fix(node): authenticate gossip ref-update events before writing them - #325

Open

beardthelion wants to merge 16 commits into

mainfrom

fix/p2p-gossip-ingest-auth

Commits on Aug 17, 2026

feat(node): sign and verify gossip ref-update events
beardthelion
committed
434aab3
fix(node): authenticate gossip ref-update events before writing them
beardthelion
committed
8c7850b
fix(node): bound gossip ingest per source and sign outbound events
beardthelion
committed
39c4656
test(node): cover the did-method gate and correct overclaiming comments
beardthelion
committed
82f9bd9
fix(node): charge the ingest budget to the author, not the mesh edge
beardthelion
committed
43a5dba
docs(node): the did-method gate runs after the parse, not before it
beardthelion
committed
e080e56
fix(node): charge the gossip write budget only to a proven author
beardthelion
committed
f265689
fix(node): version the signed ref-update format and refuse unknown versions
beardthelion
committed
c095e9d
docs(node): describe the real signing handoff at the publish site
beardthelion
committed
d361e7f
docs: GITLAWB_REQUIRE_SIGNED_PEER_WRITES spans both transports
beardthelion
committed
bdd64fd
fix(review): count gossip ingest outcomes and sweep the ingest limiters
beardthelion
committed
87ee857
test(node): close four gaps the review found in this PR's own guards
beardthelion
committed
27f834c
fix(review): close the remaining findings from the round on this PR
beardthelion
committed
c571953
fix(review): report unsigned gossip admissions as their own outcome and metric (#325)
beardthelion
committed
c003f65
fix(node): shed an over-budget gossip author before the peer lookup (#325)
beardthelion
committed
2eaabff

Commits on Aug 18, 2026

chore: retrigger checks after a CodeQL infrastructure failure
beardthelion
committed
b7416c6