open-SECURITY-{SOC_TYPE_II}-integration-fix by AetherAI3 · Pull Request #8 · AetherAI3/PROTOCOL-C

loop(LOOP-01): F-4 — enforce https-only TSA URLs with SSRF host allow-listing

AetherAI3

committed

d01a9ac

loop(LOOP-01): F-10 — validate data/signature/quantum_proof are dicts in AuditEntry.from_dict, raising AuditError instead of crashing downstream

AetherAI3

committed

e8cccde

loop(LOOP-01): F-2 — constant-time-style modinv (Fermat) + Montgomery-ladder point_mul in ephemeral_signer

AetherAI3

committed

e88077c

loop(LOOP-01): F-9 — cap _read_json input size to prevent unbounded-memory DoS

AetherAI3

committed

7cce959

loop(LOOP-01): F-3 — _rebuild_index() now raises AuditError on corrupt JSONL lines instead of silently skipping them

AetherAI3

committed

5b11746

loop(LOOP-01): F-15 — add structured logging + typed exception handling to TSA request failures

AetherAI3

committed

c89afda

loop(LOOP-01): F-16 — bound TSA HTTP response size to prevent memory-exhaustion DoS

AetherAI3

committed

0091c28

loop(LOOP-01): F-14 — add regression test proving verify() cryptographically validates TSA-signed messageImprint

AetherAI3

committed

e44ab0d

loop(LOOP-01): F-21 — destroy() now zeroes private key via mutable bytearray in place

AetherAI3

committed

3a2f99d

loop(LOOP-01): F-27 — narrow verify_signature() bare except and log unexpected errors

AetherAI3

committed

7983644

loop(LOOP-01): F-28 — add regression test locking _modinv to fixed-shape pow (no branchy extended-Euclidean)

AetherAI3

committed

c085fcd

loop(LOOP-01): F-26 — dedupe verify() via EphemeralSigner.verify_static, no throwaway privkey derivation

AetherAI3

committed

c6d8752

loop(LOOP-01): F-23 — get_trade_flow() now uses SQLite index (get_by_id) instead of full-file scan

AetherAI3

committed

6896a64

loop(LOOP-01): F-19 — stamp() now parses TSTInfo.nonce and rejects TSA responses whose echoed nonce doesn't match the request, closing a replay gap (also includes concurrently-landed CMS signature …

AetherAI3

committed

413e074

loop(LOOP-01): F-7 -- verify() now cryptographically checks the CMS SignerInfo signature over the TSA TimeStampToken, not just the hash

AetherAI3

committed

b316b80

loop(LOOP-17): round 1 — vacuous-truth verification bypass fix

AetherAI3

committed

46da2b8

loop(LOOP-17): round 2 — partial-completeness vacuous-truth fix

AetherAI3

committed

32ac004

loop(LOOP-17): round 3 — missing-identity-binding fix

AetherAI3

committed

69baba2

docs: label curve-doubling constants, section-border identity.py per review

AetherAI3

committed

fc38986

loop(LOOP-17): round 4 weld -- LOOP17-R4-01 fix

AetherAI3

committed

d92a905

loop(LOOP-17): round 5 weld -- LOOP17-R5-01 fix

AetherAI3

committed

8224a21

loop(LOOP-17): round 6 weld -- symbol/side never validated in execution terms fix

AetherAI3

committed

fcf2e9f

loop(LOOP-17): round 7 weld -- settlement-phase broker acknowledgement authentication fix

AetherAI3

committed

ea98a56

loop(LOOP-17): round 8 weld -- LOOP17-R8-01 fix

AetherAI3

committed

32529ab

loop(LOOP-12): mutation-kill -- ephemeral_signer.py _ecdsa_verify and/or bounds-check bypass

AetherAI3

committed

469bdb6

loop(LOOP-12): mutation-kill -- timestamp_authority.py verify() status-code narrowing

AetherAI3

committed

98f92cf

loop(LOOP-12): mutation-kill -- verify.py detect_tampering identity-check inversion

AetherAI3

committed

19f1fb6

simplify: dedup identity/TSA-decode checks, batch audit lookups, reorder settlement checks

AetherAI3

committed

c097a95

Navigation Menu

open-SECURITY-{SOC_TYPE_II}-integration-fix - #8

open-SECURITY-{SOC_TYPE_II}-integration-fix#8
AetherAI3 merged 28 commits into
mainfrom
loop/LOOP-01-2026-07-15

Commits on Jul 15, 2026

loop(LOOP-01): F-4 — enforce https-only TSA URLs with SSRF host allow-listing

loop(LOOP-01): F-10 — validate data/signature/quantum_proof are dicts in AuditEntry.from_dict, raising AuditError instead of crashing downstream

loop(LOOP-01): F-2 — constant-time-style modinv (Fermat) + Montgomery-ladder point_mul in ephemeral_signer

loop(LOOP-01): F-9 — cap _read_json input size to prevent unbounded-memory DoS

loop(LOOP-01): F-3 — _rebuild_index() now raises AuditError on corrupt JSONL lines instead of silently skipping them

loop(LOOP-01): F-15 — add structured logging + typed exception handling to TSA request failures

loop(LOOP-01): F-16 — bound TSA HTTP response size to prevent memory-exhaustion DoS

loop(LOOP-01): F-14 — add regression test proving verify() cryptographically validates TSA-signed messageImprint

loop(LOOP-01): F-21 — destroy() now zeroes private key via mutable bytearray in place

loop(LOOP-01): F-27 — narrow verify_signature() bare except and log unexpected errors

loop(LOOP-01): F-28 — add regression test locking _modinv to fixed-shape pow (no branchy extended-Euclidean)

loop(LOOP-01): F-26 — dedupe verify() via EphemeralSigner.verify_static, no throwaway privkey derivation

loop(LOOP-01): F-23 — get_trade_flow() now uses SQLite index (get_by_id) instead of full-file scan

loop(LOOP-01): F-19 — stamp() now parses TSTInfo.nonce and rejects TSA responses whose echoed nonce doesn't match the request, closing a replay gap (also includes concurrently-landed CMS signature …

loop(LOOP-01): F-7 -- verify() now cryptographically checks the CMS SignerInfo signature over the TSA TimeStampToken, not just the hash

loop(LOOP-17): round 1 — vacuous-truth verification bypass fix

loop(LOOP-17): round 2 — partial-completeness vacuous-truth fix

loop(LOOP-17): round 3 — missing-identity-binding fix

docs: label curve-doubling constants, section-border identity.py per review

loop(LOOP-17): round 4 weld -- LOOP17-R4-01 fix

loop(LOOP-17): round 5 weld -- LOOP17-R5-01 fix

loop(LOOP-17): round 6 weld -- symbol/side never validated in execution terms fix

loop(LOOP-17): round 7 weld -- settlement-phase broker acknowledgement authentication fix

loop(LOOP-17): round 8 weld -- LOOP17-R8-01 fix

loop(LOOP-12): mutation-kill -- ephemeral_signer.py _ecdsa_verify and/or bounds-check bypass

loop(LOOP-12): mutation-kill -- timestamp_authority.py verify() status-code narrowing

loop(LOOP-12): mutation-kill -- verify.py detect_tampering identity-check inversion

simplify: dedup identity/TSA-decode checks, batch audit lookups, reorder settlement checks