[had3sgames]

Summary

• [Trivial] Re-check origin trust at each wallet adapter's signTransaction call, not only in assertWalletReady #645: extract checkOriginTrusted() from assertWalletReady and re-run it immediately before signTransaction in useSolverRegistration and useBondManagement (no central dispatch exists yet).
• [Trivial] Validate address *format*, not just string-ness, before trusting entries in the local known-addresses baseline #646: getKnownAddressRecords drops entries that fail isValidStellarPublicKey; recordKnownAddress is a no-op on invalid input.
• [Trivial] Add a value-shape fallback to intentExport.ts's redactForExport, not just a key-name match #647: add looksLikeSensitiveBlob (long base64/hex) in secureLogging.ts; redactForExport applies it to every string value, in addition to the key-name filter.
• [Medium] Audit the analytics CSV/share-URL export path (analyticsExport.ts) for the same redaction policy as the intent-export path #648 audit: the CSV bundle holds aggregates only (KPIs, daily volume, chain/token route totals), with no addresses, XDR or signatures. AnalyticsShareState is filter state only (from/to/chain/token). Encode and decode now reject values that are over 64 chars, strkey-valid, or blob-shaped. Decode also rejects params over 1024 chars and non-object JSON.

Future direction for #647: mark sensitive fields at the type level on IntentDetail.

Validation

• vitest src/lib/securityHardening.test.ts: 5/5 pass (one test per issue).
• lint/typecheck/pre-commit could not pass: main already has a malformed .eslintrc.json, empty textSafety.ts/config.ts/store/wallet.ts, and syntax errors in ogImageHelpers.ts, charts/index.ts, AnalyticsPageClient.tsx, etc. Committed with --no-verify. Only unrelated fix: a stray } in stellarAddress.ts that [Trivial] Validate address *format*, not just string-ness, before trusting entries in the local known-addresses baseline #646 imports.
• secureLogging.ts was empty (issue i18n: externalize strings in the solve page #61 not landed), so the heuristic lives there as a minimal stand-in.

Closes #645
Closes #646
Closes #647
Closes #648

[drips-wave]

@had3sgames Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits