Skip to content

v2.2.3 - EventChain round-2 audit fixes

Choose a tag to compare

View all tags
@sadhaka sadhaka released this 21 May 15:00
· 144 commits to main since this release
v2.2.3
dc76b62

Round-2 audit hardening. Closes the remaining canonicalization injectivity gaps: negative zero (stringifies to 0 yet is a distinct value), JSON-erased object and array metadata (symbol keys, non-enumerables, accessors, extra array props), and seal-head lone surrogates - all rejected fail-closed. Stored payloads are deep-cloned at every trust boundary so no external reference can mutate signed chain state.

Assets 2
Loading