AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 21 Bitcoin

decode / bolt12-cli: add missing invreq_recurrence_cancel field.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
decode / bolt12-cli: add missing invreq_recurrence_cancel field.

We missed this. It's experimental, so no changelog needed.

Spotted-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds a missing data field, invreq_recurrence_cancel, to Core Lightning's decode command and related generated code. The field is part of the experimental BOLT12 recurring invoice request format and lets a payer signal that they want to cancel a recurring invoice. The change is mostly schema, RPC, gRPC, and test updates to expose and validate the new field. It is not a traditional security patch, but missing the field could have caused invoice-request decoding or validation to be incomplete for an experimental feature.

Recommended action

Treat as a routine feature/completeness fix. Review the offers plugin validation logic for the new warnings to ensure it correctly rejects malformed recurrence_cancel usage. No urgent security action is indicated.

Security signals we found

01

Missing protocol field added to experimental BOLT12 decode path

02

New validation warnings for inconsistent recurrence_cancel state

03

Generated RPC/gRPC/proto bindings updated to expose the field

04

No changelog because feature is experimental

Risk score

Why this scored 21/100

Our methodology →
Potential impact 3/30
Exploitability 2/25
Stealth signal 2/15
Affected reach 4/15
Confidence 7/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.