Skip to content

web: adult mode opens for admins without a balance - #314

Merged
ralyodio merged 1 commit into
masterfrom
fix/admin-adult-mode
Nov 11, 2026
Merged

ralyodio merged 1 commit into
masterfrom
fix/admin-adult-mode

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

Admins got Adult mode needs a paid compute balance (free-tier queries cannot use it). at a 0 balance. gateGeneration now treats balance.admin === true (from Infernet's trusted balance read, InfernetProtocol/infernet-protocol#194) as paid. Attestation still required. Tests: bun test src/lib/chat/adult.test.ts 6 pass.

🤖 Generated with Claude Code

The trusted balance read now carries admin: true for unmetered admin
accounts; the gate counts that as paid. The 18+ attestation is still
required.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 914ef85 into master Nov 11, 2026
11 checks passed
@ralyodio
ralyodio deleted the fix/admin-adult-mode branch November 11, 2026 09:03
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

14 finding(s)

HIGH/CRITICAL: 1 | MEDIUM: 9 | LOW: 4

Severity Rule Location
HIGH js-ssrf-outbound-request apps/web/public/sw.js:24
MEDIUM js-unescaped-html-sink apps/web/src/app/blog/[slug]/page.tsx:53
MEDIUM js-unescaped-html-sink apps/web/src/app/layout.tsx:109
MEDIUM sql-template-interpolation apps/web/src/lib/chat/push.ts:476
MEDIUM sh-remote-script-execution scripts/dev-setup.sh:25
MEDIUM sh-eval-expansion scripts/dev-setup.sh:35
MEDIUM sh-remote-script-execution scripts/install.sh:185
MEDIUM sh-remote-script-execution scripts/install.sh:210
MEDIUM sh-remote-script-execution scripts/install.sh:408
MEDIUM sh-remote-script-execution scripts/install.sh:450
LOW py-ssrf-outbound-request examples/business-strategist-agent/chat.py:37
LOW py-ssrf-outbound-request examples/business-strategist-agent/train.py:54
LOW secret-generic-credential node/crates/c0mpute-core/src/webhook.rs:1171
LOW py-path-traversal node/crates/c0mpute-core/tests/fixtures/fake-infernet-text:29

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant