Search results

SECURITY: bind ctid into CONTENT_DISPUTED + JURY_VOTE_COMMIT/REVEAL signatures (cross-target replay, same class as the APPEAL_FILED fix)

bugSomething isn't workingSomething isn't working

Status: Open.

#121 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 20, 2026

Signature field-set audit: low-severity hardening (VP/NODE_REGISTERED canonical-payload routing + NODE_ENDPOINT_UPDATED replay)

enhancementNew feature or requestNew feature or request

Status: Open.

#120 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 20, 2026

Adopt Knex migrations as the single schema authority (retire inline CREATE TABLE / ALTER)

enhancementNew feature or requestNew feature or request

Status: Open.

#117 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 19, 2026

Cross-type same-batch state conflict: dedup is per-type, stateful checks blind to siblings (AG-7/#87 follow-up)

Status: Open.

#112 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 14, 2026

Separate opt-in for reviewer / juror / expert pools (backend + UI)

enhancementNew feature or requestNew feature or request

Status: Open.

#107 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 13, 2026

Dispute-pipeline scoring: wrong-DISMISS clawback, reviewer min_score 600, disputer refund on terminal NO_QUORUM

enhancementNew feature or requestNew feature or request

Status: Open.

#106 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 13, 2026

Orphaned JURY_SUMMONS when racing CONTENT_DISPUTED is deduped (#87 follow-up) — doubled jury

Status: Open.

#104 In theailaborg/tip-protocol;

· vrkothekar opened on Jun 12, 2026

auto:true CONTENT_DISPUTED bypasses _statefulCheck — cross-batch auto-dispute duplicates are not deduped

Status: Open.

#103 In theailaborg/tip-protocol;

· vrkothekar opened on Jun 12, 2026

KEY_ROTATED: old_key_fingerprint CAS documented but never enforced — cross-batch rotation race open

Status: Open.

#102 In theailaborg/tip-protocol;

· vrkothekar opened on Jun 12, 2026

Snapshot download buffers entire response into RAM — no total-size cap, no read timeout (DoS on joiners; pre-prod deploy gate)

Status: Open.

#94 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 10, 2026

Byzantine-fork halt flag cleared BEFORE snapshot install completes in auto-recovery — failed install leaves a diverged node running as ready (pre-prod deploy gate)

Status: Open.

#93 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 10, 2026

C-2: runInTransaction is a no-op on the Knex path — commit and snapshot-install writes are not atomic on Postgres (pre-prod deploy gate)

Status: Open.

#91 In theailaborg/tip-protocol;

· t-bhendarkar opened on Jun 10, 2026