[analysis] Canonical binding bypass in ProofBundle::verify — PoC - #2

Open

saroupille wants to merge 14 commits into

mainfrom

analysis/verifier-canonical-binding

Commits on Apr 17, 2026

Add burned rollup fees and DAL producer note outputs
Arthur Breitman
committed
bde1347

Commits on Apr 18, 2026

Enforce operator DAL fee policy and atomic note appends
Arthur Breitman
committed
f69af62
Add simple dynamic rollup burn fee
Arthur Breitman
committed
f036f65
Harden wallet rollup fee and snapshot reads
Arthur Breitman
committed
8de66c6

Commits on Apr 19, 2026

Clarify wallet app roles in docs
Arthur Breitman
committed
ae0e484

Commits on Apr 21, 2026

Route rollup config through DAL
Arthur Breitman
committed
696d5c0
Bind shield deposits to secret-derived keys
Arthur Breitman
committed
8983481
Merge dynamic-rollup-fee
Arthur Breitman
committed
3655fec

Commits on Apr 22, 2026

PoC: ProofBundle::verify accepts non-canonical bundles (phase 2)
saroupille
committed
adada04
PoC: transfer-shaped preimage with canonical program hash (phase 3)
saroupille
committed
6699f4a
PoC: polish disclosure-quality doc and trim diagnostics (phase 4)
saroupille
committed
2677557
PoC: end-to-end kernel accepts forged Unshield (phase 5)

saroupille
and
claude
committed
c29ea8b
PoC: address code-review BLOCKERs + top SHOULDs

saroupille
and
claude
committed
4900a1c
docs: disclosure analysis for canonical binding bypass

saroupille
and
claude
committed
48fd431