araharah-executor 22fda6d12a fix(03-04): HMAC data-check-string excludes only hash — signature field participates (real clients rejected as tampered; erratum M6)

2026-10-23 01:34:19 +08:00

..

commands.test.mjs

feat(02-03): strings module + text-only command surface with Malay aliases (D-01..D-05)

2026-10-22 11:48:50 +08:00

harness.mjs

test(02-01): hand-rolled harness + RED initdata vector suite (D-12, TDD RED)

2026-10-22 11:38:06 +08:00

initdata.test.mjs

fix(03-04): HMAC data-check-string excludes only hash — signature field participates (real clients rejected as tampered; erratum M6)

2026-10-23 01:34:19 +08:00

location-pin.test.mjs

feat(03-01): GEO-02 server half both directions — chat-keyboard fallback + GET /api/location + POST /api/location-fallback (claim-scoped)

2026-10-22 23:33:01 +08:00

privacy.test.mjs

feat(03-01): TTL-only KV location-pin layer under the existing privacy gates (GEO-03, PRIV-02)

2026-10-22 23:25:59 +08:00

runner.mjs

test(02-01): hand-rolled harness + RED initdata vector suite (D-12, TDD RED)

2026-10-22 11:38:06 +08:00

sessions.test.mjs

fix(02-bot-skeleton-initdata-security): WR-03 honest rotate-on-new invariant + best-effort post-mint reconciliation (fold in IN-01b dead branch, IN-01c Phase-4 notes)

2026-10-22 20:21:11 +08:00

webhook.test.mjs

fix(03-04): HMAC data-check-string excludes only hash — signature field participates (real clients rejected as tampered; erratum M6)

2026-10-23 01:34:19 +08:00