mirror of
https://github.com/block/buzz.git
synced 2026-10-29 05:21:31 +00:00
772ba7a723
The derivation rule stated that no authorization decision derives from any request component outside the protected pre-MAC components. The pre-MAC input enumerates exactly ten components and the Authorization field is not one of them, yet on every proof-transport-0x02 route the decision must derive from the NIP-98 proof that field carries: the trusted-edge requirements mandate the field reach final admission unmodified and make admitting a 0x02 request without it nonconformant, and core requires the actor be returned by fresh Nostr-proof validation. Read literally, the rule and those obligations were jointly unsatisfiable. The fix excepts the one component that is integrity-protected by its own signed event rather than by the MAC; unprotected transport metadata remains excluded, and the Metadata negative case is unchanged. Oracle census unchanged at 58. Co-authored-by: Eva <011987e296fd5006292d2f930b574be47c7801048d1983c46c425d3c95f0cffd@buzz.block.builderlab.xyz> Signed-off-by: Eva <011987e296fd5006292d2f930b574be47c7801048d1983c46c425d3c95f0cffd@buzz.block.builderlab.xyz>