[KongchangAI]
Unverified50% confidenceDecision RuleExact time

The idempotency check must be built after signature verification passes, otherwise an attacker can forge an event ID to occupy the slot in advance, or use the deduplication logic to probe the system's internal state.

1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/1008232
API
curl https://kongchang.com/api/v1/knowledge/claims/1008232
MCP
get_claim(id=1008232)