Skip to content

v1.0.1 — Audit remediation and public-repo readiness

Choose a tag to compare

View all tags
@ShoneAnstey ShoneAnstey released this 17 Apr 00:14
· 40 commits to main since this release
v1.0.1
b3aa1fe

1.0.1 — Audit remediation and public-repo readiness

Security hardening, audit remediation, and public-repo readiness.

Security

  • systemd secrets: passphrase now lives in /etc/saturnzap/saturnzap.env (mode 0600) and is referenced via EnvironmentFile=. The unit file itself contains no secrets.
  • Mainnet confirmation gate on sz fetch matches sz pay / sz keysend / sz send.
  • Default spending cap on sz fetch via SZ_CLI_MAX_SPEND_SATS.
  • Passphrase minimum length: 12 characters on sz init.
  • Backup integrity validation on sz restore (mnemonic word count, schema, types).

Reliability

  • MCP error handling: all 25 MCP tools return structured JSON errors instead of crashing.
  • Channel open resilience: polling loop replaces fixed sleep; log parsing is exception-safe.
  • Test isolation: singleton reset fixture eliminates state leakage.

CLI

  • sz --version flag.
  • --yes / -y flag on sz fetch.

Documentation & Release

  • SECURITY.md with private disclosure policy.
  • Aligned counts across all docs: 25 MCP tools, 23 IPC methods, 415 tests.
  • Dependabot config and CodeQL workflow.
  • Private infrastructure IPs replaced with RFC 5737 example addresses in tracked docs.

Full changelog: https://github.com/ShoneAnstey/SaturnZap/blob/main/CHANGELOG.md

Assets 2
Loading