Description
Difficulty: Expert
Type: Security
Summary
Create a security threat model covering Stellar secret handling, payment intent validation, transaction readiness, anchor metadata, diagnostics, and Soroban escrow actions.
Current Behaviour
Security assumptions may be spread across README notes, package code, and contributor expectations.
Expected Behaviour
AnchorKit should have a clear threat model identifying risks, mitigations, assumptions, and out-of-scope production behaviours.
Suggested Implementation
Document threat areas, sensitive data boundaries, unsafe logging risks, mainnet risks, testnet assumptions, contract misuse, and review requirements.
Files or Areas Likely Affected
- docs/
- README.md
- packages/stellar-kit/
- packages/anchor-utils/
- contracts/treasury-escrow/
- apps/web/
Acceptance Criteria
Additional Notes
Be explicit that AnchorKit MVP is not production custody software.
Description
Difficulty: Expert
Type: Security
Summary
Create a security threat model covering Stellar secret handling, payment intent validation, transaction readiness, anchor metadata, diagnostics, and Soroban escrow actions.
Current Behaviour
Security assumptions may be spread across README notes, package code, and contributor expectations.
Expected Behaviour
AnchorKit should have a clear threat model identifying risks, mitigations, assumptions, and out-of-scope production behaviours.
Suggested Implementation
Document threat areas, sensitive data boundaries, unsafe logging risks, mainnet risks, testnet assumptions, contract misuse, and review requirements.
Files or Areas Likely Affected
Acceptance Criteria
Additional Notes
Be explicit that AnchorKit MVP is not production custody software.