Replace full-chunk audit responses with BLAKE3 verified slices - #181

Merged

grumbach merged 25 commits into

WithAutonomi:mainfrom

grumbach:v2-685-blake3-verified-slice-audit

Aug 4, 2026

Commits on Jul 30, 2026

Replace full-chunk audit responses with BLAKE3 verified slices
grumbach
committed
Authenticate slice-audit content_len to defeat possession forgery
grumbach
committed
Harden slice audit and isolate its protocol id
grumbach
committed
Address audit review: resource bounds, geometry, contract
grumbach
committed
Tidy slice-audit comments and lock responder coalescing with a live test
grumbach
committed
Close two audit holes: key-content forgery and round-1 work amplification
grumbach
committed
Bind every audit lane to the fresh nonce and isolate the audit protocols
grumbach
committed
Take the responder permit before consuming the round-2 session
grumbach
committed
Lock the round-2 accounting boundary with direct tests
grumbach
committed
Grace audit timeouts through the rollout, and state the proof's real strength
grumbach
committed
Grace only silence in the prune audit lane
grumbach
committed
State the strength comparison in both directions
grumbach
committed
Cite the PR and issue in ADR-0007's Related field
grumbach
committed
Renumber the audit ADR and align the replication design doc
grumbach
committed
Cost an unanswered round 2 the pinned commitment's credit
grumbach
committed
Bound audit responder work by rate and by message size
grumbach
committed
Reject out-of-range block openings, and restate the egress figures
grumbach
committed
Bound audit decode and round-1 work by what is actually spent
grumbach
committed
Reject varint overflow in the audit pre-decode peek, and hold the MSRV
grumbach
committed
Bound an audit reply by the audit ceiling, not the core one
grumbach
committed
Answer a legacy possession challenge instead of dropping it
grumbach
committed
Charge what a leaf costs, cap every decode, and stop overclaiming the proof
grumbach
committed
Pin the response-side ceiling and the first-leaf charge with the reviewed cases
grumbach
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Replace full-chunk audit responses with BLAKE3 verified slices - #181

Replace full-chunk audit responses with BLAKE3 verified slices#181
grumbach merged 25 commits into
WithAutonomi:mainfrom
grumbach:v2-685-blake3-verified-slice-audit

Commits on Jul 30, 2026

Replace full-chunk audit responses with BLAKE3 verified slices

Authenticate slice-audit content_len to defeat possession forgery

Harden slice audit and isolate its protocol id

Address audit review: resource bounds, geometry, contract

Tidy slice-audit comments and lock responder coalescing with a live test

Close two audit holes: key-content forgery and round-1 work amplification

Bind every audit lane to the fresh nonce and isolate the audit protocols

Take the responder permit before consuming the round-2 session

Lock the round-2 accounting boundary with direct tests

Grace audit timeouts through the rollout, and state the proof's real strength

Grace only silence in the prune audit lane

State the strength comparison in both directions

Cite the PR and issue in ADR-0007's Related field

Renumber the audit ADR and align the replication design doc

Cost an unanswered round 2 the pinned commitment's credit

Bound audit responder work by rate and by message size

Reject out-of-range block openings, and restate the egress figures

Bound audit decode and round-1 work by what is actually spent

Reject varint overflow in the audit pre-decode peek, and hold the MSRV

Bound an audit reply by the audit ceiling, not the core one

Answer a legacy possession challenge instead of dropping it

Charge what a leaf costs, cap every decode, and stop overclaiming the proof

Pin the response-side ceiling and the first-leaf charge with the reviewed cases

Commits on Aug 4, 2026

feat(replication): emit KeyAbsent and make the round-1 pool tunable

Merge branch 'main' into v2-685-blake3-verified-slice-audit