All pull requests

Pull requests

• Reject boolean runtime record sequences

  #260·drk-ram opened Nov 6, 2026Contributor·4 of 9 tasks·

  ·
  1

• fix(runtime): reject boolean and non-integer record sequences

  #259·dinakarjs opened Nov 5, 2026Collaborator·

  ·
  1

• build(deps): bump pyasn1 from 0.6.4 to 0.6.5 in /requirements

  dependenciespython
  #255·dependabot[bot] opened Nov 2, 2026Bot·

  ·

• fix(gpu): refuse ambiguous revocation evidence before status queries

  #254·dinakarjs opened Nov 2, 2026Collaborator·

  ·
  2

• build(deps): bump msgpack from 1.2.2 to 1.2.3 in /requirements

  dependenciespython
  #253·dependabot[bot] opened Nov 2, 2026Bot·

  ·

• fix(canonicalize): align number notation and string escapes with RFC 8785

  #251·dinakarjs opened Oct 30, 2026Collaborator·

  ·
  3

• test(ci): validate universal dependency lock changes

  #249·dinakarjs opened Oct 25, 2026Collaborator·

  ·
  8

• build(deps): bump filelock from 4.0.3 to 4.2.1 in /requirements

  dependenciespython
  #247·dependabot[bot] opened Oct 25, 2026Bot·

  ·

• fix(broker_receiver,provisioning_state): validate challenge interval/tzinfo and enforce strict OwnerEpochStore parameters (#241)

  #246·drk-ram opened Oct 25, 2026Contributor·4 tasks done·

  ·
  1

  4

• fix(custody): reject integer/empty key, boolean cadence/ops/poll_interval, and non-ASCII digits in parse_cadence (#240)

  #245·drk-ram opened Oct 25, 2026Contributor·4 tasks done·

  ·
  1

  2

• fix(threshold,challenge): validate bytes secrets/shares, exact int parameters, and ChallengeStore ttl_seconds/nonce types (#239)

  #244·drk-ram opened Oct 25, 2026Contributor·4 tasks done·

  ·
  1

  2

• fix(merkle): bind proof.tree_size to len(tree) in verify_inclusion and validate input shapes in verify_consistency (#238)

  #243·drk-ram opened Oct 25, 2026Contributor·4 tasks done·

  ·
  1

  2

• fix(canonicalize): enforce RFC 8785 safe-integer bounds, reject non-string dict keys, and reject lone UTF-16 surrogates (#237)

  #242·drk-ram opened Oct 25, 2026Contributor·4 tasks done·

  ·
  1

  2

• fix(evidence): deny deeply nested evidence JSON instead of raising RecursionError

  #236·patschmittdev opened Oct 23, 2026Contributor·6 of 9 tasks·

  ·
  7

• fix(kbs): enforce exact integer TTL parameters and reject bare str/bytes platform instances (#226)

  #232·drk-ram opened Oct 23, 2026Contributor·

  ·
  1

  5

• fix(cli,server): reject duplicate JSON keys and non-finite constants in CLI and KBS environment loaders (#228)

  #231·drk-ram opened Oct 23, 2026Contributor·

  ·
  1

  8

• fix(transparency,seal): enforce canonical lowercase hex in SignedTreeHead and seal_to_public_key (#227)

  #229·drk-ram opened Oct 23, 2026Contributor·

  ·
  1

  8

• fix(wcm): reject non-minimal Base64urlUInt, private JWKs, duplicate JSON keys, and malformed expected_nonce (#223)

  #224·drk-ram opened Oct 23, 2026Contributor·

  ·
  1

  6

• fix(nvidia): provisionally parse versioned NVDAOD identity fields

  #222·dinakarjs opened Oct 22, 2026Collaborator·6 of 11 tasks·

  ·
  2

• fix(security): remove affected roots from WCM image trust stores

  #221·noah-ing opened Oct 21, 2026Contributor·

  ·

• test(kbs): exercise platform gate composition through sealed release

  #219·dinakarjs opened Oct 21, 2026Collaborator·

  ·
  5

• docs: map platform-integrity evidence for #121

  #218·dinakarjs opened Oct 20, 2026Collaborator·4 of 6 tasks·

  ·
  3