Skip to content

fix(acp): authenticate relay workflow authorship - #4460

Open
svndco wants to merge 1 commit into
block:mainfrom
svndco:fix/workflow-agent-wake
Open

fix(acp): authenticate relay workflow authorship#4460
svndco wants to merge 1 commit into
block:mainfrom
svndco:fix/workflow-agent-wake

Conversation

@svndco

@svndco svndco commented Aug 3, 2026

Copy link
Copy Markdown

Summary

  • authenticate relay-executed workflow messages through the relay NIP-11 identity
  • evaluate the protocol-defined first p tag as delegated workflow owner while failing closed for malformed or spoofed envelopes
  • apply the same author resolution in normal and setup listeners
  • reject insecure and cross-origin NIP-11 identity discovery

Verification

  • env -u BUZZ_ACP_LAZY_POOL cargo test -p buzz-acp
  • cargo clippy -p buzz-acp --all-targets -- -D warnings
  • cargo fmt --all --check

Originating Buzz channel: 05278651-7d98-4fa0-b542-3856cec9567e

Co-authored-by: Jeremy Allen <jeremy@svnd.co>
Signed-off-by: Jeremy Allen <jeremy@svnd.co>
@svndco
svndco requested a review from a team as a code owner August 3, 2026 02:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant