zeekay 1362566d34 Merge github/main into the hardening branch ...

Both sides carried work. Ours is the security pass: the stableswap amp=0
and empty-pool halts, the wei-per-swap leak, uint256 truncation in math,
three verifiers that returned a verdict without verifying, the cgo/non-cgo
consensus split in cggmp21, and the starkfri soundness floor. Theirs is
the fhe parameter set, the mldsa crafted-length refusal, and the naming
sweep.

Resolved per hunk rather than by side. Where both fixed one defect the
better fix survives alone, never two guards for one bug.

2026-08-28 20:13:25 -07:00

..

atomic.go

dex(0x9999): decentralize halt authority + commit the value-path proof tests

2026-06-22 22:50:00 -07:00

calldata_test.go

contract: one cursor holds every calldata bound, one verdict cannot be faked

2026-08-28 11:47:04 -07:00

contract_test.go

chore: sync dependencies and format code

2026-02-04 23:48:56 +00:00

contract.go

feat: consolidate all precompiles from standard repo

2025-12-19 23:02:39 +00:00

cursor_test.go

precompiles: parse calldata through one cursor, answer with one verdict

2026-08-28 12:10:59 -07:00

cursor.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

dispatch_test.go

contract: an unanchored signature regex accepts a selector no caller sends

2026-08-28 15:39:14 -07:00

feeconfig_test.go

feat(precompile): enable-everything builder surface — drop strict-PQ refusal from verify-only precompiles

2026-06-27 21:00:43 -07:00

feeconfig.go

contract: an unanchored signature regex accepts a selector no caller sends

2026-08-28 15:39:14 -07:00

interfaces.go

feat: rename module to github.com/luxfi/precompile

2025-12-31 06:28:04 +00:00

poison.go

contract: one cursor holds every calldata bound, one verdict cannot be faked

2026-08-28 11:47:04 -07:00

utils.go

contract: an unanchored signature regex accepts a selector no caller sends

2026-08-28 15:39:14 -07:00

verdict_gate_test.go

contract: one cursor holds every calldata bound, one verdict cannot be faked

2026-08-28 11:47:04 -07:00

verdict_test.go

contract: one cursor holds every calldata bound, one verdict cannot be faked

2026-08-28 11:47:04 -07:00

verdict.go

contract: one cursor holds every calldata bound, one verdict cannot be faked

2026-08-28 11:47:04 -07:00

word_test.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

word.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00