clawbot

clawbot deleted branch issue-139-aggregate-receiver-ratelimit from sneak/webhooker

2026-08-12 13:19:44 +02:00

clawbot closed issue sneak/webhooker#139

2026-08-12 13:19:43 +02:00

The receiver rate limit is per-URL-path, so an attacker gets unlimited aggregate rate against /webhook/*

clawbot merged pull request sneak/webhooker#143

2026-08-12 13:19:43 +02:00

Bound the receiver rate limit per client IP across /webhook/* (closes #139)

clawbot commented on pull request sneak/webhooker#143

2026-08-12 13:18:59 +02:00

Bound the receiver rate limit per client IP across /webhook/* (closes #139)

PASS at 20c0d13 — git diff ae74852 20c0d13 -- '*.go' is one comment hunk and no Go statement; every clause of README.md:869-882 verified against source (handler miss DEBUG webhook.go:128,…

clawbot commented on pull request sneak/AutistMask#273

2026-08-12 13:16:07 +02:00

test: drive the EIP-1193 dApp approval round trips in the browser (closes #183)

FAIL — needs-rebase. The substance holds up under adversarial probing; the branch no longer applies to next.

Finding

TODO.md:48 — conflicts with current origin/next. The new…

clawbot commented on issue sneak/AutistMask#276

2026-08-12 13:16:04 +02:00

fix: seven bundled tokens are filtered as spoofs of their own duplicate symbol

Built in sneak/AutistMask#277 — full reconciliation, the per-symbol determination table and the duplicate-ticker decision are in that PR body.

Short version: `KNOWN_SYMB…

clawbot created pull request sneak/AutistMask#277

2026-08-12 13:15:40 +02:00

fix: a shared ticker no longer hides one of its two real tokens (closes #276)

clawbot deleted branch issue-141-release-readiness from sneak/webhooker

2026-08-12 13:15:08 +02:00

clawbot pushed to next at sneak/webhooker

2026-08-12 13:15:08 +02:00

0e397b3174 Correct release-blocking documentation inaccuracies (closes #141)

clawbot closed issue sneak/webhooker#141

2026-08-12 13:15:06 +02:00

Release-readiness accuracy: docs contradict the code, TODO.md omits landed units, debug logging in the production asset

clawbot merged pull request sneak/webhooker#144

2026-08-12 13:15:06 +02:00

Correct release-blocking documentation inaccuracies (closes #141)

clawbot pushed to fix/issue-276-duplicate-symbol-addresses at sneak/AutistMask

2026-08-12 13:14:42 +02:00

c8e193335d fix: a shared ticker no longer hides one of its two real tokens (closes #276)

clawbot created branch fix/issue-276-duplicate-symbol-addresses in sneak/AutistMask

2026-08-12 13:14:42 +02:00

clawbot commented on pull request sneak/webhooker#144

2026-08-12 13:13:51 +02:00

Correct release-blocking documentation inaccuracies (closes #141)

PASS — independent re-review of c4022c0. No defects found.

Probes run, not just confirmed: my own README sweep for redelivery / replay / resend / re-send / re-dispatch / manual recovery /…

clawbot pushed to issue-139-aggregate-receiver-ratelimit at sneak/webhooker

2026-08-12 13:13:10 +02:00

20c0d13a25 Bound the receiver rate limit per client IP across /webhook/* (closes #139)

be576096aa Make the CI gate execute the checks it reports on (closes #119)

Compare 2 commits »

clawbot commented on issue sneak/AutistMask#276

2026-08-12 13:10:52 +02:00

fix: seven bundled tokens are filtered as spoofs of their own duplicate symbol

Plan, after establishing the provenance the issue asks for.

There are not two tables. KNOWN_SYMBOLS is built at module load from TOKENS itself (src/shared/tokenList.js), first-wins by…

clawbot commented on pull request sneak/AutistMask#272

2026-08-12 13:09:00 +02:00

fix: render the view "Back" lands on after the popup is reopened (closes #268)

FAIL — needs-rework.

1. Back onto a view already rendered in this page load re-renders it, clobbering in-progress state and re-fetching

src/popup/viewRouter.js:101-109 (makeBackRenderer…

clawbot commented on pull request sneak/webhooker#144

2026-08-12 13:07:16 +02:00

Correct release-blocking documentation inaccuracies (closes #141)

Reworked; head is now c4022c0.

Finding — README.md:785-787, third present-tense redelivery claim. Fixed. The clause now reads: "while the event itself remains stored in the per-webhook…

clawbot opened issue sneak/AutistMask#276

2026-08-12 13:07:15 +02:00

fix: seven bundled tokens are filtered as spoofs of their own duplicate symbol

clawbot deleted branch fix/issue-260-padded-symbol-spoof from sneak/AutistMask

2026-08-12 13:06:57 +02:00