Skip to content

docs: add responsible disclosure bounty scope document (#447) - #509

Open
SKYJAMES777 wants to merge 21 commits into
collinsadi:mainfrom
SKYJAMES777:b447-455
Open

docs: add responsible disclosure bounty scope document (#447)#509
SKYJAMES777 wants to merge 21 commits into
collinsadi:mainfrom
SKYJAMES777:b447-455

Conversation

@SKYJAMES777

Copy link
Copy Markdown

Auto-generated for #447: Bug bounty program policy document.

Closes #447

collinsadi and others added 21 commits June 8, 2026 20:44
Update clone URLs, security links, deployment manifests, and docs
for the canonical opauque-stellar home. Remove the contributors
section that referenced the previous repository.
Drop ci.yml and release.yml from this repository.
…ollinsadi#131

collinsadi#103 - Replace placeholder ENS/federation resolver with Stellar SEP-2 federation
collinsadi#129 - Add graceful unavailable states for incomplete reputation features
collinsadi#130 - Clean up Solana-era names, add Stellar-correct deprecation aliases
collinsadi#131 - Add strict no-stub policy with mainnet feature gates
…rker-proof-generation

 Add browser worker for proof generation
…link (collinsadi#496 collinsadi#497 collinsadi#498 collinsadi#499)

- scripts/event-decoder: typed Soroban event decoder with version guard, AnnouncementEvent / AttestationCreated / AttestationRevoked types, batch helper, and example indexer (collinsadi#496)
- frontend/src/lib/wasmSupport.ts: isWasmSupported() detection utility (collinsadi#497)
- frontend/src/components/WasmUnsupportedNotice.tsx: graceful degradation notice shown when WASM unavailable (collinsadi#497)
- frontend/src/components/PrivateBalanceView.tsx: early return with WasmUnsupportedNotice when browser lacks WebAssembly (collinsadi#497)
- frontend/src/lib/horizonBatch.ts: batchReadNativeBalances() with concurrency limit of 5 and per-account error isolation (collinsadi#498)
- frontend/src/components/Footer.tsx: Network status link pointing to https://status.stellar.org (collinsadi#499)
…-wasm-fallback-batch-status-496-497-498-499

feat: event decoder SDK, WASM fallback, Horizon batching, Stellar status link (collinsadi#496 collinsadi#497 collinsadi#498 collinsadi#499)
…dation-abi-scval-proof

feat(frontend): Zod config validation, BytesN<32> encoding, proof ordering tests, contract types
…er caching

- ContractCostEstimator: simulates attest/verify contract calls via rpc.Server
  and displays resource fee, network fee, and total before Freighter signing;
  integrated into IssueTraitModal above the confirm button (collinsadi#492)
- Lazy WASM: useOpaqueWasm already defers init to useEffect; added loading spinner
  and disabled generate button in ProofGeneratorModal while WASM initialises;
  vite.config.ts comment clarifies WASM chunk exclusion from initial bundle (collinsadi#494)
- OperatorDashboard: /operator route with VITE_OPERATOR_SECRET auth gate, 24h
  announcement count and proofs-verified from ProtocolLogContext, indexer lag
  chart, sign-out; deploy docs at frontend/docs/operator-dashboard.md (collinsadi#493)
- Service worker: frontend/public/sw.js with cache-first for static assets,
  network-only for RPC/API/WASM, cache busting via Vite hashed filenames,
  old cache eviction on activate, SW_UPDATED notification to clients;
  registered in main.tsx; SwUpdateBanner in App.tsx shows reload prompt (collinsadi#495)
…timator-lazy-wasm-dashboard-sw

feat: gas cost estimator, lazy WASM loading, operator dashboard, service worker caching
- Add local CI runner script (scripts/ci-local.sh) mirroring GitHub Actions checks
- Add WASM size budget check (scripts/check-wasm-sizes.ts) with per-contract thresholds
- Add artifact signing and verification scripts (scripts/sign-release-artifacts.ts,
  scripts/verify-artifact-signatures.ts) with public verification key
- Document all new checks in CONTRIBUTING.md with quick-start ci:local command

Refs collinsadi#362, collinsadi#361, collinsadi#359
…y read APIs (collinsadi#368, collinsadi#369)

Add paginated `get_delegates(schema_id, offset, limit)` and
`list_schemas_by_authority(authority, offset, limit)` to the schema-registry
contract. Authority-indexed IDs are tracked at register time so listing by
authority is O(1) storage lookup rather than a full scan.

Co-Authored-By: Claude <noreply@anthropic.com>
…-schema-freeze

feat: add delegate helpers, get_delegates, list_schemas_by_authority, and reputation-verifier freeze
ci: add CI runner, WASM budgets, staging deploy, and artifact signing
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add responsible disclosure bounty scope doc

10 participants