aldabra/crates/aldabra-mcp/src
Sulkta 6955377c61 fix(dao): audit H-2 + H-5 + H-6 (per internal notes)
H-2: drop ExUnits to 5M/2G for spend, 2M/1G for mint
  Was 14M/10G each = per-tx Conway cap. With 3 plutus contracts running
  (governor spend + stake spend + ProposalST mint), total claim 42M/30G
  exceeds per-tx limit and node rejects pre-phase-2.

H-5: propagate malformed wallet asset keys instead of silently dropping
  Previous filter_map silently dropped any key < 56 chars. Could let a
  corrupt Koios response burn assets on submit. Now returns explicit
  Err with the offending UTxO + key.

H-6: tighten StakeST detection to asset_name == stake_validator_hash
  Per Stake/Scripts.hs:188-190 (pscriptHashToTokenName), StakeST
  asset_name is the stake validator's script hash. Previous code took
  "first non-gov-token asset" which would silently pick a wrong policy
  if a stake UTxO accidentally carried a junk NFT. Regression test
  h6_junk_token_does_not_pollute_stake_st_detection added.

3 of 7 audit punch-list items closed. C-1 + C-2 + C-3 next.
2026-05-05 20:52:22 -07:00
..
bootstrap.rs aldabra: --bootstrap-from-xprv power-user import path 2026-05-05 06:38:01 -07:00
config.rs mainnet prep: tighten max_send_lovelace default + cost model docs 2026-05-04 21:09:31 -07:00
main.rs feat(dao): wire 8 dao_* MCP tools (Phase 1) 2026-05-05 13:51:04 -07:00
tools.rs fix(dao): audit H-2 + H-5 + H-6 (per internal notes) 2026-05-05 20:52:22 -07:00