feat: restore account modules and verification coverage - #61

Draft

leekt wants to merge 84 commits into

Commits on Aug 4, 2026

Commits on Aug 5, 2026

feat: GasPolicy restore gas budget enforcement
leekt
committed
f416952
test: GasPolicy cover budget and overflow handling
leekt
committed
bb6faeb
feat: RateLimitPolicy restore rate limiting
leekt
committed
473cf72
test: RateLimitPolicy cover rate-limit behavior
leekt
committed
63de753
feat: SudoPolicy restore unrestricted policy
leekt
committed
a4b973c
test: SudoPolicy cover policy lifecycle
leekt
committed
b493671
feat: ThrottlePolicy restore request throttling
leekt
committed
433c8fa
test: ThrottlePolicy cover throttling behavior
leekt
committed
ae245f6
feat: WeightedECDSA share threshold validation
leekt
committed
a621980
test: WeightedECDSA cover threshold validation
leekt
committed
91f06c2
feat: P256 add stateless signer and validator
leekt
committed
aa85e2f
test: P256 cover stateless signer and validator
leekt
committed
cd70717
feat: WebAuthn add stateless signer and validator
leekt
committed
7de82bd
test: WebAuthn cover stateless signer and validator
leekt
committed
5de20b5
feat: MultiOwnerValidator add native multi-owner validation
leekt
committed
959c792
test: MultiOwnerValidator cover owner registry and validation
leekt
committed
c623f46
test: CallerPolicy strengthen formal verification
leekt
committed
c57e94e
test: ECDSASigner strengthen formal verification
leekt
committed
858864f
test: ECDSAValidator strengthen formal verification
leekt
committed
8dd38f6
test: TimelockPolicy strengthen formal verification
leekt
committed
3c35b48

Commits on Sep 15, 2026

fix(webauthn): restore validation compatibility
leekt
committed
f5be4c7
docs(recovery): document security hook incompatibility
leekt
committed
8e39c65
fix(hook): enforce execution security boundaries
leekt
committed
3ba474e
fix(gas-policy): account for sponsored operation gas
leekt
committed
c45336e
fix(rate-limit): return immediately valid windows
leekt
committed
53637d7
fix(throttle): reject signature budget checks
leekt
committed
bb4c599
fix(timelock): authenticate delayed proposals plugin-side
leekt
committed
d43169b
fix(ecdsa-signer): reject malformed stateless owners
leekt
committed
553fe2f
fix(webauthn-signer): restore legacy signature validation
leekt
committed
cb879c9
fix(weighted-signer): bind approvals to configuration epoch
leekt
committed
315ea42
fix(ecdsa-validator): correct module and owner validation
leekt
committed
b0f73af
fix(multi-owner): bound account-associated owner storage
leekt
committed
b35221c
fix(webauthn-validator): validate legacy assertions and keys
leekt
committed
5136c6e
fix(weighted-validator): bind approvals to configuration epoch
leekt
committed
7e051f0
test(timelock): add atomic transaction harness
leekt
committed
1336089
test(timelock): add EntryPoint context mock
leekt
committed
8d6d4d3
test(timelock): support authenticated proposal execution
leekt
committed
7040c3a
test(hook): cover audit security boundaries
leekt
committed
262c9c1
test(multi-owner): cover storage and data bounds
leekt
committed
a917074
test(ecdsa-signer): cover stateless owner validation
leekt
committed
bc75f1e
test(ecdsa-validator): cover module and owner validation
leekt
committed
8ee63fa
test(gas-policy): cover complete gas accounting
leekt
committed
84416c6
test(multi-owner): update owner registry coverage
leekt
committed
f988464
test(rate-limit): cover immediate validity windows
leekt
committed
5332fc8
test(sudo-policy): cover uninstalled policy behavior
leekt
committed
7a016f1
test(throttle): cover signature rejection
leekt
committed
145df13
test(timelock): remove legacy no-op proposal cases
leekt
committed
5721ef4
test(timelock): cover authenticated proposal lifecycle
leekt
committed
8f25fe5
test(webauthn): cover legacy ABI and backend fallback
leekt
committed
fadadf3
test(weighted-signer): cover epoch-bound approvals
leekt
committed
6e22610
test(weighted-validator): cover replay and epoch binding
leekt
committed
a4f4cf7
test(ecdsa-validator): update behavior tree
leekt
committed
d79a180
test(timelock): update behavior tree
leekt
committed
22dfb1a
test(timelock): cover cancellation races
leekt
committed
4ecc801
test(timelock): cover configuration epochs
leekt
committed
2b99330
test(weighted): cover signer deduplication
leekt
committed
8d955ba
test(weighted): cover gas griefing boundaries
leekt
committed
a694933
test(weighted): cover UserOperation hash domains
leekt
committed
c40871b
formal(hook): update batch properties
leekt
committed
cb2e0d6
formal(hook): update blocked selector properties
leekt
committed
2de693d
formal(hook): update ETH denial properties
leekt
committed
f6609da
formal(hook): update module denial properties
leekt
committed
0b26f7f
formal(hook): update core security properties
leekt
committed
253b28a
formal(hook): update allowlist removal properties
leekt
committed
142fe6c
formal(ecdsa): update validator gate properties
leekt
committed
c9a9a5e
formal(timelock): update cancellation authorization
leekt
committed
46b8dd1
formal(timelock): update execution window properties
leekt
committed
fb6400b
formal(timelock): update initialization properties
leekt
committed
42cbc4b
formal(timelock): update stale epoch properties
leekt
committed
039a1d1
formal(webauthn): update key lifecycle properties
leekt
committed
3f118e7
formal(webauthn): update stateless validation properties
leekt
committed
4a56fcf
test(timelock): cover EntryPoint v0.9 integration
leekt
committed
55eb7ce
formal(timelock): update Kontrol specification
leekt
committed
5ee9473
docs(hook): update verified security boundary
leekt
committed
a4f189f
docs(audit): document remediation and deployment
leekt
committed
4e6b290
docs(audit): add finding test matrix
leekt
committed
02d099f

Commits on Sep 16, 2026

chore: ignore macOS metadata
leekt
committed
d2bf918

Commits on Sep 18, 2026

docs(audit): remove remediation overview
leekt
committed
73fe869
docs(audit): remove test matrix
leekt
committed
a267d79