nx9-chronoseal-rs

9 Commits

Author	SHA1	Message	Date
thakares	ac57752ec2	Improve README presentation and project overview	2026-05-08 15:19:33 +05:30
thakares	ebfbbf9901	Refine architecture docs and add project logo	2026-05-08 15:14:27 +05:30
thakares	b866471825	fix: rename LICENSE.md to LICENSE so GitHub detects MIT correctly GitHub license auto-detection requires a file named LICENSE containing the full license text. LICENSE-MIT and LICENSE-APACHE remain for dual-license reference.	2026-05-08 15:07:11 +05:30
thakares	f95b3c0d4a	license: switch from GPL-3.0 to MIT OR Apache-2.0 dual license Companies integrating security tooling into proprietary stacks are blocked by GPL copyleft. MIT/Apache-2.0 dual licensing matches the convention used by the Rust ecosystem (tokio, axum, serde, etc.) and removes all adoption friction for commercial users. - Add LICENSE-MIT - Add LICENSE-APACHE - Update LICENSE.md to dual-license declaration - Add [workspace.package] license field to Cargo.toml	2026-05-08 15:02:02 +05:30
thakares	7df32cd599	docs: rewrite README to reflect refactored codebase Rust / build (push) Canceled after 0s Details v0.2.0	2026-05-08 14:32:36 +05:30
thakares	68b181dad2	chore: update Cargo.lock and server/Cargo.toml after compilation	2026-05-08 14:28:36 +05:30
thakares	b75d586b86	fix: correct 7 bugs found in security audit Critical: - crypto.rs (server): use BTreeMap for canonical JSON so key order matches JS client's JSON.stringify sort — sig verification was always failing silently - heartbeat.js: capture sentSalt before rotating to next_salt so both sides compute next_chain_hash with the same salt — chain was broken after the first heartbeat High: - trust.rs: avg_speed = total_dist / total_time_ms (px/ms), not distance/event_count — legitimate users were always rejected - ratelimit.rs: add evict_stale() to drain expired entries and prevent unbounded HashMap memory growth - cleanup.rs: call rl.evict_stale() from the periodic cleanup loop Medium: - vm.rs: op 0x08 (NOT) is unary — split from binary-op arm so depth is not decremented incorrectly - wasm/crypto.rs: replace unwrap() panics in sign_message / get_public_key with unwrap_or_default(); add JS-side guard Low: - shared/Cargo.toml, wasm/Cargo.toml: remove leftover add-this comments - Dockerfile: rust:1.88-bookworm -> rust:1.87-bookworm (1.88 non-existent)	2026-05-08 14:27:41 +05:30
thakares	3f779a5295	Update LICENSE.md	2026-05-07 22:08:50 +05:30
thakares	a66debdece	Initial ChronoSeal release	2026-05-07 21:57:47 +05:30