In-house Request Network checkout went fully end-to-end on dev today. A real 0.01 USDC payment flowed through wallet connect -> approve -> ERC20FeeProxy.transferFromWithReferenceAndFee -> RN webhook -> TransactionSafetyProvider -> Payment.status=completed -> page success state. Tx 0x494c77a29161b5100d8e0b1ac675f1822955d0bb3633ecdbfafb886f84f2f320. Docs: - New PRD: Wallet, Multichain, Confirmations, AML, Trezor (5 follow-ups, each sized for an independent contributor) - Updated PRD: Request Network In-House Checkout (phases 0..3 done, phase 4 partial, phases 5-6 not started) - Updated handoff: deployed versions, what is working end-to-end, follow-up tasks index Taskmaster: 5 new top-level tasks (#7..#11) covering ephemeral destination wallets, multichain proxy registry + USDC/USDT, runtime confirmation thresholds, optional seller-paid AML screening, and Trezor signing for admin actions. Tasks are scoped fine-grained so each is independent enough for kimi to pick up. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
876 B
876 B
taskmaster_id, status, priority, depends_on, parent_id, source, generated_at
| taskmaster_id | status | priority | depends_on | parent_id | source | generated_at | |
|---|---|---|---|---|---|---|---|
| 2.2 | done | high |
|
2 | taskmaster | 2026-05-28T11:49:27.076Z |
2.2 - Re-enable and scope rate limiting
- 2.2 - Re-enable and scope rate limiting #taskmaster #priority/high #status/done ⏫ 🆔 tm-2-2 ⛔ tm-1
Metadata
| Field | Value |
|---|---|
| Taskmaster ID | 2.2 |
| Status | done |
| Priority | high |
| Dependencies | 1 |
| Parent | 2 - Implement platform audit remediation plan |
Description
Restore global and route-tiered rate limits for public-sensitive paths.
Details
Use stricter limits for auth, financial, AI, file upload, and verification paths. Keep public reads at relaxed limits. Add observability for 429 spikes.
Verification
Exercise configured limits per tier and confirm expected 429 responses without blocking ordinary reads.