0b83749aa1
queryNostr() previously returned every event the community data relays sent back, unverified. A malicious or buggy relay could inject forged coach profiles / listings that would flow straight into agents as trusted ground truth. Now each event is signature-verified with nostr-tools verifyEvent() before being returned; anything that fails (or throws) is dropped. Mirrors the client-side onlyVerified discipline already applied in the trust-score hooks. Co-authored-by: shakespeare.diy <assistant@shakespeare.diy> |
||
|---|---|---|
| .. | ||
| .env.example | ||
| bootstrap.sh | ||
| DEPLOY.md | ||
| package.cvm.json | ||
| server.ts | ||
| skatespots-cvm.service | ||