A mutation-test marker found here had replaced the height in the signed vote
message with a constant, making a signature valid at any height. It sat
uncommitted in a tracked file, where any staging of modified files would have
carried it into a published repository. Restoring the original is the injector's
job; this makes forgetting it visible instead of silent.
Matched without \b, which BSD grep -E ignores — the first version of this rule
matched nothing and reported clean, which is worse than having no rule. Proven
both ways against a marker placed in a tracked file.
Co-authored-by: Hanzo Dev <[email protected]>
Comments across this tree name pods, validator ids, clusters, ticket numbers and
measurements taken from running networks. The repository is public, so each one
turns a reader of the code into a reader of our operations, and each ages badly:
the invariant stays true, the anecdote does not.
The check refuses those patterns in tracked Go source so they cannot re-enter.
Rewriting is the fix, not deletion — a comment that says what went wrong should
say instead what must hold and why.
Co-authored-by: Hanzo Dev <[email protected]>
zeekayandHanzo Dev