dcharlot
created branch sec/unsound-bumps-2026-10 in Transaction-Science/open-standards
2026-10-22 12:56:10 -04:00
sec: take the three unsoundness fixes that are a patch bump away
dcharlot
pushed to sec/advisory-sweep-2026-10 at Transaction-Science/open-standards
2026-10-22 12:52:52 -04:00
wai.avatar.face: a talking head generated the same bytes on every sink from a signed keypoint track and an identity prior (AVTR)
dcharlot
pushed to wai/avatar-telepresence at Transaction-Science/open-standards
2026-10-22 12:51:39 -04:00
dcharlot
created branch wai/avatar-telepresence in Transaction-Science/open-standards
2026-10-22 12:51:39 -04:00
sec: close the cargo-audit backlog — move the WASM sandbox off a runtime with a filesystem escape, an aarch64 miscompile and a fuel-limit bypass
dcharlot
pushed to sec/advisory-sweep-2026-10 at Transaction-Science/open-standards
2026-10-22 12:49:06 -04:00
dcharlot
pushed to sec/rust-advisories-2026-10 at Transaction-Science/open-standards
2026-10-22 12:39:59 -04:00
dcharlot
created branch sec/rust-advisories-2026-10 in Transaction-Science/open-standards
2026-10-22 12:39:59 -04:00
jcp-x402: refuse a payment scheme this crate does not implement
wai: ingest the browser capability-negotiation mapping (WebCodecs)
joule-moq: draft-ietf-moq-transport-18 and -16 beside -22, and interoperability with other implementations' relays
wai: the browser sink — contentBinding on decoded frames, and browser negotiation rebuilt (supersedes #54)
wai.media.takedown: takedown across every rendition and cache, against the regime's clock (TKD)
wai.live.coperformance in the live room: the clock signs, the relay refuses, the page performs (CO4b)