Block a user
Decision needed: account credentials committed in
test/integration/live-login.ts
--version goes to stderr and the Docker image always reports "dev"
README and ARCHITECTURE corrections: wrong branch name, wrong score path, tests claimed that do not exist
feat: delete an address from an HD wallet (with confirmation)
Silently swallowed errors: unparseable exp yields 401 instead of 400, sidecar write failures logged nowhere
Stale branch cleanup: three unmerged branches, none worth keeping as-is
report and trees hold every record, including both hex hashes, in memory
Rewrite the README API reference to match the implementation
script/ and Makefile drift from the org models;
make dev is not a shim, make build is missing
Remove dead "daemon not yet ported" panic and four stale porting-era code comments
maintenance_mode is configurable and reported by the healthcheck but does not affect any request
feat: show wallet's recovery phrase (requires password)
progress: nothing printed at phase start on non-TTY, bogus isatty, warnings race the spinner
Cache.metaCache is dead: every cache hit does open+stat+ReadFile+JSON parse instead of the in-memory lookup README promises
Update golangci-lint to v2.12.2 with canonical config
Manager note. Independent adversarial review returned FAIL, 4 blocking findings; full results in the preceding comment. Relabeled needs-rework, still assigned clawbot. Dispatching rework…
Document the one-second mtime change-detection window as a known limitation
Update golangci-lint to v2.12.2 with canonical config (closes #60)
Review of PR #59 — VERDICT: FAIL (
Review of PR #59 — VERDICT: FAIL (needs-rework)
Reviewed head 82b31c7d23bd5770f10fecd5980620f18fdec4e5 against issue #60.
Gates that pass: docker build . succeeds end-to-end (authoritat…
Unit test coverage: traps (all 8 trapHandlers entries untested)
test: the entire address-poisoning defense in transactions.js is untested