v0.0.1.dev2

HieraChain Engine v0.0.1.dev2 - Enhanced Security & Resilience

Pre-release Warning: This is a development preview and is not intended for production use. APIs may change without notice.

What's New

This release focuses on enhancing the security, resilience, and stability of the HieraChain Engine. Key improvements include the introduction of token-based authentication for the ArrowServer, stricter security measures (localhost binding, connection timeouts), and robust panic recovery mechanisms to ensure the system remains available under unexpected conditions.

Security Hardening

• Token-Based Authentication: Implemented strict token validation for ArrowServer to prevent unauthorized access (bf55c07).
• Localhost Binding: Restricted default server binding to localhost (127.0.0.1) to minimize attack surface (0bdb0cb).
• Connection Timeouts: Added configurable timeouts for server connections to mitigate resource exhaustion attacks (97c2113).

Stability & Resilience

• Panic Recovery: Added middleware to recover from panics in Worker Pool and ArrowServer handlers, ensuring the engine stays alive (253fa64, 295a454).
• DoS Prevention - Input Limits: Enforced maximum input size checks for FFI calls to prevent memory exhaustion (57d1e90).
• DoS Prevention - Message Limits: Added maximum message size constraints in ZMQ transport layer (345f683).
• Robust Error Handling: Improved error handling during socket cleanup and column data validation (7cb3a8b, 7acd266).

Quality Assurance

• Stress Testing Tool: Added a dedicated stress testing tool with JSON reporting and auth support to validate system stability under load (939af6c).
• Fuzz Testing: Implemented fuzz tests for JSON, Event-to-Arrow conversions, and Network message parsing to ensure round-trip integrity and handle edge cases (edaff66, 2b6b106).

Files Changed

File	Changes	Commit
hierachain-engine/api/arrow_server.go	Added token auth, timeouts, and panic recovery	bf55c07, 97c2113
hierachain-engine/api/auth.go	Implemented token validation logic	bf55c07
cmd/arrow-server/main.go	Enforced localhost binding	0bdb0cb
hierachain-engine/core/worker_pool.go	Added panic recovery for tasks	253fa64
hierachain-engine/integration/rust_ffi.go	Added max input size check	57d1e90
hierachain-engine/network/zmq_transport.go	Added max message size check & cleanup fix	345f683
hierachain-engine/data/converter.go	Enhanced column validation	7acd266
tools/stress_test/main.go	Added stress testing tool	939af6c
hierachain-engine/data/converter_fuzz_test.go	Added fuzz tests for data conversion	edaff66
hierachain-engine/network/zmq_transport_fuzz_test.go	Added fuzz tests for network message parsing	2b6b106

Known Limitations

• Development Build: Performance optimizations are still ongoing.
• Single Node: Currently optimized for single-node execution; clustering features are experimental.

Links

Documentation

• README (English)
• README (Tiếng Việt)
• Development Guide
• Security Policy

Ecosystem

• HieraChain - Python Framework (Main Project)
• HieraChain-Consensus - Rust Core Consensus

---

Full Changelog: v0.0.1.dev1...v0.0.1.dev2