WalletPress — Python backend (FastAPI) + WordPress plugin. Wallet engine, x402 service, chain vault, hosting. CLI for wallet management. Production-grade wallet-as-a-service.
Rug Munch Media LLC
090ef1b4ea
P2-4 — vault_get requires opt-in + HITL for private key export
Previously vault_get() unconditionally decrypted and returned the
plaintext private key with no audit trail. Now:
- Default: returns only public info (no private_key field at all)
- include_private_key=True: requires HITL confirmation
- Every export logged via audit_log with explicit 'key_export' tag
- Encrypted wallet without KEK now returns encrypted form (not the
raw key) plus a clear note
Added 'key_export' to WRITE_ACTIONS so tier checks apply.
P2-6 — simulate_transaction now properly async
Was sync function that called asyncio.run() internally. Failed with
'asyncio.run() cannot be called from a running event loop' when
invoked from inside the MCP tool handler. Now native async, callers
in mcp_server.py updated to await.
P2-19 / P2-20 — Reviewed x402_verify.py and client_sdk.py
No hardcoded API keys or secrets. Both files clean.
P2-22 — Reviewed wallet_analysis.py
No hardcoded API keys. Uses public RPC endpoints only.
P2-8 — Verified license signature scheme
Originally tagged 'JWT not validated' but the implementation uses
HMAC-SHA256 with hmac.compare_digest (timing-safe). Not JWT but
the verification is correct. Falls back to WP_ADMIN_KEY for
backward compat (intentional design).
Refs: AUDIT.md P2-4, P2-6, P2-8, P2-19, P2-20, P2-22
|
||
|---|---|---|
| backend | ||
| cli | ||
| installers | ||
| wp-plugin | ||
| .gitignore | ||
| .pre-commit-config.yaml | ||
| about.html | ||
| ADDRESS_GENERATION.md | ||
| ARCHITECTURE.md | ||
| AUDIT.md | ||
| BUILDER.md | ||
| buy.html | ||
| contact.html | ||
| CONTRIBUTING.md | ||
| docs.html | ||
| features.html | ||
| index.html | ||
| logo.svg | ||
| privacy.html | ||
| PROGRESS.md | ||
| ROADMAP.md | ||
| ROADMAP_V2.md | ||
| robots.txt | ||
| SECURITY.md | ||
| sitemap.xml | ||
| STRATEGY.md | ||
| terms.html | ||
| thanks.html | ||
| verify.html | ||
| walletpress-docs.pdf | ||
| WALLETPRESS.md | ||
