davide

davide created branch main in davide/pdm

2026-08-06 16:17:33 +02:00

davide pushed to main at davide/pdm

2026-08-06 16:17:33 +02:00

6a874e85f6 Spigoli e illuminazione obliqua nella vista 3D

0410266334 Vista 3D del modello in una pagina HTML autonoma

b59380fcab Anteprime, decompressione LZW e contenuto dei disegni

bc84407a6f Lettore di metadati per file nativi Creo Parametric

davide created repository davide/pdm

2026-08-06 09:26:15 +02:00

davide pushed to audit-2026-08-03 at davide/plm-lottery

2026-08-04 16:17:26 +02:00

526a649c8b Say what bets and withdrawals actually exclude (B-70)

666cb1a0c9 Retire in-code comments that outlived what they described (B-69)

162ceed40f Describe the code the docs actually ship with (B-68)

5f6abe5b32 Validate and bound the QR endpoint (B-67)

23d58796b6 Refuse to open a round that could not pay its winner (B-66)

Compare 8 commits »

davide pushed to audit-2026-08-03 at davide/plm-lottery

2026-08-03 23:38:08 +02:00

8dd913ec59 Always keep a change output, so every tx stays fee-bumpable (B-62)

37cc5eeeb5 Snapshot a round's timing when it opens (B-61)

77e07e87dc Audit-log bug report status changes (B-60)

6246b13247 Corroborate deposit credits, not just external spends (B-59)

0aac73e557 Bound registrations with a per-IP quota instead of failure backoff (B-58)

Compare 12 commits »

davide created branch audit-2026-08-03 in davide/plm-lottery

2026-08-03 16:28:19 +02:00

davide pushed to audit-2026-08-03 at davide/plm-lottery

2026-08-03 16:28:19 +02:00

025754c860 Cap participants per round and give the payout its own input limit (B-52)

99d7a1ee00 Open the 2026-08-03 audit list (B-52 … B-72)

Compare 2 commits »

davide pushed to feature/bug-reports at davide/plm-lottery

2026-07-31 16:28:22 +02:00

e5af15087c Polish /report-bug's visual design and refine bug report semantics

davide pushed to feature/bug-reports at davide/plm-lottery

2026-07-31 16:04:06 +02:00

a384b08044 Translate /report-bug into all 7 languages, require English in the report itself

davide created branch feature/bug-reports in davide/plm-lottery

2026-07-31 15:51:41 +02:00

davide pushed to feature/bug-reports at davide/plm-lottery

2026-07-31 15:51:41 +02:00

ee4e845c89 Add user bug reporting with admin triage (open/read/resolved)

977bb762c7 Deduplicate the 70/30 prize split formula

fe909bedcf Don't double-count a bet/withdrawal's own change in pending balance (B-51)

9207bbcb8f Don't reveal the win banner before winner_amount_sats is known (B-50)

Compare 4 commits »

davide pushed to main at davide/plm-lottery

2026-07-27 23:38:25 +02:00

5cfe2d6f95 Merge audit-2026-07-27: fix all 25 findings of the second audit

0d2fef6502 Delete BUGS.md now that both audits' findings are closed

e7f844b11f Publish an SSE update from the bet/withdrawal rollback paths (B-49)

4c80c1c5bf Cap the number of inputs a transaction may spend (B-48)

6a90136b50 Widen raw_tx_hex and payload_json from String to Text (B-47)

Compare 30 commits »

davide pushed to audit-2026-07-27 at davide/plm-lottery

2026-07-27 16:24:28 +02:00

6a90136b50 Widen raw_tx_hex and payload_json from String to Text (B-47)

31bc9a327f Compare admin token as UTF-8 bytes to avoid TypeError on non-ASCII input (B-46)

6045c89ed0 Bound admin list endpoint limits, add status filter to pending-transactions (B-45)

a574db0d93 Align README and running-the-server.md with the Docker-only policy (B-44)

d60da11603 Add baseline HTTP security headers in Caddy (B-43)

Compare 10 commits »

davide pushed to audit-2026-07-27 at davide/plm-lottery

2026-07-27 14:23:18 +02:00

0b44fe632e Distinguish a pending-only balance from a truly insufficient one (B-37)

7fa26df104 Make a stalled draw wait observable (B-36)

bb8b71278a Stamp UTC on naive API timestamps before serializing (B-35)

739fc9fed2 Invalidate existing sessions on password change/reset (B-34)

16802cafb6 Throttle login and registration with exponential backoff (B-33)

Compare 5 commits »

davide pushed to main at davide/plm-lottery

2026-07-27 11:21:14 +02:00

f1a1145cda Detect UTXOs spent outside the platform and correct the cached balance

447bbba83e Add placeholder guide/bug-report pages, and an exclamation-mark bug icon

f9f822f437 Document real fallback Electrum servers in .env.example

Compare 3 commits »

davide created branch audit-2026-07-27 in davide/plm-lottery

2026-07-27 11:20:41 +02:00

davide pushed to audit-2026-07-27 at davide/plm-lottery

2026-07-27 11:20:41 +02:00

17c557b8a3 Meet BIP125's relay minimum on every RBF bump, and cap the fee rate (B-32)

fe5639a037 Update CLAUDE.md

12df04178e Resubscribe concurrently and in the background on reconnect (B-31)

63df38d30b Add a periodic deposit reconciler, and stop losing subscribe tasks (B-30)

e8fdea0389 Corroborate an external spend before marking a UTXO gone (B-29)

Compare 10 commits »

davide pushed to main at davide/plm-lottery

2026-07-27 00:36:54 +02:00

845ba98409 Record the audit outcome and the architecture it changed

dc4d5761df Format amounts, guard the loading state, and translate the new errors

7c4e9983ea Survive a dropped Electrum connection, and fall back to other servers

25f4a1c6b6 Refuse to start half-configured, and keep failures machine-readable

85dce221c5 Validate admin config and registration input, and log config changes

Compare 11 commits »

davide pushed to main at davide/plm-lottery

2026-07-26 22:01:07 +02:00

d4e0974881 Let JS own the live status labels instead of sharing them with data-i18n

28c1179e9b Recover from expired sessions and malformed requests in the dashboard

5c9ccc0344 Reject withdrawal addresses that aren't PLM

0cf35147ad Answer user-facing API failures with a machine-readable error code

7048fe7ea6 Translate the user-facing dashboard into 7 languages

Compare 5 commits »

davide pushed to main at davide/PalladiumWallet

2026-07-26 11:05:44 +02:00

8ac4a05c44 feat(docker): add linux-arm64 reproducible build target