Harden BASM protocol validation and Merkle path offsets - #520

Open

sirdeggen wants to merge 29 commits into

mainfrom

codex/basm-protocol-hardening

Commits on Sep 8, 2026

Commits on Sep 9, 2026

fix(sonar): overlay BASM protocol findings
sirdeggen
committed
e419d8e
Merge remote-tracking branch 'origin/main' into codex/basm-protocol-hardening
sirdeggen
committed
3fd2bf5
fix(ci): override js-yaml 3.15.2 for GHSA-2883
sirdeggen
committed
ea1e532
fix(ci): record js-yaml override removal rehearsal
sirdeggen
committed
e5aeed5
fix(ci): ratchet override count for js-yaml 3.15.2
sirdeggen
committed
029908f
fix(ci): raise SDK and wallet platform bundle budgets
sirdeggen
committed
e19009a
fix(ci): raise remaining SDK-consumer bundle budgets
sirdeggen
committed
26ca890
fix(ci): raise wallet client esbuild brotli budget
sirdeggen
committed
27dbc21
fix(ci): raise did-client UMD budget for SDK helper growth
sirdeggen
committed
0ce1684
fix(ci): prettier browser budget JSON
sirdeggen
committed
060a1a8
fix(ci): raise did-client esbuild budget
sirdeggen
committed
54591e0
fix(ci): raise did-client vite budget
sirdeggen
committed
8aec890
fix(ci): raise SDK vite and esbuild compressed budgets
sirdeggen
committed
b7715bd
test(overlay): cover BASM remote limits for patch coverage
sirdeggen
committed
a2a32b9

Commits on Sep 10, 2026

Commits on Sep 14, 2026

Merge origin/main into BASM hardening
sirdeggen
committed
15db752
Merge latest BASM hardening changes
sirdeggen
committed
5c4506c
fix: avoid eager fetch dependency in broadcaster
sirdeggen
committed
e46fefc
fix: defer unavailable fetch failure until send
sirdeggen
committed
740e36a
test: provide fetch spy target in node
sirdeggen
committed
9b7c99d
test: match complete admission acknowledgment
sirdeggen
committed
49e1063