-
Notifications
You must be signed in to change notification settings - Fork 16
typo fix, and added documentation steps #497
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Signed-off-by: Damien <161828179+Dam-CZ@users.noreply.github.com>
Codecov Report✅ All modified and coverable lines are covered by tests. 🚀 New features to boost your workflow:
|
WalkthroughEdits to a single engineering decision record update wording, fix typos, and add a new transparency requirement: uploading redacted invoices and agreements to IPFS and linking them in transaction metadata within the acceptance process. Changes
Sequence Diagram(s)Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Possibly related PRs
Suggested reviewers
Poem
Pre-merge checks and finishing touches✅ Passed checks (3 passed)
✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 1
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (1)
engineering-decision-records/016-Treasury-management-acceptance-process.md
(2 hunks)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)
- GitHub Check: Build aarch64/macos
- GitHub Check: Build x86_64/windows
- GitHub Check: Benches
- GitHub Check: Analyze (actions)
- GitHub Check: Analyze (rust)
- To complete the transparency aspect of the process, the scope contributor will: Upload a redacted invoice to IPFS, Upload a redacted agreement to IPFS and link the invoice and the agreement in the transaction's metadata | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Flag the IPFS upload step before we ship it
Mate, asking every contributor to pin even a “redacted” invoice and agreement on IPFS is a spicy move. IPFS is a public, immutable hangout; once those docs are out there they can’t be reeled back in, and it’s painfully easy to miss a name, address, or contract term during redaction. That’s a straight shot into GDPR/Swiss privacy trouble and could splash personal or commercial data across the multiverse faster than a Mass Effect relay. Please pull this requirement until we’ve had legal/compliance sign-off or swap in a storage option that guarantees access control and revocation.
🤖 Prompt for AI Agents
engineering-decision-records/016-Treasury-management-acceptance-process.md lines
34-35: the ADR currently requires contributors to upload redacted invoices and
agreements to IPFS which is a public immutable store and poses GDPR/privacy and
revocation risks; remove or flag this IPFS upload requirement and replace it
with a temporary controlled option and governance steps: change the text to
suspend the IPFS step until legal/compliance sign-off is obtained, or mandate an
access-controlled storage alternative (e.g., private S3 with encryption and
revocation or a gated IPFS pinning service with ACLs), add a requirement for a
documented privacy review and explicit redaction checklist before any public
publication, and update the ADR to record the pending legal approval and the
acceptance criteria needed to enable IPFS uploads in the future.
Signed-off-by: Damien 161828179+Dam-CZ@users.noreply.github.com
Summary by CodeRabbit