jwinterm dec9994e06 fix(config): fail closed on POW_REQUIRED without FEATURE_POW; harden premium key check ...

- Reject boot when POW_REQUIRED (or the per-pubkey PoW list) is set while
  FEATURE_POW is off: the gate would silently never apply and /capabilities
  would report pow_required:false — a signup endpoint the operator believes
  is protected but isn't.
- Validate the premium PAYMENT_API_KEY through the same require_secret path
  the pay-to-register flow uses, so a placeholder key cannot reach production.
- Advertise the premium-post write policy in MessagingCapability and
  regenerate openapi.json to match.
- Give the premium integration fixtures unique per-run ids so the suite is
  re-runnable against a persistent local test database.

2026-07-02 19:47:38 -04:00

..

common

feat(relay): messaging-plane config + provider seam + pure admission policy engine

2026-07-02 06:29:38 -04:00

.env.example

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

admin_audit.rs

feat(admin): tamper-evident privileged-action audit chain [operator §0.4]

2026-06-26 06:06:54 -04:00

admin_auth.rs

feat(admin): allowlist key CRUD + kill-switches [operator §1.5]

2026-06-26 06:46:07 -04:00

admin_keys.rs

feat(admin): allowlist + integrity-MAC data model [operator §0.3/§1.2]

2026-06-25 18:38:57 -04:00

admin_plane.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

admin_sessions.rs

feat(admin): admin session JWTs + admin_sessions queries [operator §0.3]

2026-06-25 18:46:50 -04:00

auth_flow.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

capabilities.rs

feat(capabilities): honest secret-presence downgrade + admin features view [operator §4]

2026-06-27 15:35:56 -04:00

challenges.rs

feat(db): unified single-use challenge store [operator §0.2]

2026-06-25 17:33:59 -04:00

db_queries.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

erasure.rs

fix(erasure): harden per adversarial review (Subsystem 5)

2026-06-28 07:59:52 -04:00

invite_codes.rs

feat(registration): composable gate framework + invite codes (gate #1)

2026-06-30 17:14:53 -04:00

landing.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

nostr_auth.rs

feat(auth): wire the Nostr link nonce — link-challenge endpoint + atomic consume

2026-07-02 04:36:40 -04:00

payment_invoices.rs

feat(registration): pay-to-register via pluggable payment provider (gate #3)

2026-06-30 21:30:12 -04:00

premium.rs

fix(config): fail closed on POW_REQUIRED without FEATURE_POW; harden premium key check

2026-07-02 19:47:38 -04:00

prices.rs

fix(prices,config): harden per-feed control + fail-closed gaps (adversarial review)

2026-06-25 17:25:52 -04:00

rate_limit.rs

feat: per-IP rate limiting (tower_governor tiers) + ConnectInfo wiring

2026-06-23 19:02:03 -04:00

relay_admission.rs

feat(relay): gRPC event-admission (nauthz) service enforcing the write policy

2026-07-02 06:46:59 -04:00

server_config.rs

fix(admin): create-admin-wallet fully bootstraps a fresh instance (latch + compose)

2026-07-02 03:19:32 -04:00

wallet_btc_ltc.rs

feat: BTC/LTC wallet handlers (electrum proxy, authenticated)

2026-06-23 11:57:43 -04:00

wallet_grin_relay.rs

feat: Grin slatepack relay (non-custodial async mailbox, feature-flagged)

2026-06-23 17:39:13 -04:00

wallet_grin.rs

feat: Grin wallet handlers (view-only, non-custodial)

2026-06-23 16:02:44 -04:00

wallet_xmr_wow.rs

feat: XMR/WOW wallet handlers (LWS proxy, stateless-forward)

2026-06-23 14:32:38 -04:00