Issues · Facil-Pay/facilpay-contracts · GitHub

Labels Milestones

[CI/CD] Test output is not uploaded as a CI artifact — failures produce no downloadable log for post-mortem analysis

#394

· fati-Onchain opened

on Jun 27, 2026

[CI/CD] No automated dependency vulnerability audit in CI — `cargo audit` is not run on any pipeline trigger

#393

· fati-Onchain opened

on Jun 27, 2026

[CI/CD] Cargo registry is not cached in GitHub Actions — full dependency redownload on every CI run adds 3–5 minutes

#392

· fati-Onchain opened

on Jun 27, 2026

[Architecture] Admin address has no upgrade path — a compromised admin key permanently compromises all three contracts

#389

· fati-Onchain opened

on Jun 27, 2026

[Architecture] No shared error-code registry — payment, escrow, and refund define overlapping numeric error codes

#388

· fati-Onchain opened

on Jun 27, 2026

[Security] Multi-party escrow release votes are not deduplicated — same address can call `approve_release` multiple times

#386

· fati-Onchain opened

on Jun 27, 2026

[Security] Payment channel closure does not verify that final balances sum to the original channel deposit

#385

· fati-Onchain opened

on Jun 27, 2026

[Performance] `get_reason_code_analytics` re-sorts full refund history on every call — result should be cached per window

#382

· fati-Onchain opened

on Jun 27, 2026

[Performance] Customer refund history appends without bound — no archival, pagination, or cap mechanism

#381

· fati-Onchain opened

on Jun 27, 2026

[Test] No test verifying customer refund history returns entries in correct chronological order

#380

· fati-Onchain opened

on Jun 27, 2026

[Test] No test verifying arbitration timeout releases stake to the non-defaulting party

#378

· fati-Onchain opened

on Jun 27, 2026

[Test] No test verifying auto-refund does not trigger when a merchant override flag is active

#376

· fati-Onchain opened

on Jun 27, 2026