Compass v0.5 — whole-codebase ultrareview (158 commits)#7

Open

StephenSook wants to merge 184 commits into

baseline-initialfrom

Commits on May 6, 2026

Update .gitignore with new entries
StephenSook
authored
chore(day-1): scaffold workspaces + 0G broker smoke test infra

StephenSook
and
claude
committed
fix(day-1): Codex hardening — smoke test, ts config, node version

StephenSook
and
claude
committed
feat(authwit): CompassHub skeleton + Grant struct (Phase 2.1+2.2)

StephenSook
and
claude
committed
feat(authwit): full Authwit grant primitive (Phases 2.3-2.9)

StephenSook
and
claude
committed
feat(agent): AgentRegistry ERC-7857-stripped (Phase 3a)

StephenSook
and
claude
committed
feat(policy,receipt): policy registry + receipt log on CompassHub (Phases 3b+3c)

StephenSook
and
claude
committed
fix(security): address all BLOCKERs + HIGHs from 3-way code review

StephenSook
and
claude
committed
docs(notes): bank 0G ecosystem status + bug-report intel

StephenSook
and
claude
committed
fix(security): Phase 3d hardening — slither clean + property-based invariants

StephenSook
and
claude
committed
docs(architecture): two-contract + three-service overview (Phase 3e.1)

StephenSook
and
claude
committed
docs(threat-model): nine attack surfaces with mitigations (Phase 3e.2)

StephenSook
and
claude
committed
docs(limits): explicit "what Compass v1 does NOT protect against" (Phase 3e.3)

StephenSook
and
claude
committed
feat(policies): three demo-policy JSONs for HK FDH eligibility (Phase 3e.4)

StephenSook
and
claude
committed
feat(schemas): receipt-v1 canonicalization schema (Phase E5 / 6a.8)

StephenSook
and
claude
committed
fix(security): atomic grant+receipt + doc-honesty pass after 3-way review

StephenSook
and
claude
committed
chore(contracts): gitignore solidity-coverage artifacts

StephenSook
and
claude
committed
feat(sdjwt): SD-JWT VC issuer/holder/verifier round-trip (Phase 4)

StephenSook
and
claude
committed
refactor(enclave): rename fixture key helpers to INSECURE_FIXTURE_ONLY

StephenSook
and
claude
committed
fix(policy): depth guard + reject empty and:[]/or:[] predicates

StephenSook
and
claude
committed
fix(sdjwt): enforce KB-JWT + cnf binding + vct + audience (Codex BLOCKER)

StephenSook
and
claude
committed
docs: drop belt-and-suspenders framing + correct status-list reference

StephenSook
and
claude
committed
feat(crypto): AES-256-GCM + PBKDF2 vault encryption (Phase 5.1, 5.2, 5.5)

StephenSook
and
claude
committed
feat(storage): 0G Storage upload/download wrapper (Phase 5.3, 5.4)

StephenSook
and
claude
committed

Commits on May 7, 2026

Commits on May 8, 2026

Commits on May 10, 2026

Commits on May 11, 2026

Commits on May 12, 2026