Skip to content

[sec-backlog MCP-02] Durable-receipt published-artifact regression matrix #84

Description

@refined-element

Priority: P0/P1 — MOSTLY DONE (receipt seam in 1.22.0 + operation ledger in 1.23.0; receipt_written verified on published 1.23.0).

Remaining: verify the durable-receipt regression matrix on the PUBLISHED artifacts separately — NuGet, PyPI, Docker (persistent volume), MCPB — not just source tests: exactly one durable receipt per committed payment, survives restart/container recreation, no secrets persisted.

Full finding + acceptance criteria: Vault spec lightning-enable-api-mcp-security-remediation-backlog-2026-08-15.md. Deferred (non-P0) from the 2026-08 source audit; reproduce against current main before implementing.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions