platform base URLs via `internal/utils/platformEndpoints.go`. Labels: `renovate-operator.mogenius.com/ `.
## Invariants
Non-obvious rules that silently break security or state if skipped:
- A new `Policy`/`AccessDefaults` field that gates behavior must be spelled
6263mo agoReviewMountCreate a free account to mount
Server Components when applicable)
- **Accessibility-first** design with full keyboard and screen reader support
## Security Best Practices
*Combined from: Next.js 15, shadcn/ui*
1. **Always validate Server Actions input** with
62415mo agoReviewMountCreate a free account to mount
Change` (major), `Enhancement or New Feature` (minor), `Under the Hood` (patch), `Bug Fix` (patch), `Security` (patch). See `CONTRIBUTING.md` for full contributing guidelines.
## Testing
- `MockFastMCP` in `tests/conftest.py` captures registered tools
6178mo agoReviewMountCreate a free account to mount
About Porto
Porto is a Next-Generation Account Stack for Ethereum that provides a secure, scalable, and user-friendly account system. It's built as a TypeScript monorepo with multiple
61616mo agoReviewMountCreate a free account to mount
cmd.py`), with anti-sybil slots released in a crash-safe `finally`.
- `collect.py` is the security core — **commit-reveal** (`commit_hash = sha256(diff base..HEAD)`)
defeats the diff-copy attack. `antisybil.py
6089mo agoReviewMountCreate a free account to mount
from various sources, managing Coordinated Vulnerability Disclosure (CVD), and providing a collaborative space for security advisories. It operates with a modular feeder system that imports vulnerabilities from 30+ sources including
6027mo agoReviewMountCreate a free account to mount
test/` as `*-test.ts`. The parser, command compiler, and search compiler are the most security-sensitive areas - add hostile/malformed-input cases there.
- Seeded fuzzing: `test/parser-fuzz-test.ts` generates server responses together with the structure
58213mo agoReviewMountCreate a free account to mount
must be the default (active) tap, never `ListenOnly`.
`ListenOnly` taps are disabled by macOS secure input mode. Secure input activates whenever a password field is focused, when iTerm's "Secure
5807mo agoReviewMountCreate a free account to mount
A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.
Where does it go?
At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.
What should it contain?
Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.
CLAUDE.md or AGENTS.md?
Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.