From 7d1dc9d967d05a1adcfcb1c0bddae77646fac2bf Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 08:09:11 +0000 Subject: [PATCH] chore(agricola): update state --- ledger/audit.json | 195 ++++++++++++++++++++++++++++++++++++++ ledger/cursor.json | 2 +- ledger/wevm-mppx-774.json | 29 ++++++ 3 files changed, 225 insertions(+), 1 deletion(-) create mode 100644 ledger/audit.json create mode 100644 ledger/wevm-mppx-774.json diff --git a/ledger/audit.json b/ledger/audit.json new file mode 100644 index 0000000..660a771 --- /dev/null +++ b/ledger/audit.json @@ -0,0 +1,195 @@ +{ + "version": 1, + "findings": [ + { + "id": "AGR-2026-001", + "fingerprint": "capability:http.payment_request", + "first_seen": "2026-08-08T18:32:36.578245Z" + }, + { + "id": "AGR-2026-002", + "fingerprint": "capability:stripe.external_id_binding", + "first_seen": "2026-08-08T18:32:36.578245Z" + }, + { + "id": "AGR-2026-003", + "fingerprint": "capability:tempo.proof.typed_data", + "first_seen": "2026-08-08T18:32:36.578245Z" + }, + { + "id": "AGR-2026-004", + "fingerprint": "semantic:challenge-encoding/rfc8785-json-canonicalization", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-005", + "fingerprint": "semantic:challenge-selection/match-method-and-intent", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-006", + "fingerprint": "semantic:challenge-validation/reject-malformed-expiration", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-007", + "fingerprint": "semantic:client-negotiation/advertise-supported-payment-capabilities", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-008", + "fingerprint": "semantic:client-negotiation/advertise-supported-payment-ranges", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-009", + "fingerprint": "semantic:client-retries/follow-fresh-payment-challenges", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-010", + "fingerprint": "semantic:client-retries/retry-fresh-payment-challenges-up-to-default-limit", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-011", + "fingerprint": "semantic:client-transport/fresh-challenge-payment-retry", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-012", + "fingerprint": "semantic:http-client/retry-actionable-402-until-cap", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-013", + "fingerprint": "semantic:http-client/retry-final-same-origin-response-url", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-014", + "fingerprint": "semantic:payment-receipt/validate-success-and-preserve-extension-fields", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-015", + "fingerprint": "semantic:server-authentication/reject-secret-keys-shorter-than-32-bytes", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-016", + "fingerprint": "semantic:server-verification/failed-payment-returns-fresh-402-challenge", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-017", + "fingerprint": "semantic:tempo-charge/challenge-bound-transfer-memo", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-018", + "fingerprint": "semantic:tempo-charge/validate-signed-transaction-before-broadcast", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-019", + "fingerprint": "semantic:tempo-charge/zero-amount-proof-credentials", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-020", + "fingerprint": "semantic:tempo-subscription/recurring-payment-lifecycle", + "first_seen": "2026-08-08T19:06:57.224550Z" + }, + { + "id": "AGR-2026-021", + "fingerprint": "semantic:challenge-negotiation/advertise-payment-capabilities", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-022", + "fingerprint": "semantic:challenge-negotiation/select-supported-method-intent", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-023", + "fingerprint": "semantic:challenge-parsing/enforce-method-identifier-grammar", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-024", + "fingerprint": "semantic:challenge-parsing/reject-unterminated-quoted-string", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-025", + "fingerprint": "semantic:challenge-parsing/validate-expiration-timestamp", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-026", + "fingerprint": "semantic:client-retries/retry-repeated-payment-challenges", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-027", + "fingerprint": "semantic:client-retry/fresh-challenge-retry", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-028", + "fingerprint": "semantic:credential-parsing/validate-required-challenge-fields", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-029", + "fingerprint": "semantic:http-transport/retry-fresh-payment-challenge", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-030", + "fingerprint": "semantic:negotiation/advertise-supported-method-intent-preferences", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-031", + "fingerprint": "semantic:negotiation/weighted-challenge-selection", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-032", + "fingerprint": "semantic:receipt-parsing/validate-required-receipt-fields", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-033", + "fingerprint": "semantic:server-configuration/enforce-minimum-challenge-secret-strength", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-034", + "fingerprint": "semantic:stripe-charge/idempotency-bound-to-challenge-and-spt", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-035", + "fingerprint": "semantic:stripe-charge/reject-idempotent-replay", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-036", + "fingerprint": "semantic:tempo-charge/require-challenge-bound-payment-memo", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-037", + "fingerprint": "semantic:tempo-charge/validate-transaction-before-broadcast", + "first_seen": "2026-08-08T19:52:20.848585Z" + }, + { + "id": "AGR-2026-038", + "fingerprint": "semantic:tempo-relay/use-canonical-idempotency-key", + "first_seen": "2026-08-08T19:52:20.848585Z" + } + ] +} diff --git a/ledger/cursor.json b/ledger/cursor.json index 9ecc95c..49b2a5b 100644 --- a/ledger/cursor.json +++ b/ledger/cursor.json @@ -1,3 +1,3 @@ { - "merged_at": "2026-08-08T14:51:31.813504Z" + "merged_at": "2026-08-08T15:44:57Z" } diff --git a/ledger/wevm-mppx-774.json b/ledger/wevm-mppx-774.json new file mode 100644 index 0000000..346925b --- /dev/null +++ b/ledger/wevm-mppx-774.json @@ -0,0 +1,29 @@ +{ + "id": "mppx#774", + "source": { + "repo": "wevm/mppx", + "pr": 774, + "sha": "b7ab48e38e3dd9131c05e4e2a9f72f49838a21c9" + }, + "labels": [ + "agricola:all" + ], + "decisions": [ + { + "target": "python", + "by": "brendanjryan", + "idempotency_key": "propagate:mppx#774:python", + "at": "2026-08-08T18:12:51Z", + "decision": "skip", + "reason": "The Python SDK has no Tempo MPP relay adapter or relay idempotency-key behavior to update." + }, + { + "target": "rust", + "by": "brendanjryan", + "idempotency_key": "propagate:mppx#774:rust", + "at": "2026-08-08T18:12:51Z", + "decision": "skip", + "reason": "The canonical Tempo relay idempotency-prefix change does not apply because this SDK has no corresponding relay API or behavior." + } + ] +}