82eae7cFix profile photo clearing on absent field, remove dead code in padded_len, fix CI comment typoLancelot3 months ago 850d68dsecurity audit fixes: 35 findings across core, shell, server, specLancelot3 months ago ee54351Security audit 13th pass: fix 23 findings across crypto, server, clientLancelot3 months ago 3258116Security: add AAD to AEAD (v0x02), fix livelock, bound dedup, cap gossip amplificationiko3 months ago 11c24d8Security audit fixes: Q16 cursor poisoning, Q17 ack ordering, Q18 persistent seen_ids, Q25 malformed JSON, Q35 revokeOthers challenges, Q37 sig inside atomic, Q38 audit log, Q49 low-order X25519 check, spec gaps Q39-Q44, §10 risk table updatesLancelot3 months ago da51700Security audit Q1-Q9: zstd window cap, poll event/body caps, cursor clamp, verify_strict, TEST-NET-2, cursor watchdog, cached X25519 keys, base64 photo validationLancelot3 months ago e57c03cEleventh-pass audit: add flush generation to prevent send-loop forkLancelot3 months ago 660cb44Tenth-pass audit: AddContact clears stale error on retryLancelot3 months ago 492430cNinth-pass audit: SetBlocked clears stale error on unblockiko3 months ago e894a24Eighth-pass audit: fix silent send/profile errors, draft loss on failed sendiko3 months ago c24f528Seventh-pass audit: zeroize encrypt inner on AEAD failure, fix stale commentsiko3 months ago