Skip to content

v0.1.2: score stability and security audit

Choose a tag to compare

@vaibhav0xq vaibhav0xq released this 21 Jul 04:34
· 16 commits to main since this release

Arc Identity v0.1.2 is a reliability and security audit release.

During the latest audit, two issues were fixed before wider usage.

First, wallet intelligence refreshes could produce score drift when provider responses changed between refreshes. the score pipeline now uses a deterministic evidence model, so repeated refreshes should not move a wallet score unless the underlying indexed or verified evidence changes.

Second, fresh wallets with no indexed activity could still appear with an artificial baseline score because legacy fallback logic assigned reputation before verified evidence existed. wallet with no indexed or verified evidence now starts from 0.

This release also improves consistency across dashboard, directory, public profiles and dev api responses. arc activity, global wallet history, verified attestations, trust graph evidence and provider coverage now flow through the same score path.

Public repo cleanup:

  • refreshed README
  • added MIT license
  • added security and contributing docs
  • kept deployment database migrations private
  • cleaned up arc language relationship according to latest guidance
  • confirmed files and local logs are not tracked

Validated with typecheck:

  • TypeScript check completed with npm run typecheck
  • Production build completed with npm run build
  • Public repository checked for internal source files, logs and private deployment schema