aitbc 13ada12b49 Security fixes: wildcard CORS, JWT auth, zero-address fallback ...

Phase 1 security remediation from codebase analysis:

CORS fixes:
- Replace wildcard CORS with safe localhost defaults in agent-coordinator
- Replace wildcard CORS with safe localhost defaults in marketplace
- Fix 8 additional wildcard CORS instances in coordinator-api apps:
  - hermes_enhanced_app.py
  - api_gateway.py
  - modality_optimization_app.py
  - multimodal_app.py
  - gpu_multimodal_app.py
  - marketplace_enhanced_app.py
  - advanced_ai_service.py
  - adaptive_learning_app.py
- Add CORS configuration security tests

Blockchain-node auth fixes:
- JWT authentication now fails closed with clear error message
- X-Wallet-Address already gated behind TRUST_X_WALLET_ADDRESS env var
- Remove zero-address fallback from arbitration vote submission
- Add regression test for zero-address rejection in arbitration

Tests:
- Update dispute auth tests to reflect new JWT error message
- Add test_arbitration_vote_zero_address_rejected
- Add test_cors_configuration.py with 5 CORS validation tests

2026-05-24 19:31:26 +02:00

..

agent-coordinator

Security fixes: wildcard CORS, JWT auth, zero-address fallback

2026-05-24 19:31:26 +02:00

agent-management

feat: add /v1 API prefix to all business logic endpoints and create CLI test suite

2026-05-19 12:46:59 +02:00

agent-services

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

ai-engine

fix: replace datetime.UTC with timezone.utc for Python 3.12+ compatibility

2026-05-09 12:03:26 +02:00

ai-models/src/app

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

aitbc-edge

refactor: rename packages to shorter names

2026-05-20 08:30:51 +02:00

api-gateway

security: update vulnerable dependencies in subdirectory pyproject.toml files

2026-05-20 08:23:30 +02:00

blockchain/src/app

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

blockchain-event-bridge

refactor: reorganize aitbc core library into subpackages

2026-05-09 12:25:14 +02:00

blockchain-explorer

fix: add missing HTMLResponse import to blockchain-explorer main.py

2026-04-25 08:24:34 +02:00

blockchain-node

Security fixes: wildcard CORS, JWT auth, zero-address fallback

2026-05-24 19:31:26 +02:00

computing/src/app

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

coordinator-api

Security fixes: wildcard CORS, JWT auth, zero-address fallback

2026-05-24 19:31:26 +02:00

docs

Add pytest test files for microservices

2026-04-30 11:57:09 +02:00

enterprise/src/app

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

exchange

refactor: add rate limiting to agent coordinator routers

2026-05-13 09:32:53 +02:00

governance-service

feat: add /v1 API prefix to all business logic endpoints and create CLI test suite

2026-05-19 12:46:59 +02:00

gpu-service

feat: add /v1 API prefix to all business logic endpoints and create CLI test suite

2026-05-19 12:46:59 +02:00

identity/src/app

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

marketplace

Security fixes: wildcard CORS, JWT auth, zero-address fallback

2026-05-24 19:31:26 +02:00

marketplace-service

refactor: add aitbc package to Python path in marketplace-service

2026-05-19 12:49:26 +02:00

marketplace-service-debug/src/marketplace_service

fix: resolve JSON serialization in list_bids and add orders endpoint

2026-05-08 19:54:02 +02:00

miner

fix: replace datetime.UTC with timezone.utc for Python 3.12+ compatibility

2026-05-09 12:03:26 +02:00

payment/src/app

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

pool-hub

feat: add /v1 API prefix to all business logic endpoints and create CLI test suite

2026-05-19 12:46:59 +02:00

shared-core

refactor: remove website directory - migrate to separate repository

2026-05-19 18:23:14 +02:00

shared-domain

refactor: improve error handling and remove hardcoded credentials

2026-05-12 17:01:57 +02:00

trading-service

feat: add /v1 API prefix to all business logic endpoints and create CLI test suite

2026-05-19 12:46:59 +02:00

wallet

feat: add /v1 API prefix to all business logic endpoints and create CLI test suite

2026-05-19 12:46:59 +02:00

zk-circuits

ci: standardize pytest invocation and add security scanning

2026-05-11 13:46:42 +02:00

EXPLORER_MERGE_SUMMARY.md

chore: normalize file permissions across repository

2026-03-08 11:26:18 +01:00