Release v0.3.7 — Security hardening + legacy separation#55

Merged

ApiliumDevTeam merged 11 commits intodevfrom

fix/axum-path-params

Mar 7, 2026

Commits on Mar 7, 2026

fix: use axum 0.8 path parameter syntax {param} instead of :param
ApiliumDevTeam
committed
fix: remaining axum path params + jsonwebtoken crypto provider
ApiliumDevTeam
committed
fix: resolve 6 audit findings for clean release
ApiliumDevTeam
committed
security: upgrade rusqlite 0.25 → 0.32 (CVE-2022-35737) + audit config
ApiliumDevTeam
committed
refactor: decouple product workspace from legacy Holochain crates

ApiliumDevTeam
and
claude
committed
security: harden Córtex API server against OWASP top-10 vectors
ApiliumDevTeam
committed
security: real Ed25519 signatures and TLS verification in aingle_minimal
ApiliumDevTeam
committed
security: constant-time comparisons for ZK proof verification
ApiliumDevTeam
committed
security: gas metering and input validation in smart contracts runtime
ApiliumDevTeam
committed
fix: doc-test imports and hanging test in hope_agents and aingle_viz
ApiliumDevTeam
committed
chore: bump all product crate versions to 0.3.7
ApiliumDevTeam
committed