Security context

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

src/runtime/keyed-crypto.ts: most-fixed (3 issues). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: API endpoints and ledger bindings historically allowed unauthorized interactions due to a lack of centralized middleware checks and missing authorization validation before associating appIds with ledgers.

Cryptographic Issues: Weak or deterministic IV generation in cryptographic routines compromised payload confidentiality, requiring migrations to standard 96-bit (12-byte) IV sizes and double-hashing of payload data to mitigate IV leakage.

Auth Bypass: Silent swallowing or improper propagation of token verification errors allowed invalid tokens to successfully authenticate requests to internal services.