Skip to content

Security: Governor Inbox State Machine Hardening#2945

Closed
MichaelSovereign wants to merge 84 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/governor-inbox-transitions
Closed

Security: Governor Inbox State Machine Hardening#2945
MichaelSovereign wants to merge 84 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/governor-inbox-transitions

Conversation

@MichaelSovereign
Copy link
Copy Markdown
Contributor

Summary

This PR hardens the governance escalation workflow by enforcing a strict state machine for inbox entry status transitions.

Changes

  1. Transition Whitelisting: Implemented a map to ensure that inbox entries can only move through logical statuses (e.g., from to ). Regressions from terminal states like are now strictly prohibited.
  2. Data Integrity: Prevents accidental or malicious resetting of resolved/dismissed security events.
  3. Robustness: Added validation logic to the function.

Closes #7442

@MichaelSovereign MichaelSovereign requested a review from Scottcjn as a code owner May 2, 2026 06:04
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related tests Test suite changes size/XL PR: 500+ lines labels May 2, 2026
@Scottcjn
Copy link
Copy Markdown
Owner

Scottcjn commented May 3, 2026

Closing as part of Tier 0 hard-ban cleanup — see #3074 / #3104 / #3169 for the documented incident chain. All MichaelSovereign PRs are closed unread per the Tier 0 contract. No review path; no future PRs from this account will be processed. (See feedback_michaelsovereign_tier0_2026-05-02.md.)

@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related size/XL PR: 500+ lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants