3 Commits

Author	SHA1	Message	Date
svatantrya	638f00bf0c	docs(deploy): align docs with contrib script fixes ... - 07_deployment_and_ops.md: update zmqpubhashblock note, clarify certbot --nginx, update Nginx checklist items referencing the install script - 09_references_and_links.md: remove 'hardcoded xpub' from install script row	2026-07-16 19:49:20 -04:00
svatantrya	df8effcc60	refactor: remove bal-pusher-enhanced and update docs/env ... - Remove src/bin/bal-pusher-enhanced.rs (synchronous pusher variant) - Remove bal-pusher.env and bal-pusher.sh from git tracking (now in .gitignore) - Update all documentation to remove references to bal-pusher-enhanced: * 01_project_overview.md * 02_glossary_and_bitcoin_domain.md * 03_architecture_and_data_flow.md * 04_modules_detail.md * 05_api_reference.md (remove rawblock ZMQ section, update references) * 08_security_audit.md (remove references to bal-pusher-enhanced in DoS and ZMQ sections) * 09_references_and_links.md - Build verified: cargo check passes for bal-pusher and bal-server binaries	2026-07-16 14:32:59 -04:00
svatantrya	69d877a360	docs: add comprehensive knowledge base and security audit ... - Add docs/INDEX.md with navigable index and quick reference guides - Add 9 knowledge base files covering project overview, Bitcoin domain, architecture, modules, API reference, database schema, deployment/security - Update AGENTS.md with knowledge base reference and update policy - Add tests/sql_injection_tests.rs with regression tests for SQL injection - Fix SQL injection vulnerabilities in bal-pusher.rs: * Replace string-formatted UPDATE IN with loop + parameterized queries * Replace string-formatted UPDATE push_err with parameterized query * Add chain name validation in calculate_stats to prevent env var tampering - Update .gitignore to exclude bal-pusher.env and bal-pusher.sh	2026-07-16 14:11:18 -04:00