feat(tbtc): covenant signer final project branch#3882

Open

mswilkison wants to merge 134 commits into

mainfrom

feat/psbt-covenant-final-project-pr

Commits on May 10, 2026

feat(tbtc): add covenant signer job substrate

mswilkison
authored and
lrsaturnino
committed
fix(tbtc): harden covenant signer substrate

mswilkison
authored and
lrsaturnino
committed
feat(tbtc): validate migration destination reservation artifacts

mswilkison
authored and
lrsaturnino
committed
test(tbtc): expand reservation artifact validation coverage

mswilkison
authored and
lrsaturnino
committed
feat(tbtc): validate covenant migration transaction plan

mswilkison
authored and
lrsaturnino
committed
docs(tbtc): note transaction-plan rollout dependency

mswilkison
authored and
lrsaturnino
committed
feat(tbtc): implement self_v1 signer completion

mswilkison
authored and
lrsaturnino
committed
fix(tbtc): harden self_v1 signer validation

mswilkison
authored and
lrsaturnino
committed
fix(tbtc): repair covenant signer project branch CI

mswilkison
authored and
lrsaturnino
committed
feat(tbtc): add qc_v1 signer handoff

mswilkison
authored and
lrsaturnino
committed
test(tbtc): tighten qc_v1 handoff coverage

mswilkison
authored and
lrsaturnino
committed
fix(tbtc): gofmt covenant signer

mswilkison
authored and
lrsaturnino
committed
Harden covenant signer service exposure

mswilkison
authored and
lrsaturnino
committed
Verify canonical migration plan commitments

mswilkison
authored and
lrsaturnino
committed
Fix signer poll race and locktime bounds

mswilkison
authored and
lrsaturnino
committed
Fix gosec G118 findings

mswilkison
authored and
lrsaturnino
committed
Harden covenant signer route controls

mswilkison
authored and
lrsaturnino
committed
Validate role-tagged covenant approvals

mswilkison
authored and
lrsaturnino
committed
Normalize covenant signer request digests

mswilkison
authored and
lrsaturnino
committed
Harden covenant signer request digests

mswilkison
authored and
lrsaturnino
committed
Add covenant signer contract vectors

mswilkison
authored and
lrsaturnino
committed
Add mixed-case covenant signer coverage

mswilkison
authored and
lrsaturnino
committed
Verify depositor and custodian approval signatures

mswilkison
authored and
lrsaturnino
committed
Clarify signer approval deferral and canonicalize commitment JSON

mswilkison
authored and
lrsaturnino
committed
Verify migration plan quotes in covenant signer

mswilkison
authored and
lrsaturnino
committed
Add migration plan quote verification vectors

mswilkison
authored and
lrsaturnino
committed
Spike signer approval certificates

mswilkison
authored and
lrsaturnino
committed
Bind signer approval cert to on-chain wallet identity

mswilkison
authored and
lrsaturnino
committed
Verify structured covenant signer approvals

mswilkison
authored and
lrsaturnino
committed
Require structured signer approval on engine path

mswilkison
authored and
lrsaturnino
committed
Tighten signer approval cutover validation

mswilkison
authored and
lrsaturnino
committed
Warn on signer verifier-less startup

mswilkison
authored and
lrsaturnino
committed
Remove legacy signer approval role path

mswilkison
authored and
lrsaturnino
committed
Harden signer approval verifier boundary

mswilkison
authored and
lrsaturnino
committed
Pin covenant approval trust roots

mswilkison
authored and
lrsaturnino
committed
Tighten covenant approval trust roots

mswilkison
authored and
lrsaturnino
committed
Differentiate self_v1 presign and reconstruction requests

mswilkison
authored and
lrsaturnino
committed
Add self_v1 presign request vectors

mswilkison
authored and
lrsaturnino
committed
Run gofmt on covenant signer files

mswilkison
authored and
lrsaturnino
committed
Require covenant approval trust roots in production mode

mswilkison
authored and
lrsaturnino
committed
fix(covenantsigner): add HTTP timeouts and body size cap

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): set explicit max header size

piotr-roslaniec
authored and
lrsaturnino
committed
fix(tbtc): require signer set hash in certificate verification

piotr-roslaniec
authored and
lrsaturnino
committed
fix(tbtc): canonicalize signer set hash payload JSON

piotr-roslaniec
authored and
lrsaturnino
committed
fix(bitcoin): guard tx output index bounds in getScript

piotr-roslaniec
authored and
lrsaturnino
committed
fix(tbtc): guard against empty witness stack

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): return 405 for poll path method mismatch

