Repository navigation
Feat/issues 1107 1108 1109 1143 - #1273
Merged
fejilaup-cloud merged 3 commits intoOct 21, 2026
Merged
Conversation
Adds DELETE /users/{user_id}, which erases a user's off-chain data:
- commitment index entries and tags for IPs they own, cascading to every
watchlist that referenced them
- the user's own watchlist, 2FA configuration and sessions
- audit log events attributed to the user, anonymized with the HMAC chain
re-signed so verification still passes
- post-erasure scan that reports any remaining references
On-chain commitments are immutable and are reported as retained.
…cIP#1108) Adds sliding-window detectors that alert once per burst when: - one owner registers 5 commitments within 60s (rapid-fire commits) - one actor touches 50 distinct IP records within 60s (unusual access) - the same IP accumulates 5 failed verifications within 60s (suspicious verification chain) Alerts are logged and submitted to the alert manager. Commit and batch reveal handlers feed the detectors.
|
@usman222nuhu Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits. You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀 |
gabrielujelistic-collab
pushed a commit
to Stellar-drive/stellar-drive-atomic-ip
that referenced
this pull request
Nov 9, 2026
…108-1109-1143 Feat/issues 1107 1108 1109 1143
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Title
feat(api-server): GDPR user data deletion and threat detection (#1107, #1108)
Description
DELETE /users/{user_id}. It removes the user's off-chain data: owned commitments and tags (cascading to watchlists), their watchlist, 2FA config and sessions, and audit events attributed to them. Audit events are anonymized and the HMAC chain is re-signed so verification still passes. A post-erasure scan reports any remaining references. On-chain commitments are immutable and are reported as retained.Closes #1107
Closes #1108
Closes #1109
Closes #1143