Skip to content

removed admin backdoors#6

Merged
CrackerakiUA merged 4 commits intomasterfrom
remove_signal_admin
Dec 14, 2025
Merged

removed admin backdoors#6
CrackerakiUA merged 4 commits intomasterfrom
remove_signal_admin

Conversation

@CrackerakiUA
Copy link
Copy Markdown
Member

No description provided.

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +109 to +112
var fundPlan fundtypes.FundPlan
if err := fundtypes.GetFundPlanCodec().UnmarshalJSON(plan.PlanJSON, &fundPlan); err != nil {
return nil, fmt.Errorf("invalid stored plan: %w", err)
}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Reject non-FundPlan JSON before execution

ExecuteFundPlan now attempts to decode the stored plan JSON into a fund FundPlan (fundtypes.GetFundPlanCodec().UnmarshalJSON), but plans are still accepted in CreatePlan so long as the payload is syntactically valid JSON (keeper.go lines 204‑211). Any previously stored or newly submitted plan that uses arbitrary JSON (e.g., missing delegations/payouts or using different field names) will pass proposal submission and voting but will now fail at execution with "invalid stored plan" from these lines, leaving approved proposals unexecutable. Consider validating the JSON against the FundPlan schema at creation/submission time or normalizing it before storing so governance-approved plans don’t get stuck at execution.

Useful? React with 👍 / 👎.

@CrackerakiUA CrackerakiUA merged commit 02d2a15 into master Dec 14, 2025
1 check passed
@CrackerakiUA CrackerakiUA deleted the remove_signal_admin branch December 14, 2025 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant