Skip to content

Feat/UI live ready image#288

Merged
Bug-Hunty merged 5 commits intomainfrom
feat/ui-live-ready-image
Apr 13, 2026
Merged

Feat/UI live ready image#288
Bug-Hunty merged 5 commits intomainfrom
feat/ui-live-ready-image

Conversation

@rigocrypto
Copy link
Copy Markdown
Owner

No description provided.

GitHub Copilot added 4 commits April 13, 2026 11:27
Multi-hop routes were unconditionally rejected in validateRoute().
Add allowMultihop config field (default false) gated by
SOLANA_ALLOW_MULTIHOP env var so multi-leg Jupiter routes can be
tested without code changes.

- config.ts: add allowMultihop to interface + parse
- Executor.ts: gate multi-hop rejection on config flag, add to startup log
- env.example: document SOLANA_ALLOW_MULTIHOP
- venueRisk.ts: risk registry with per-venue profiles (Raydium CLMM,
  Whirlpool, Meteora DLMM) + high-risk default for unknown venues
- riskPolicy.ts: evaluateVenueRisk() returning deny/canary/penalize/allow
- config.ts: RiskPolicyConfig parsed from SOLANA_RISK_* env vars
- Executor.ts: risk gate after AMM check, startup log includes policy
- env.example: document SOLANA_RISK_DENY_TIERS, CANARY_TIERS, etc.

All policy thresholds env-configurable. No changes to allowlist,
multi-hop, fee, or scanner logic.
- scripts/railway-deploy-checklist.md: one-pass deploy verification
- venueRisk.ts: add Drift Protocol (critical) —  governance
  compromise 2026-04-01, DPRK-linked multisig social engineering
New incidentRegistry.ts with:
- VenueIncident type (severity, incidentType, status, policyOverride)
- Drift governance compromise entry (critical, contained, deny override)
- getActiveIncident() + isWithinCooldown() lookups

riskPolicy.ts evaluation order:
  1. Incident cooldown (SOLANA_RISK_INCIDENT_COOLDOWN_DAYS)
  2. Active incident policyOverride (deny/canary)
  3. Baseline tier policy (deny/canary/penalize/allow)

New env vars:
- SOLANA_RISK_INCIDENT_COOLDOWN_DAYS (default 30)
- SOLANA_RISK_DENY_INCIDENT_TYPES (default governance_compromise)

Startup log now emits riskIncidentCooldownDays + riskDenyIncidentTypes.
Risk rejection log includes incidentId for traceability.
@railway-app
Copy link
Copy Markdown

railway-app bot commented Apr 13, 2026

🚅 Deployed to the arbimind-pr-288 environment in ArbiMind

3 services not affected by this PR
  • Postgres
  • arbimind
  • backend

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 13, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
arbimind Ready Ready Preview Apr 13, 2026 4:23pm

@Bug-Hunty Bug-Hunty merged commit 0eeb00e into main Apr 13, 2026
12 checks passed
@Bug-Hunty Bug-Hunty deleted the feat/ui-live-ready-image branch April 13, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants