82eae7cFix profile photo clearing on absent field, remove dead code in padded_len, fix CI comment typoLancelot3 months ago 850d68dsecurity audit fixes: 35 findings across core, shell, server, specLancelot3 months ago ee54351Security audit 13th pass: fix 23 findings across crypto, server, clientLancelot3 months ago 3258116Security: add AAD to AEAD (v0x02), fix livelock, bound dedup, cap gossip amplificationiko3 months ago 11c24d8Security audit fixes: Q16 cursor poisoning, Q17 ack ordering, Q18 persistent seen_ids, Q25 malformed JSON, Q35 revokeOthers challenges, Q37 sig inside atomic, Q38 audit log, Q49 low-order X25519 check, spec gaps Q39-Q44, §10 risk table updatesLancelot3 months ago da51700Security audit Q1-Q9: zstd window cap, poll event/body caps, cursor clamp, verify_strict, TEST-NET-2, cursor watchdog, cached X25519 keys, base64 photo validationLancelot3 months ago e57c03cEleventh-pass audit: add flush generation to prevent send-loop forkLancelot3 months ago