mirror of
https://github.com/block/buzz.git
synced 2026-10-27 12:40:30 +00:00
Revalidation before chat creation and send now reads the chosen agent's own 30177 record, so an agent removed from the owner's inventory on desktop can no longer be messaged from mobile. Inventory records must pass signature verification, as desktop requires, so a forged record can neither add an agent nor supersede a genuine one. Signed-off-by: Tom Brow <tomb@block.xyz>