Bifrost

Heimdall

Docs: origin guard, skip button, identity checks before spend, body cap, difficulty range

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

8ce0e68fe2

2026-11-11 11:17:24 +00:00

Heimdall

Registration form: text browsers without fetch metadata pass when sessionless; keep a challenge only while live

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

7bd26e9239

2026-11-11 11:07:20 +00:00

Heimdall

Registration form: origin guard, skip button, identity checks before spending, caps and error links

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

d47f1d5e9d

2026-11-11 10:46:14 +00:00

Heimdall

Docs: sign-up form, no-JS time-lock fallback and its tradeoff; steward keeps a verified address for sign-in recovery

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

185cfcd0e7

2026-11-11 10:31:41 +00:00

Heimdall

Registration: server-rendered sign-up form with script solver and time-lock fallback

GET /auth/bifrost/register renders the form (notice in full, unchecked consent box);
POST /auth/bifrost/register/form and the JSON endpoint share NativeRegistration.
Challenge payload gains issued-at; waited path needs FallbackWaitSeconds and a
stricter per-address FallbackPermits budget.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

9c4ab5646a

2026-11-11 10:26:24 +00:00

Registration: sign-up form with proof-of-work and a no-JS time-lock fallback #56

2026-11-11