Commits

soak test + the bug it caught: nonce tags for intent uniqueness

melvincarvalho

committed

8685db8

node UI: full OGP (per-node og:url, shared card); landing: https federation links (solidpay.<domain> convention), proxy quickstart

melvincarvalho

committed

59992e2

server: HOST env — bind loopback behind a reverse proxy so TRUST_PROXY=1 stays truthful (no direct-port XFF spoofing)

melvincarvalho

committed

171359d

security: x-forwarded-for trusted only with TRUST_PROXY=1 — on a direct-port deploy the header is attacker-controlled and throttles must key on the socket address

melvincarvalho

committed

ea59087

currency registry — every currency is a URI

melvincarvalho

committed

f1f6503

ui: inline row editors replace prompt() dialogs (adjust limit / record repayment) — keyboard: Enter submits, Escape cancels

melvincarvalho

committed

dffc218

federation first light + live Bitcoin anchoring

melvincarvalho

committed

5b077b8

anchor: pin blocktrails@0.0.11 (latest published)

melvincarvalho

committed

2913fd9

anchoring: Blocktrails settlement-assurance module — tools/anchor.js marks the audited chain tip onto a Bitcoin testnet4 trail (blocktrails reference CLI via npx; key env-only); GET /api/anchors se…

melvincarvalho

committed

79bc142

harden v1: audit duplicates, custody spelling, tx throttle, prompt-free polling

melvincarvalho

committed

3a92f7e

v1: signed transitions — every transition is a nostr event

melvincarvalho

committed

1a110d6

roadmap: signature draft reference is spec §9

melvincarvalho

committed

4cbd3c2

landing: Try-the-testnet CTA (melvin.me:3480); fix stale roadmap copy (nostr sign-in shipped, signature draft is spec §9); roadmap checks testnet + seed

melvincarvalho

committed

4ccb9cb

server: start under pm2 — recognize pm_exec_path as the entry (argv[1] is pm2's fork wrapper)

melvincarvalho

committed

7951c04

testnet armor: register throttle + seed script

melvincarvalho

committed

6017dec

ogp: social cards, favicons, canonical urls

melvincarvalho

committed

0e5d96a

nostr sign-in — NIP-98 verified requests, xlogin UI, did:nostr agents

melvincarvalho

committed

e600782

version 0.0.1 — protocol spec and package (matching the estate's draft convention)

melvincarvalho

committed

b869834

spec: fix numbered-step lists — absolute marker, not flex (flex fragments mixed inline content)

melvincarvalho

committed

8b187b2

spec: SolidPay Protocol 1.0 — Editor's Draft, commercial grade

melvincarvalho

committed

8d375ac

docs: canonical landing URL is jss.live/solidpay

melvincarvalho

committed

5c17f4c

SolidPay v0 — a trust-money testnet node, zero dependencies

melvincarvalho

committed

7caa9de

Commits · JavaScriptSolidServer/solidpay · GitHub

Uh oh!

Commits on Jul 29, 2026

soak test + the bug it caught: nonce tags for intent uniqueness

node UI: full OGP (per-node og:url, shared card); landing: https federation links (solidpay.<domain> convention), proxy quickstart

server: HOST env — bind loopback behind a reverse proxy so TRUST_PROXY=1 stays truthful (no direct-port XFF spoofing)

security: x-forwarded-for trusted only with TRUST_PROXY=1 — on a direct-port deploy the header is attacker-controlled and throttles must key on the socket address

currency registry — every currency is a URI

ui: inline row editors replace prompt() dialogs (adjust limit / record repayment) — keyboard: Enter submits, Escape cancels

federation first light + live Bitcoin anchoring

anchor: pin blocktrails@0.0.11 (latest published)

anchoring: Blocktrails settlement-assurance module — tools/anchor.js marks the audited chain tip onto a Bitcoin testnet4 trail (blocktrails reference CLI via npx; key env-only); GET /api/anchors se…

harden v1: audit duplicates, custody spelling, tx throttle, prompt-free polling

v1: signed transitions — every transition is a nostr event

roadmap: signature draft reference is spec §9

landing: Try-the-testnet CTA (melvin.me:3480); fix stale roadmap copy (nostr sign-in shipped, signature draft is spec §9); roadmap checks testnet + seed

server: start under pm2 — recognize pm_exec_path as the entry (argv[1] is pm2's fork wrapper)

testnet armor: register throttle + seed script

ogp: social cards, favicons, canonical urls

nostr sign-in — NIP-98 verified requests, xlogin UI, did:nostr agents

version 0.0.1 — protocol spec and package (matching the estate's draft convention)

spec: fix numbered-step lists — absolute marker, not flex (flex fragments mixed inline content)

spec: SolidPay Protocol 1.0 — Editor's Draft, commercial grade

docs: canonical landing URL is jss.live/solidpay

SolidPay v0 — a trust-money testnet node, zero dependencies

Commits · JavaScriptSolidServer/solidpay · GitHub

Uh oh!

Commits

Branch selector

User selector

Datepicker

Commit history

Commits on Jul 29, 2026