fix: three pre-mainnet blockers — write-route 500 crashes (#306/#787) + public-CG host-mode ingest (#1124)#1239

Merged

branarakic merged 12 commits into

mainfrom

fix/mainnet-blockers-1124-787-306

Jun 19, 2026

Commits on Jun 19, 2026

fix(daemon): reject malformed quads with 4xx instead of 500; guard gossip-signer agentAddress (#306, #787)

Bojan131
and
claude
committed
fix(agent/swm): public CGs reach storage-ACK quorum via host-mode ingest (#1124)

Bojan131
and
claude
committed
fix(agent/swm): address otReviewAgent #1239 findings (Kye-4 🔴 + Kye_C/Kye_D 🟡)

Bojan131
and
claude
committed
fix(agent/swm): route public-CG host-mode verification through the shared verifier (#1239 round-2)

Bojan131
and
claude
committed
fix(agent/swm): gate self-signed public ingest on OPEN PUBLISH policy; skip keyless signers (#1239 round-3)

Bojan131
and
claude
committed
fix(publisher/swm): bind public-CG host-mode entries to a decoded request + sender peer (#1239 round-4)

Bojan131
and
claude
committed
fix(#1124): force-fresh publishPolicy for host-mode admission + demonstrate quorum reached (Branimir review)

Bojan131
and
claude
committed
fix(#1124): apply confirmed-public plaintext into _shared_memory so a non-member host is ACK-capable (otReviewAgent 🔴)

Bojan131
and
claude
committed
perf(#1124): lazy confirmedPublic + short publishPolicy cache window (Branimir review follow-on)

Bojan131
and
claude
committed
fix(#1124): open-publish self-signed admission survives a stale allowlist + enforce policy in the verifier (otReviewAgent)

Bojan131
and
claude
committed
fix(#1124): verify public envelopes on host-catchup replay + wire identity gate in quorum test (otReviewAgent)

Bojan131
and
claude
committed
fix(#1124): reattach SharedMemoryApplyOutcome JSDoc + drive identity gate through the real collector (otReviewAgent)

Bojan131
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: three pre-mainnet blockers — write-route 500 crashes (#306/#787) + public-CG host-mode ingest (#1124)#1239

fix: three pre-mainnet blockers — write-route 500 crashes (#306/#787) + public-CG host-mode ingest (#1124)#1239
branarakic merged 12 commits into
mainfrom
fix/mainnet-blockers-1124-787-306

Commits on Jun 19, 2026

fix(daemon): reject malformed quads with 4xx instead of 500; guard gossip-signer agentAddress (#306, #787)

fix(agent/swm): public CGs reach storage-ACK quorum via host-mode ingest (#1124)

fix(agent/swm): address otReviewAgent #1239 findings (Kye-4 🔴 + Kye_C/Kye_D 🟡)

fix(agent/swm): route public-CG host-mode verification through the shared verifier (#1239 round-2)

fix(agent/swm): gate self-signed public ingest on OPEN PUBLISH policy; skip keyless signers (#1239 round-3)

fix(publisher/swm): bind public-CG host-mode entries to a decoded request + sender peer (#1239 round-4)

fix(#1124): force-fresh publishPolicy for host-mode admission + demonstrate quorum reached (Branimir review)

fix(#1124): apply confirmed-public plaintext into _shared_memory so a non-member host is ACK-capable (otReviewAgent 🔴)

perf(#1124): lazy confirmedPublic + short publishPolicy cache window (Branimir review follow-on)

fix(#1124): open-publish self-signed admission survives a stale allowlist + enforce policy in the verifier (otReviewAgent)

fix(#1124): verify public envelopes on host-catchup replay + wire identity gate in quorum test (otReviewAgent)

fix(#1124): reattach SharedMemoryApplyOutcome JSDoc + drive identity gate through the real collector (otReviewAgent)