Gossip-triggered contiguous-subtree storage audit (ADR-0002)#128

Open

grumbach wants to merge 45 commits into

WithAutonomi:mainfrom

grumbach:audit-on-gossip

Commits on Jun 3, 2026

feat(replication): commitment foundation for storage-bound audit (phase 1)
grumbach
committed
feat(replication): plumb commitment fields through existing wire types
grumbach
committed
feat(replication): commitment builder + auditor verifier (phases 2b+2c)
grumbach
committed
feat(replication): recent_provers cache for holder eligibility (phase 2d)
grumbach
committed
feat(replication): responder commitment-bound challenge handler + e2e tests
grumbach
committed
test(replication): backward-compat wire tests + tighten e2e claims
grumbach
committed
revert(replication): un-extend wire types; defer to phase 3
grumbach
committed
test(replication): threat-model PoC tests for v12 storage-bound audit
grumbach
committed
fix(replication): add cross-peer binding + cover real Path A + close codex test gaps
grumbach
committed
test(replication): make Path A test structurally distinct from happy path
grumbach
committed
docs: testnet plan + security notes for v12 storage-bound audit
grumbach
committed
revert: un-revert wire-type extension; old peers are allowed to break
grumbach
committed
feat(replication): phase-3 wiring — responder rotation tick + gossip emit/receive
grumbach
committed
feat(replication): responder dispatches commitment-bound audits
grumbach
committed
feat(replication): wire auditor side of v12 commitment-bound audit
grumbach
committed
fix(replication): address codex round-5 findings on auditor side
grumbach
committed
fix(replication): codex round-6 — strict gating + cache cap + churn cleanup
grumbach
committed
fix(replication): codex round-7 — RT gate at commitment ingest
grumbach
committed
fix(replication): codex round-8 — keep pin on unknown commitment
grumbach
committed
fix(replication): codex round-9 — pin-contract enforcement + streaming responder
grumbach
committed
fix(replication): codex round-10 — align rotation cadence + downgrade signal
grumbach
committed
fix(replication): codex round-11 — retention window + startup + benign staleness
grumbach
committed
fix(replication): codex round-12 + David's PR review — TTL eviction + missing-bytes penalty + post-restart re-gossip
grumbach
committed
feat(replication): complete v12 design — sticky capable flag, holder credit, rate limit, §3 shield
grumbach
committed
fix(replication): codex round-13 — rate limit on every attempt + correct §6 TTL
grumbach
committed
fix(replication): codex round-14 — close sig-verify rate-limit race
grumbach
committed
chore: cleanup notes
grumbach
committed
fix(replication): tighten audit_response_timeout to catch relay attackers
grumbach
committed
chore(replication): clear pre-existing clippy + rustdoc errors
grumbach
committed
fix(replication): use saturating_add for audit_response_timeout
grumbach
committed
fix(replication): reviewer findings on v12 audit + holder-credit paths
grumbach
committed
test(replication): cover clear_all on empty-storage rotation path
grumbach
committed
fix(replication): round-2 reviewer findings on v12 holder-credit + audit paths
grumbach
committed
fix(replication): wire ever_capable_peers into the audit shield + cap its growth
grumbach
committed
fix(replication): round-3 codex findings — no-op rotation + per-key penalty
grumbach
committed
fix(replication): keep commitment pinned on None-downgrade gossip
grumbach
committed
refactor(replication): trim dead surface + gate test-only helpers + doc accuracy
grumbach
committed
test(replication): live responder-handler audit tests + run PoCs in CI
grumbach
committed
fix(replication): revoke holder credit on confirmed audit failure + close test/CI gaps
grumbach
committed
test(replication): regression-guard the audit-failure credit revocation
grumbach
committed
feat(replication): audit-timeout strike grace + deletion-aware quoting
grumbach
committed
fix(replication): disable timeout-driven eviction during the breaking rollout
grumbach
committed
fix(replication): address multi-agent review — rollout safety + hygiene
grumbach
committed
docs(audit): spec for v13 gossip-triggered contiguous-subtree storage audit
grumbach
committed

Commits on Jun 5, 2026

feat(replication): gossip-triggered contiguous-subtree storage audit (ADR-0002)
grumbach
committed