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): return generic JSON decode errors

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): reject unknown JSON envelope fields

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): unescape poll request ID before slash validation

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): validate facade and idempotency identifiers

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): error on unsupported submit route

piotr-roslaniec
authored and
lrsaturnino
committed
refactor(covenantsigner): replace variadic validation options with explicit struct

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): make store replacement write-first

piotr-roslaniec
authored and
lrsaturnino
committed
test: align unknown-field behavior and fix go1.24 fmt vet issue

piotr-roslaniec
authored and
lrsaturnino
committed
chore: open follow-up branch for feat/psbt-covenant-final-project-pr

piotr-roslaniec
authored and
lrsaturnino
committed
ci(client): add race detector job for covenant signer and tbtc

piotr-roslaniec
authored and
lrsaturnino
committed
test(covenantsigner): add HTTP boundary error matrix coverage

piotr-roslaniec
authored and
lrsaturnino
committed
test(covenantsigner): add store durability fault-injection coverage

piotr-roslaniec
authored and
lrsaturnino
committed
test(cmd): add fail-fast startup tests with injected init handles

piotr-roslaniec
authored and
lrsaturnino
committed
test(crypto): add negative parsing coverage for signer approvals and trust roots

piotr-roslaniec
authored and
lrsaturnino
committed
ci(client): gate race checks on high-risk path changes

piotr-roslaniec
authored and
lrsaturnino
committed
test(tbtc): cover poll no-op and unsupported route transitions

piotr-roslaniec
authored and
lrsaturnino
committed
test(chain/ethereum): add tbtc contract config and wallet-state error tests

piotr-roslaniec
authored and
lrsaturnino
committed
test(fuzz): add decoder fuzz targets for signer validation paths

piotr-roslaniec
authored and
lrsaturnino
committed
test(covenantsigner): split store and server suites into thematic files

piotr-roslaniec
authored and
lrsaturnino
committed
ci(client): scope race checks to stable tbtc tests

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): parse UpdatedAt for store dedup ordering

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): reject trailing JSON tokens in decodeJSON

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): decouple poll digest from trust-root drift

piotr-roslaniec
authored and
lrsaturnino
committed
fix(tbtc): classify wallet-not-found errors with sentinel

piotr-roslaniec
authored and
lrsaturnino
committed
refactor(tbtc): share covenant build-and-sign flow

piotr-roslaniec
authored and
lrsaturnino
committed
fix(tbtc): require active outpoint confirmation before signing

piotr-roslaniec
authored and
lrsaturnino
committed
docs(tbtc): document uncompressed signer-approval key format

piotr-roslaniec
authored and
lrsaturnino
committed
refactor(cmd): inject start dependencies without mutable globals

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): require signer approval verifier in strict mode

piotr-roslaniec
authored and
lrsaturnino
committed
fix(covenantsigner): harden request dedupe and signature canonicalization

piotr-roslaniec
authored and
lrsaturnino
committed
style(cmd): apply gofmt to start dependency wiring

piotr-roslaniec
authored and
lrsaturnino
committed
test(covenantsigner): stabilize invalid UpdatedAt assertion

piotr-roslaniec
authored and
lrsaturnino
committed
refactor(covenantsigner): extract shared marshalCanonicalJSON utility
lrsaturnino
committed
feat(covenantsigner): make active outpoint confirmations configurable
lrsaturnino
committed
feat(covenantsigner): add exclusive file lock to prevent concurrent store corruption
lrsaturnino
committed
fix(covenantsigner): add domain separation to request digest
lrsaturnino
committed
fix(covenantsigner): detach submit context from HTTP lifecycle
lrsaturnino
committed
test(canonicaljson): expand Marshal tests with struct input, determinism, and clearer assertions
lrsaturnino
committed
test(tbtc): add deterministic key ordering test for QcV1 signer handoff payload hash
lrsaturnino
committed
docs(covenantsigner): add deployment topology and coordination guide
lrsaturnino
committed
feat(tbtc): add fault isolation for wallet registry and resilient store loading
lrsaturnino
committed
fix(tbtc): fail closed on store corruption

mswilkison
authored and
lrsaturnino
committed
fix(covenantsigner): address store lock gosec findings

mswilkison
authored and
lrsaturnino
committed
Revert "fix(covenantsigner): address store lock gosec findings"
lrsaturnino
committed
fix(covenantsigner): suppress gosec false positives on store lock file operations
lrsaturnino
committed
fix: implement audit findings from consolidated review (#3935)
lrsaturnino
committed

Commits on May 23, 2026