mirror of
https://github.com/pezkuwichain/pwap.git
synced 2026-07-26 21:15:40 +00:00
cd9bc577ae
Runs the exact freeze trigger from migration 20260725040000 against a real Postgres engine (pglite) and proves: anon UPDATE of buyer_id/crypto_amount (the escrow-redirect attack) is BLOCKED; status/proof-only stays allowed; service_role is exempt; the attacker redirect never persists. 5/5 pass. Upgrades the custody-critical trigger from code-reviewed to proven-by-execution. RLS/REVOKE role-enforcement still needs a multi-role staging Postgres (pglite is single-user).