AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

xpay: age layer before payment instead on timer

Public commit record

What the developer wrote

Authored by Lagrang3

68/100 · Adequate
xpay: age layer before payment instead on timer

We use to call askrene-age on xpay layer every 60 seconds to remove old
entries. But for payments to discard old entries it is enough to call
askrene-age before getroutes. True as long as:

age(t1) * age(t2) * ... * age(tN) = age(tN)

Reduces flakyness caused by xpay failing to call askrene-age during lightningd shutdown.

Changelog-None

Signed-off-by: Lagrang3 <lagrang3@protonmail.com>
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This change adjusts when the xpay plugin cleans up old routing data. Previously, cleanup ran on a 60-second timer, which could fail during shutdown and cause test flakiness. Now cleanup happens right before each payment is routed. The patch is a reliability improvement, not a security fix, and does not introduce obvious new attack paths.

Recommended action

No security action required. Treat as a normal reliability/refactoring change. Reviewers may want to confirm that `age_layer` is always invoked before routing and that `dev_no_age` still correctly skips aging in developer mode.

Security signals we found

01

No security-relevant keywords in commit title or message

02

Change is described as reducing test flakiness, not fixing a vulnerability

03

No input validation changes, no memory safety changes, no authentication/authorization changes

04

Removes a periodic timer and replaces it with a synchronous pre-payment call

05

No CVE, advisory, or vendor security disclosure referenced

Risk score

Why this scored 18/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.