Merge main into tlock input validation

Author: karagozemin

.github/workflows/bindings-check.yml

@@ -5,6 +5,11 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  # Los cuatro workflows solo leen el repo: clonan, instalan y corren
+  # tests. Ninguno hace push, ni comenta, ni publica, ni toca secrets.
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/contract.yml

@@ -5,6 +5,11 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  # Los cuatro workflows solo leen el repo: clonan, instalan y corren
+  # tests. Ninguno hace push, ni comenta, ni publica, ni toca secrets.
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/coverage.yml

@@ -5,6 +5,11 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  # Los cuatro workflows solo leen el repo: clonan, instalan y corren
+  # tests. Ninguno hace push, ni comenta, ni publica, ni toca secrets.
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/docs-links.yml

@@ -12,6 +12,11 @@ on:
       - 'scripts/check-links.js'
       - '.github/workflows/docs-links.yml'
 
+permissions:
+  # Los cuatro workflows solo leen el repo: clonan, instalan y corren
+  # tests. Ninguno hace push, ni comenta, ni publica, ni toca secrets.
+  contents: read
+
 jobs:
   check-links:
     runs-on: ubuntu-latest

ARCHITECTURE.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa — Architecture
 
 High-level map of the monorepo: components, trust boundaries, round lifecycle, and where each proof runs. For crypto and settlement detail see [docs/TECH_DESIGN.md](./docs/TECH_DESIGN.md).

README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 > [!NOTE]
 > This repository is the ecosystem contribution workspace for Sub Rosa,
 > created specifically for participation in the Stellar Wave program. The main

TASKS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Task List: Issue #114 Receipt Schema Version Rejection
 
 - [ ] Phase 1: Locate offline receipt verifier and inspect current error handling

apps/web/package.json

@@ -8,14 +8,15 @@
     "dev": "vite",
     "build": "vite build",
     "preview": "vite preview",
-    "test": "node --import tsx --test src/demo/trace-health-check.test.ts src/lib/config.test.ts src/dashboard/fixture-health-check.test.ts src/lib/round-status.test.ts src/components/dashboard/RoundStatusCard.test.tsx",
+    "test": "node --import tsx --test src/demo/trace-health-check.test.ts src/lib/config.test.ts src/lib/chain.test.ts src/dashboard/fixture-health-check.test.ts src/lib/round-status.test.ts src/components/dashboard/RoundStatusCard.test.tsx src/hooks/useDashboardData.test.ts",
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
     "@stellar/freighter-api": "^6.0.1",
     "@stellar/stellar-sdk": "^15.1.0",
     "@sub-rosa/agent": "workspace:*",
     "@sub-rosa/sdk": "workspace:*",
+    "@sub-rosa/time": "workspace:*",
     "@sub-rosa/tlock": "workspace:*",
     "buffer": "^6.0.3",
     "crypto-browserify": "^3.12.1",

apps/web/src/App.tsx

@@ -1,3 +1,4 @@
+// Copyright (c) 2026 Sub Rosa contributors
 import { useEffect, useState } from "react";
 import { getUseCase } from "./config/useCases";
 import type { UseCaseId } from "./config/useCases";
@@ -8,6 +9,7 @@ import { DashboardPage } from "./pages/DashboardPage";
 import { DemoPage } from "./pages/DemoPage";
 import { LandingPage } from "./pages/LandingPage";
 import { ToastProvider } from "./ui/Toast";
+import { TimeProvider } from "./lib/time";
 
 export default function App() {
   const [route, setRoute] = useState<RouteState>(routeFromHash);
@@ -26,7 +28,8 @@ export default function App() {
   const active = getUseCase(route.useCase);
 
   return (
-    <ToastProvider>
+    <TimeProvider>
+      <ToastProvider>
       {route.page === "landing" ? (
         <LandingPage
           onDemo={() => navigate("demo", "auction")}
@@ -48,6 +51,7 @@ export default function App() {
           )}
         </>
       )}
-    </ToastProvider>
+      </ToastProvider>
+    </TimeProvider>
   );
 }

apps/web/src/components/AgentPanels.tsx

@@ -1,3 +1,4 @@
+// Copyright (c) 2026 Sub Rosa contributors
 import type { DemoTrace } from "../demo/trace";
 import { shortAddr, shortHash, usdc } from "../lib/format";