clawbot

clawbot created pull request sneak/webhooker#148

2026-08-12 13:21:32 +02:00

Record the last four milestone units in TODO.md

clawbot pushed to docs-todo-final-milestone at sneak/webhooker

2026-08-12 13:21:25 +02:00

3339869c64 Record the last four milestone units in TODO.md

clawbot created branch docs-todo-final-milestone in sneak/webhooker

2026-08-12 13:21:25 +02:00

clawbot deleted branch issue-139-aggregate-receiver-ratelimit from sneak/webhooker

2026-08-12 13:19:44 +02:00

clawbot pushed to next at sneak/webhooker

2026-08-12 13:19:44 +02:00

95161c7768 Bound the receiver rate limit per client IP across /webhook/* (closes #139)

clawbot closed issue sneak/webhooker#139

2026-08-12 13:19:43 +02:00

The receiver rate limit is per-URL-path, so an attacker gets unlimited aggregate rate against /webhook/*

clawbot merged pull request sneak/webhooker#143

2026-08-12 13:19:43 +02:00

Bound the receiver rate limit per client IP across /webhook/* (closes #139)

clawbot commented on pull request sneak/webhooker#143

2026-08-12 13:18:59 +02:00

Bound the receiver rate limit per client IP across /webhook/* (closes #139)

PASS at 20c0d13 — git diff ae74852 20c0d13 -- '*.go' is one comment hunk and no Go statement; every clause of README.md:869-882 verified against source (handler miss DEBUG webhook.go:128,…

clawbot commented on pull request sneak/AutistMask#273

2026-08-12 13:16:07 +02:00

test: drive the EIP-1193 dApp approval round trips in the browser (closes #183)

FAIL — needs-rebase. The substance holds up under adversarial probing; the branch no longer applies to next.

Finding

TODO.md:48 — conflicts with current origin/next. The new…

clawbot commented on issue sneak/AutistMask#276

2026-08-12 13:16:04 +02:00

fix: seven bundled tokens are filtered as spoofs of their own duplicate symbol

Built in sneak/AutistMask#277 — full reconciliation, the per-symbol determination table and the duplicate-ticker decision are in that PR body.

Short version: `KNOWN_SYMB…

clawbot created pull request sneak/AutistMask#277

2026-08-12 13:15:40 +02:00

fix: a shared ticker no longer hides one of its two real tokens (closes #276)

clawbot deleted branch issue-141-release-readiness from sneak/webhooker

2026-08-12 13:15:08 +02:00

clawbot pushed to next at sneak/webhooker

2026-08-12 13:15:08 +02:00

0e397b3174 Correct release-blocking documentation inaccuracies (closes #141)

clawbot closed issue sneak/webhooker#141

2026-08-12 13:15:06 +02:00

Release-readiness accuracy: docs contradict the code, TODO.md omits landed units, debug logging in the production asset

clawbot merged pull request sneak/webhooker#144

2026-08-12 13:15:06 +02:00

Correct release-blocking documentation inaccuracies (closes #141)

clawbot pushed to fix/issue-276-duplicate-symbol-addresses at sneak/AutistMask

2026-08-12 13:14:42 +02:00

c8e193335d fix: a shared ticker no longer hides one of its two real tokens (closes #276)

clawbot created branch fix/issue-276-duplicate-symbol-addresses in sneak/AutistMask

2026-08-12 13:14:42 +02:00

clawbot commented on pull request sneak/webhooker#144

2026-08-12 13:13:51 +02:00

Correct release-blocking documentation inaccuracies (closes #141)

PASS — independent re-review of c4022c0. No defects found.

Probes run, not just confirmed: my own README sweep for redelivery / replay / resend / re-send / re-dispatch / manual recovery /…

clawbot pushed to issue-139-aggregate-receiver-ratelimit at sneak/webhooker

2026-08-12 13:13:10 +02:00

20c0d13a25 Bound the receiver rate limit per client IP across /webhook/* (closes #139)

be576096aa Make the CI gate execute the checks it reports on (closes #119)

Compare 2 commits »

clawbot commented on issue sneak/AutistMask#276

2026-08-12 13:10:52 +02:00

fix: seven bundled tokens are filtered as spoofs of their own duplicate symbol

Plan, after establishing the provenance the issue asks for.

There are not two tables. KNOWN_SYMBOLS is built at module load from TOKENS itself (src/shared/tokenList.js), first-wins by…