Files

D.Popov 68e057209c Add alpha-hardening ADRs and issue plan from pre-release audit.

Lock alpha scope, tracker auth, TOPLOC fraud verification, and deferred multi-tracker money-path work; supersede legacy fraud issues with ADR-0018.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-04 23:12:09 +03:00

1.1 KiB

Raw Blame History

Status: ready-for-human

12 — C2: On-chain settlement idempotency (deferred)

What to build

Harden payout idempotency so Solana transaction retries never double-pay. Design accepted in ADR-0019 §1; implementation deferred post-alpha.

Code refs:

packages/tracker/meshnet_tracker/server.py — _settlement_loop resend (~3331–3356), _send_settlement (~3358–3376)
packages/contracts/meshnet_contracts/solana_adapter.py — send_payouts (~186–213)

Today: pending debited before broadcast with stable settlement_id; unconfirmed batches resent. Gap: on-chain confirmation vs ledger state if tx succeeds but confirm fails.

Acceptance criteria

confirm_settlement only after RPC finalized confirmation
Retry path reuses same settlement_id and detects already-confirmed signature
Property test: N retries → single on-chain transfer per wallet per settlement_id
Document recovery procedure for stuck unconfirmed batches

ADR links

ADR-0019 §1

Blocked by

Alpha release (ADR-0016 single settlement tracker)

1.1 KiB Raw Blame History Unescape Escape