Issues

fix(config): z.coerce.boolean() parses "false" and "0" as true, so OUTBOX_DISPATCHER_ENABLED and EMAIL_DELIVERABILITY_ENABLED cannot be disabled

RevoraOrg/Revora-Backend#1305 · opened

on Oct 18, 2026

3

fix(distributions): a failed payout batch in transactional mode is not reported, so distribute() returns success for a partial run

RevoraOrg/Revora-Backend#1304 · opened

on Oct 18, 2026

4

fix(distributions): resuming a partial run recomputes shares from fresh balances, so the sum of payouts no longer equals the run total

RevoraOrg/Revora-Backend#1303 · opened

on Oct 18, 2026

4

fix(payout-drift): detector runs without a StellarTransactionVerifier, so under/overfunded drift is never detected, and its math is float-based

RevoraOrg/Revora-Backend#1302 · opened

on Oct 18, 2026

3

security(admin): signed audit-log CSV export does not escape fields and is open to CSV/formula injection

RevoraOrg/Revora-Backend#1301 · opened

on Oct 18, 2026

3

security(scim): SCIM deprovisioning (DELETE / active=false) is only an in-memory Set and never blocks login or revokes sessions

RevoraOrg/Revora-Backend#1300 · opened

on Oct 18, 2026

3

fix(errors): malformed JSON, oversized bodies and pg input/constraint errors are all returned as 500 INTERNAL_ERROR

RevoraOrg/Revora-Backend#1299 · opened

on Oct 18, 2026

3

fix(worker): PayoutDriftDetector starts unconditionally in every role and twice in batch/all, and the first instance is never stopped

RevoraOrg/Revora-Backend#1298 · opened

on Oct 18, 2026

3

feat(worker): DistributionScheduler is never started, so approved revenue reports and scheduled distributions are never executed

RevoraOrg/Revora-Backend#1297 · opened

on Oct 18, 2026

3

feat(distributions): wire DistributionEngine and mount the distributions and payouts routers in createApp

RevoraOrg/Revora-Backend#1296 · opened

on Oct 18, 2026

3

security(offerings): /offerings/validation-matrix authenticates callers from spoofable x-user-id/x-user-role headers

RevoraOrg/Revora-Backend#1295 · opened

on Oct 18, 2026

4

fix(auth): login does not normalise email like register does, and its timing reveals whether an account exists

RevoraOrg/Revora-Backend#1294 · opened

on Oct 18, 2026

3

security(password-reset): resetPassword skips strength validation and leaves existing sessions and other reset tokens valid

RevoraOrg/Revora-Backend#1293 · opened

on Oct 18, 2026

3

security(auth): refresh rotation re-issues the role from the old token payload, so a demoted or deprovisioned user keeps privileges indefinitely

RevoraOrg/Revora-Backend#1292 · opened

on Oct 18, 2026

3

fix(aml): AMLService is a singleton built with currentUserId 'system', so rule edits and alert dismissals are audited as "system"

RevoraOrg/Revora-Backend#1291 · opened

on Oct 18, 2026

4

security(sanctions): investment screening uses only exact/substring matching, so punctuation, word order and transliteration evade it

RevoraOrg/Revora-Backend#1290 · opened

on Oct 18, 2026

3

fix(aml): dual-control-approved tenant sanctions threshold is never read; RuleEvaluator always falls back to the rule or default 0.85

RevoraOrg/Revora-Backend#1289 · opened

on Oct 18, 2026

3

fix(aml): investments router builds InvestmentService without AMLService, so transaction monitoring never runs on investments

RevoraOrg/Revora-Backend#1288 · opened

on Oct 18, 2026

2

fix(investments): POST /investments turns missing fields into the string "undefined", and the amount check accepts "100abc"

RevoraOrg/Revora-Backend#1287 · opened

on Oct 18, 2026

3

fix(investments): KYC-tier concentration cap is checked before insert without a lock, so concurrent investments exceed the cap

