fix: close signature-verification auth bypass + budget bypasses; swap secp256k1 for coincurve (0.4.0) - #7

Merged

refined-element merged 5 commits into

fix/fail-open-security

Jul 17, 2026

Commits on Jul 3, 2026

docs: document attestation/reputation API, fix tagline; bump to 0.3.2

refined-element
and
claude
committed
f725722

Commits on Jul 17, 2026

fix: close signature-verification fail-open and two budget bypasses
refined-element
committed
5aed44c
fix: swap secp256k1 for coincurve so the security fix is installable

refined-element
and
claude
committed
b3182aa
docs: fix CHANGELOG branch link and the y-parity vector count

refined-element
and
claude
committed
052ad0d
Merge remote-tracking branch 'origin/master' into fix/fail-open-security
refined-element
committed
8fbe4c9