B-7 · Medium

planarian @ a924e09 · Spec v4.6 · snapshot main · all versions

Token expiry, leases and cooldowns use wall-clock time; moving it back extends approvals; unauthenticated NTP lets a network attacker do it

Breaks	Status	Mitigation	Closes in
Correct (I8 expiry)	Closed (89eb2b4)	`CLOCK_BOOTTIME` for tokens, leases and deadlines; per-process anchored wall clock for the rest; NTS recommended	A

The guarantees it narrows