-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Nothing stops the inert
ADDRESS_REGISTRY_ROOT == address(0)build being frozen into a permanent releaseauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:mediumAudit severity: MEDIUMAudit severity: MEDIUMStatus: Open.#85 In rainlanguage/rain.deploy;freezehas no release-tag monotonicity guard, so a mistypedsol-v*tag writes an out-of-order record the append-only rule then makes permanentauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:mediumAudit severity: MEDIUMAudit severity: MEDIUMStatus: Open.#84 In rainlanguage/rain.deploy;releasedSuites() is hand-written glue over per-contract generated libs, and the doc beside it says adding a contract touches nothing else
auditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:lowAudit severity: LOWAudit severity: LOWStatus: Open.#83 In rainlanguage/rain.deploy;artifactPath is a hand-written string nothing resolves, and half of it is load bearing for the shape test
auditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:infoAudit severity: INFOAudit severity: INFOStatus: Open.#82 In rainlanguage/rain.deploy;The record root is spelled three times, and a walk of the wrong root makes every record-anchored assertion pass with no subject
auditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:lowAudit severity: LOWAudit severity: LOWStatus: Open.#81 In rainlanguage/rain.deploy;Build & Development commands omit the dependency install step, so the documented first command fails on a fresh checkout
auditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:lowAudit severity: LOWAudit severity: LOWStatus: Open.#80 In rainlanguage/rain.deploy;README describes a working address registry without stating that
ADDRESS_REGISTRY_ROOTisaddress(0), so the deployed registry can never answer a readauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:mediumAudit severity: MEDIUMAudit severity: MEDIUMStatus: Open.#79 In rainlanguage/rain.deploy;solc warning 2018:
candidateContractNamedeclaredviewwhen it can bepureauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:lowAudit severity: LOWAudit severity: LOWStatus: Open.#78 In rainlanguage/rain.deploy;Chain-anchored deploy verification only ever runs on push — no scheduled drift sweep
auditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:mediumAudit severity: MEDIUMAudit severity: MEDIUMStatus: Open.#77 In rainlanguage/rain.deploy;Mutable storage in the deployable mocks is not
sFooauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:lowAudit severity: LOWAudit severity: LOWStatus: Open.#76 In rainlanguage/rain.deploy;ExampleDeploySuitesdocumentsAddressRegistryas the only concrete in the repo, which is no longer trueauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:lowAudit severity: LOWAudit severity: LOWStatus: Open.#75 In rainlanguage/rain.deploy;Two test comments describe a suite key
0_0_2that no fixture declaresauditAudit findingAudit findingpass1Audit pass 1 (whole-repo, 2026-08-15)Audit pass 1 (whole-repo, 2026-08-15)severity:infoAudit severity: INFOAudit severity: INFOStatus: Open.#74 In rainlanguage/rain.deploy;