Skip to content

test: require_auth coverage sweep across contracts#219

Merged
greatest0fallt1me merged 4 commits intoCalloraOrg:mainfrom
Sam-Rytech:test/require-auth-sweep
Mar 31, 2026
Merged

test: require_auth coverage sweep across contracts#219
greatest0fallt1me merged 4 commits intoCalloraOrg:mainfrom
Sam-Rytech:test/require-auth-sweep

Conversation

@Sam-Rytech
Copy link
Copy Markdown
Contributor

  • Audited all privileged entrypoints in vault, revenue_pool, and settlement
  • Added negative require_auth tests to each crate's test.rs
  • Fixed pre-existing setup_contract missing third_party in settlement tests
  • Documented intentional exceptions: settlement::init and vault::require_owner
  • Updated SECURITY.md with audit findings and cross-references
  • All 180 tests pass

Closes #160

- Audited all privileged entrypoints in vault, revenue_pool, and settlement
- Added negative require_auth tests to each crate's test.rs
- Fixed pre-existing setup_contract missing third_party in settlement tests
- Documented intentional exceptions: settlement::init and vault::require_owner
- Updated SECURITY.md with audit findings and cross-references
- All 180 tests pass

Closes CalloraOrg#160
@drips-wave
Copy link
Copy Markdown

drips-wave bot commented Mar 30, 2026

@Sam-Rytech Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

- Audited all privileged entrypoints in vault, revenue_pool, and settlement
- Added negative require_auth tests to each crate's test.rs
- Fixed pre-existing setup_contract missing third_party in settlement tests
- Documented intentional exceptions: settlement::init and vault::require_owner
- Updated SECURITY.md with audit findings and cross-references
- All 180 tests pass

Closes CalloraOrg#160
@Sam-Rytech Sam-Rytech force-pushed the test/require-auth-sweep branch 3 times, most recently from 1a8bbb4 to 60c86eb Compare March 30, 2026 11:47
- Audited all privileged entrypoints in vault, revenue_pool, and settlement
- Added negative require_auth tests to each crate's test.rs
- Fixed pre-existing setup_contract missing third_party in settlement tests
- Documented intentional exceptions: settlement::init and vault::require_owner
- Updated SECURITY.md with audit findings and cross-references
- All 180 tests pass

Closes CalloraOrg#160
@Sam-Rytech Sam-Rytech force-pushed the test/require-auth-sweep branch from 60c86eb to 26075cb Compare March 30, 2026 11:52
@greatest0fallt1me greatest0fallt1me merged commit e9b0ea9 into CalloraOrg:main Mar 31, 2026
0 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Contracts: require_auth() audit across all privileged entrypoints

2 participants