multi: consolidated security fixes (May 15) - #459

Merged

Roasbeef merged 9 commits into

mainfrom

consolidated/security-fixes-2026-05-15

May 19, 2026

Commits on May 19, 2026

oor: Validate incoming ancestor packages (#366)
ellemouton
committed
218df56
db: Reject untrusted OOR ancestor packages by txid in resolver
ellemouton
committed
73f1140
oor: Reject incomplete ancestry index on incoming OOR receive
ellemouton
committed
230651f
unroll: Keep restore failures retryable, restore via Ensure
ellemouton
committed
1321eb4
round: Enforce fee cap against realised quote economics
ellemouton
committed
ec197b2
round: Tighten single-output quote echo amount validation
ellemouton
committed
9991b49
arkrpc: Validate ancestry tree_depth at indexer trust boundary
ellemouton
committed
f5c3a1b
unroll: Drop zero-tree-depth gate that can block legitimate proofs
ellemouton
committed
6a09f9f
serverconn: Sign TLS leaf SPKI with mailbox key
ellemouton
committed
8f70cd2