RevoraOrg/Revora-Backend#1286 · opened

on Oct 18, 2026

3

fix(security-monitoring): audit endpoints accept an unbounded limit, and an invalid since date returns 500 instead of 400

RevoraOrg/Revora-Backend#1285 · opened

on Oct 18, 2026

3

fix(vaults): milestone validation writes the event, status and domain event non-atomically and lets concurrent verifiers double-validate

RevoraOrg/Revora-Backend#1284 · opened

on Oct 18, 2026

4

security(tenant-settings): dual-control approve is not bound to a request id, so a proposer can swap the proposal after review

RevoraOrg/Revora-Backend#1283 · opened

on Oct 18, 2026

3

perf(payouts): GET /api/investments/payouts loads every payout for the investor and filters, sorts and paginates in memory

RevoraOrg/Revora-Backend#1282 · opened

on Oct 18, 2026

3

refactor(distributions): carry revenue amounts as decimal strings end to end instead of JS numbers parsed with Number()

RevoraOrg/Revora-Backend#1281 · opened

on Oct 18, 2026

4

Navigation Menu

Repository navigation

Issues

fix(config): z.coerce.boolean() parses "false" and "0" as true, so OUTBOX_DISPATCHER_ENABLED and EMAIL_DELIVERABILITY_ENABLED cannot be disabled

fix(distributions): a failed payout batch in transactional mode is not reported, so distribute() returns success for a partial run

fix(distributions): resuming a partial run recomputes shares from fresh balances, so the sum of payouts no longer equals the run total

fix(payout-drift): detector runs without a StellarTransactionVerifier, so under/overfunded drift is never detected, and its math is float-based

security(admin): signed audit-log CSV export does not escape fields and is open to CSV/formula injection

security(scim): SCIM deprovisioning (DELETE / active=false) is only an in-memory Set and never blocks login or revokes sessions

fix(errors): malformed JSON, oversized bodies and pg input/constraint errors are all returned as 500 INTERNAL_ERROR

fix(worker): PayoutDriftDetector starts unconditionally in every role and twice in batch/all, and the first instance is never stopped

feat(worker): DistributionScheduler is never started, so approved revenue reports and scheduled distributions are never executed

feat(distributions): wire DistributionEngine and mount the distributions and payouts routers in createApp

security(offerings): /offerings/validation-matrix authenticates callers from spoofable x-user-id/x-user-role headers

fix(auth): login does not normalise email like register does, and its timing reveals whether an account exists

security(password-reset): resetPassword skips strength validation and leaves existing sessions and other reset tokens valid

security(auth): refresh rotation re-issues the role from the old token payload, so a demoted or deprovisioned user keeps privileges indefinitely

fix(aml): AMLService is a singleton built with currentUserId 'system', so rule edits and alert dismissals are audited as "system"

security(sanctions): investment screening uses only exact/substring matching, so punctuation, word order and transliteration evade it

fix(aml): dual-control-approved tenant sanctions threshold is never read; RuleEvaluator always falls back to the rule or default 0.85

fix(aml): investments router builds InvestmentService without AMLService, so transaction monitoring never runs on investments

fix(investments): POST /investments turns missing fields into the string "undefined", and the amount check accepts "100abc"

fix(investments): KYC-tier concentration cap is checked before insert without a lock, so concurrent investments exceed the cap

fix(security-monitoring): audit endpoints accept an unbounded limit, and an invalid since date returns 500 instead of 400

fix(vaults): milestone validation writes the event, status and domain event non-atomically and lets concurrent verifiers double-validate

security(tenant-settings): dual-control approve is not bound to a request id, so a proposer can swap the proposal after review

perf(payouts): GET /api/investments/payouts loads every payout for the investor and filters, sorts and paginates in memory

refactor(distributions): carry revenue amounts as decimal strings end to end instead of JS numbers parsed with Number()