From efb54911de0191d516fa96f0a44bd52a7ad7363e Mon Sep 17 00:00:00 2001 From: jwinterm Date: Sun, 28 Jun 2026 08:33:24 -0400 Subject: [PATCH] docs: scrub private-doc references from source comments (pre-publish) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Source comments pointed at gitignored docs/private/*.md design docs — harmless (no secret) but dangling references in a public tree. Inlined the rationale and dropped the pointers. Comment-only. --- src/api/wallet/grin.rs | 3 +-- src/api/wallet/grin_relay.rs | 5 ++--- src/infra/grin/mod.rs | 2 +- 3 files changed, 4 insertions(+), 6 deletions(-) diff --git a/src/api/wallet/grin.rs b/src/api/wallet/grin.rs index 5f8ed67..b5935ed 100644 --- a/src/api/wallet/grin.rs +++ b/src/api/wallet/grin.rs @@ -6,8 +6,7 @@ //! wallet's outputs and read amounts, but cannot spend) and sends it per scan; //! the backend forwards it to grin-wallet's `scan_rewind_hash` and stores no //! secret. Spending (input selection, kernel signing) happens in the wallet; the -//! backend only broadcasts the finalized transaction. See -//! `docs/private/GRIN_LWS_DESIGN.md`. +//! backend only broadcasts the finalized transaction. //! //! Conventions (matching [`super::btc_ltc`] / [`super::xmr_wow`]): //! * JWT-gated; the `rewind_hash` is a view credential — its request struct omits diff --git a/src/api/wallet/grin_relay.rs b/src/api/wallet/grin_relay.rs index 7795942..55ae3db 100644 --- a/src/api/wallet/grin_relay.rs +++ b/src/api/wallet/grin_relay.rs @@ -11,9 +11,8 @@ //! //! Non-custodial by construction: the relay stores only opaque slatepack text //! (slatepacks are encrypted to the recipient's address) and lifecycle status. It -//! never holds keys, never finalizes, never broadcasts — unlike the legacy -//! backend, which finalized + broadcast server-side. See -//! `docs/private/OWN_BACKEND_CONVERGENCE.md`. +//! never holds keys, never finalizes, never broadcasts. The wallet finalizes and +//! broadcasts locally; the relay is only a store-and-forward mailbox. //! //! Controls: JWT-gated; every action authorizes the caller as the slate's sender //! or recipient (a non-party gets 404, never an existence oracle); the recipient diff --git a/src/infra/grin/mod.rs b/src/infra/grin/mod.rs index abb22e4..97f223d 100644 --- a/src/infra/grin/mod.rs +++ b/src/infra/grin/mod.rs @@ -7,7 +7,7 @@ //! `scan_rewind_hash(rewind_hash, start_height)` does the chain scan (rangeproof //! rewind) and returns a [`ViewWallet`]; this client drives that, plus node //! status and broadcast. Spending (input selection, kernel signing) happens in -//! the wallet, locally — never here. See `docs/private/GRIN_LWS_DESIGN.md`. +//! the wallet, locally — never here. //! //! The Owner API v3 transport is an ECDH (secp256k1) handshake + AES-256-GCM //! channel; the secure session is initialized once (TOCTOU-free), the nonce