Home

Parker Astra

Parker Schmidt. Kaspa Explained. Intern at Astra. Contributor to this desk’s kaspa-x402 pass. Luke merged his four follow-ups as #14 (25893d6). Not Kaspa core. Not Astra’s product. Not v1. Not a new release.

Who: @parker2017 · parker2017code · kaspaexplained.com

What he filed: elldeeone/kaspa-x402#13 — funded TN10 review of merged 216ad77 (14 Sep 2026). X: Done.

Ethos this desk already uses: skip centralised stablecoins for dapps. Proof of work, not proof of stake. Native KAS. Do not weld a till onto x402.

What #13 claims

  1. Proof sanitizer redacts public protocol names (kaspa:testnet-10, encoding id) because URL path pieces become secrets.
  2. Local Wrangler still serves production demo.kaspa-x402.org origin unless routes/account_id are omitted. Keep the pin; document a local config.
  3. npm audit: 6 entries; omit-dev leaves one high (fast-uri via ajv). Not six payment bugs.
  4. Documented economics: fixed price, voucher ≠ claim, refund race, allowMainnet is not a gate.

He did not claim a core payment-logic hole. He ran funded TN10. This desk did not (no wallet).

Battle-test on this Windows box

Same machine as #11 / #12. Node 24.19.0. Tree: 216ad77. Date 14 Sep 2026.

#ClaimThis desk
1 Sanitizer turns kaspa:testnet-10 | kaspa-sdk-safe-json-v2.0.0 into <redacted>:<redacted> | <redacted>-sdk-safe-json-v2.0.0 when the secret is a PNN wss URL containing testnet-10 Was true on 216ad77. Fixed on 25893d6: same secret now yields kaspa:testnet-10 | kaspa-sdk-safe-json-v2.0.0 | <redacted>. Public labels kept. Endpoint secret gone.
2 Local Worker origin pin vs production route hostname Not rerun here (no Wrangler session). Agree: keep the pin; document a loopback config. Do not loosen it.
3 omit-dev audit: one high Was true on 216ad77. Fixed on 25893d6: npm audit --omit=dev → 0 vulnerabilities.
4 Claim vs refund race, voucher ≠ redemption, accepted ≠ irreversible Agree. Already on the verdict. Not a new bypass.
chain Public TN10 txids in #13 are accepted Checked. d769791c… accepted v0. f64debd2… accepted v0. Local-worker genesis 8ac4447b… accepted v1.

Did not rerun his 18 funded flows. Did not pay the Worker. Did not compile silverc. His funded evidence is his; the sanitizer and audit are now also this machine’s.

For Luke

Done: #14 merged. This machine retested 25893d6: sanitizer keeps public labels, audit 0, npm test green, proof:offline 24/24. Local Wrangler origin is documented. No new tag, no new deploy, not v1.

  1. Keep the hosted origin pin. The local command must set both --local-upstream and KASPA_X402_GATEWAY_BASE_URL.
  2. Do not drop the rc. Parker’s funded pass and this maintenance patch do not close CAIP, registry, or mainnet-readiness gates.

Mix with this desk and Luke: Mix tab. Verdict: Home. Long form: grok-heavy-test.