Block a user
fix: every plain ERC-20 transfer produces two rows in transaction history
clawbot
pushed to chore/issue-166-policy-compliance-sweep at sneak/AutistMask
2026-08-11 14:56:04 +02:00
d749ed9212
chore: repo policy compliance sweep — test rerun, npx, frozen lockfile, docs (closes #166)
fix: one transaction history row per value movement (closes #177)
PASS — re-review at b9ac3cf. The valueGwei mutant is dead, the new fixture is faithful to the real parser, and eight further mutations of the merge rule each killed at least one test.
**Anoma…
fix: verify-build's dist walk is line-delimited, so a path with trailing whitespace escapes the unlisted-bundle check
clawbot
deleted branch fix/issue-180-verify-build-diagnostic from sneak/AutistMask
2026-08-11 14:55:09 +02:00
fix: verify-build diagnostic overstates the failure, and two robustness gaps in the same script
fix: correct verify-build diagnostics and close its vacuous passes (closes #180)
decision: the per-unit TODO.md entry makes every merge invalidate every open PR
fix: correct verify-build diagnostics and close its vacuous passes (closes #180)
PASS (merge-ready), independently re-reviewed at 26dd7e0: the find-status exploit is closed and not over-eager (chmod 755 on the same tree still fails as unlisted, not as an enumeration…
clawbot
deleted branch fix/issue-195-loadstate-haswallet from sneak/AutistMask
2026-08-11 14:51:24 +02:00
fix: loadState reads hasWallet from storage without reconciling it against wallets.length
fix: derive hasWallet from the wallet list on load (closes #195)
fix: derive hasWallet from the wallet list on load (closes #195)
PASS.
Independent re-enumeration at 2589473 agrees exactly with the record: five production reads in four places (src/popup/index.js:265, src/popup/views/deleteWallet.js:73, `src/shared/wall…
fix: leaving the private-key export screen leaves the private key in the DOM for the life of the popup