• Joined on 2026-07-07
dcharlot created branch sec/unsound-bumps-2026-10 in Transaction-Science/open-standards 2026-10-22 12:56:10 -04:00
dcharlot created pull request Transaction-Science/open-standards#449 2026-10-22 12:56:09 -04:00
sec: take the three unsoundness fixes that are a patch bump away
adf5774f9d sec: align the MLS dev-dependency stack, removing hpke-rs 0.2.0 and its four advisories
dcharlot created pull request Transaction-Science/open-standards#448 2026-10-22 12:52:28 -04:00
wai.avatar.face: a talking head generated the same bytes on every sink from a signed keypoint track and an identity prior (AVTR)
dcharlot pushed to wai/avatar-telepresence at Transaction-Science/open-standards 2026-10-22 12:51:39 -04:00
9804962c0b Merge remote-tracking branch 'origin/main' into wai/avatar-telepresence
950ae477d1 avatar-face corpus: the mask's table pinned by its digest and entries
Compare 2 commits »
dcharlot created branch wai/avatar-telepresence in Transaction-Science/open-standards 2026-10-22 12:51:39 -04:00
dcharlot pushed to main at Transaction-Science/open-standards 2026-10-22 12:49:08 -04:00
76504e210f Merge pull request 'sec: close the cargo-audit backlog — move the WASM sandbox off a runtime with a filesystem escape, an aarch64 miscompile and a fuel-limit bypass' (#443) from sec/advisory-swee…
4e7fa646ed ci: gate on cargo-audit, so an advisory has to be read rather than accumulated
4d7edf3b36 trx, screening: resolve XML entity references, which quick-xml 0.41 now reports as their own event
f42cb4fae1 sec: drop the unused rsa dependency from op-3ds2, removing the one advisory with no fix
031ccb235b sec: move quick-xml to 0.41 where we control it — the ISO 20022 deserializer parses counterparty XML
Compare 6 commits »
dcharlot merged pull request Transaction-Science/open-standards#443 2026-10-22 12:49:08 -04:00
sec: close the cargo-audit backlog — move the WASM sandbox off a runtime with a filesystem escape, an aarch64 miscompile and a fuel-limit bypass
4e7fa646ed ci: gate on cargo-audit, so an advisory has to be read rather than accumulated
4d7edf3b36 trx, screening: resolve XML entity references, which quick-xml 0.41 now reports as their own event
Compare 2 commits »
dcharlot created pull request Transaction-Science/open-standards#447 2026-10-22 12:40:04 -04:00
joule-moq-room: its lockfile follows wai-quantum 0.6.14 (repository checks red on main since #427)
b5bf133d67 joule-moq-room: its lockfile follows wai-quantum 0.6.14
dcharlot created branch sec/rust-advisories-2026-10 in Transaction-Science/open-standards 2026-10-22 12:39:59 -04:00
dcharlot pushed to wai/ops-npu at Transaction-Science/open-standards 2026-10-22 12:32:16 -04:00
069b551c85 wai-ops-npu: the package energy counter is an OnChipCounter, not HwShunt
dcharlot pushed to main at Transaction-Science/open-standards 2026-10-22 12:04:50 -04:00
41c5bafba2 Merge pull request 'jcp-x402: refuse a payment scheme this crate does not implement' (#442) from fix/x402-refuse-unimplemented-scheme into main
3005307df1 jcp-x402: refuse a payment scheme this crate does not implement
Compare 2 commits »
dcharlot merged pull request Transaction-Science/open-standards#442 2026-10-22 12:04:50 -04:00
jcp-x402: refuse a payment scheme this crate does not implement
dcharlot closed pull request Transaction-Science/open-standards#54 2026-10-22 12:02:49 -04:00
wai: ingest the browser capability-negotiation mapping (WebCodecs)
dcharlot closed pull request Transaction-Science/open-standards#401 2026-10-22 12:02:44 -04:00
joule-moq: draft-ietf-moq-transport-18 and -16 beside -22, and interoperability with other implementations' relays
dcharlot closed pull request Transaction-Science/open-standards#413 2026-10-22 12:02:40 -04:00
wai: the browser sink — contentBinding on decoded frames, and browser negotiation rebuilt (supersedes #54)
dcharlot closed pull request Transaction-Science/open-standards#420 2026-10-22 12:02:35 -04:00
wai.media.takedown: takedown across every rendition and cache, against the regime's clock (TKD)
dcharlot closed pull request Transaction-Science/open-standards#424 2026-10-22 12:02:30 -04:00
wai.live.coperformance in the live room: the clock signs, the relay refuses, the page performs (CO4b)