1. Rubin Protocol Audits Go Path Normalization Gap Against Rust Datadir Contract
A security review has flagged a bounded normalization gap in the Rubin Protocol's Go implementation. The issue centers on `--datadir` path handling: Go operators supply datadir paths that are used to derive chainstate and blockstore filesystem paths, but these paths are not lexically normalized before derivation. The e...