Make vote-shop debits atomic before granting rewards - #1600

Open

BenCodez wants to merge 47 commits into

security/atomic-vote-shop

Commits on Sep 7, 2026

Make vote shop debit atomic
BenCodez
committed
6b69462
Test concurrent vote shop debits
BenCodez
committed
4b12ebf
Use stable purchase locks and async persistence
BenCodez
committed
1d44c4b
Use stable purchase locks and async persistence
BenCodez
committed
70fe42f
Keep purchase locks stable across reloads
BenCodez
committed
a199326
Keep purchase locks stable across reloads
BenCodez
committed
e335aec
Address review feedback with regression coverage
BenCodez
committed
9c176fd
Address review feedback with regression coverage
BenCodez
committed
dd3a770
Address latest review feedback
BenCodez
committed
6a5cd23

Commits on Sep 8, 2026

Make concurrent debit regression deterministic
BenCodez
committed
ebfbc55
Merge remote-tracking branch 'origin/master' into security/pr-1600-local
BenCodez
committed
b8b695e
fix: make shared vote shop purchases atomic
BenCodez
committed
ca4471d
Preserve synchronous shared point updates
BenCodez
committed
38ae0d6
Preserve purchase and transfer semantics
BenCodez
committed
e07be21
Reserve shared transfer points before hooks
BenCodez
committed
c5ddb3c
Release shared transfer hooks before callbacks
BenCodez
committed
ca387d7
Close shared point mutation consistency gaps
BenCodez
committed
dc25f95
Journal shared vote shop purchases
BenCodez
committed
520aa14
Recover shared transfers and bound journal names
BenCodez
committed
4d3f404
Make shared MySQL purchases failure-safe
BenCodez
committed
8d07e5a
Harden shared MySQL point completion and recovery
BenCodez
committed
0a4913e
Close shared point settlement edge cases
BenCodez
committed
58c5d0d
Close shared point settlement edge cases
BenCodez
committed
4928b10
Preserve shared point mutation state
BenCodez
committed
bdd471b
Merge remote-tracking branch 'origin/master' into security/pr-1600-local
BenCodez
committed
e1aa435
Keep rejected transfer recovery off Bukkit
BenCodez
committed
a52a1ec

Commits on Sep 9, 2026

Reconcile caches after recovery refunds
BenCodez
committed
6fe7db7
Avoid stale shared purchase cache writes
BenCodez
committed
a2e0112
Fix shared vote shop recovery races
BenCodez
committed
1bfde24
Close shared vote shop recovery races
BenCodez
committed
a58168c
Bound shared point and purchase recovery work
BenCodez
committed
cb73334
Wait for shared point reward persistence
BenCodez
committed
f3141f2
Handle rejected shared point submissions
BenCodez
committed
35f3ac2
Keep shared shop validation off GUI lanes
BenCodez
committed
e7fb241
Recover rejected shared point operations
BenCodez
committed
b35abf4
Avoid blocking vote shop placeholder reads
BenCodez
committed
6b87b9f
Fix shared vote shop recovery and cache refresh
BenCodez
committed
87de933
Handle rejected transfer settlement and cache races
BenCodez
committed
c687cbf

Commits on Sep 10, 2026

Harden shared point settlement and callback recovery
BenCodez
committed
21ac3f9
Harden vote shop recovery paths
BenCodez
committed
c94842e
Exclude optimistic points from cache dumps
BenCodez
committed
e8e9316
Align weekly reset generation with configured period
BenCodez
committed
3c049f4
Complete atomic point transfer safeguards
BenCodez
committed
367f941
Harden shared MySQL purchase completion
BenCodez
committed
96c8504
Await durable shared point rewards
BenCodez
committed
7ed6948

Commits on Sep 11, 2026

Make shared point rewards retry safe
BenCodez
committed
adcfa27
Harden indeterminate shared point operations
BenCodez
committed
68976d5