match SIWE routes (PBA-L6b-029, PBA-L3a-011/012 twins)

BerryManifold
and
claude
committed
c526318
fix(ipfs): stream downloads under a size cap and verify content (PBA-L6b-030)

BerryManifold
and
claude
committed
0b5df4b
fix(managers): unknown access/tier/mode strings raise instead of defaulting to index 0 (PBA-L6b-031)

BerryManifold
and
claude
committed
f24db96
fix(managers): assert eth_chainId before node-signed writes (PBA-L6b-042)

BerryManifold
and
claude
committed
ae8d74b
chore(release): 0.6.2 with security advisory for PBA-L6b-003

BerryManifold
and
claude
committed
a25cc43
fix(deps): regenerate uv.lock and gate it in CI (PBA-L6b-041)

BerryManifold
and
claude
committed
409eea7
ci: SHA-pin the actions in the new keyshare-wheel and uv-lock jobs (PBA-L6-003 policy)

BerryManifold
and
claude
committed
6a3af94
test: mutation-harden the R2 fixes; refuse malformed sha256 pointers (PBA-L6b-030)

BerryManifold
and
claude
committed
29c5182