Fix issue #1: feat(rust): implement native Rust wallet for bounty #733

.env.example

@@ -53,3 +53,16 @@ LOG_LEVEL=INFO
 # === Security ===
 # Set to 'true' to run container as non-root user
 RUN_AS_NON_ROOT=true
+
+# === GitHub Tip Bot Configuration ===
+# Payout wallet address for bounty distributions
+TIP_BOT_WALLET=RTC1d48d848a5aa5ecf2c5f01aa5fb64837daaf2f35
+
+# Comma-separated list of admin usernames (optional)
+TIP_BOT_ADMINS=
+
+# Set to 'true' to enable dry-run mode (no actual payouts)
+TIP_BOT_DRY_RUN=false
+
+# GitHub token for API access (auto-provided in Actions)
+# GITHUB_TOKEN=

.env.miner.example

@@ -0,0 +1,3 @@
+WALLET_NAME=RTC_your_wallet_id_here
+NODE_URL=https://rustchain.org
+BLOCK_TIME=600

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Bounty Claim or Proof Submission
+    url: https://github.com/Scottcjn/rustchain-bounties/issues/new?template=bounty-proof.yml
+    about: Use rustchain-bounties for completed work, marketing proof, install reports, merged PR payout requests, and other claim evidence.
+  - name: Wallet Registration or Payout Target
+    url: https://github.com/Scottcjn/rustchain-bounties/issues/new?template=wallet-registration.yml
+    about: Register your RTC wallet or payout target in rustchain-bounties, not in Rustchain issues.
+  - name: Create a New RTC Bounty
+    url: https://github.com/Scottcjn/rustchain-bounties/issues/new?template=bounty.yml
+    about: Open new bounty definitions in rustchain-bounties.

.github/ISSUE_TEMPLATE/security-report.yml

@@ -0,0 +1,84 @@
+name: Security Report
+description: Report a security, abuse, or payout-integrity issue in RustChain
+title: "[Security] "
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ## Report a Security Issue
+        Use this form for security-sensitive bugs, abuse vectors, payout integrity problems, or consensus bypasses.
+
+        Do **not** use this form for bounty claims, wallet registration, or generic support.
+        Do **not** paste private keys, admin keys, tokens, or live secrets into this issue.
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Affected area
+      options:
+        - API / request validation
+        - Wallet / transfer / signing
+        - Miner enrollment / attestation
+        - Consensus / fleet detection
+        - Explorer / public data exposure
+        - Infrastructure / deployment
+        - Other
+    validations:
+      required: true
+
+  - type: dropdown
+    id: severity
+    attributes:
+      label: Severity
+      options:
+        - Low
+        - Medium
+        - High
+        - Critical
+    validations:
+      required: true
+
+  - type: textarea
+    id: impact
+    attributes:
+      label: Impact
+      description: What can an attacker, abusive miner, or malicious client accomplish?
+      placeholder: A malformed payload can trigger a 500 and leak internal behavior...
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction steps
+      description: Provide the smallest reproducible example you can.
+      placeholder: |
+        1. Send POST /attest/submit with ...
+        2. Observe ...
+        3. Expected ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: affected_versions
+    attributes:
+      label: Affected versions / environments
+      description: Include commit, branch, deployed node, or release if known.
+      placeholder: main at commit abc123, node 50.28.86.131, v1.0.0-miner
+
+  - type: textarea
+    id: mitigation
+    attributes:
+      label: Suggested mitigation
+      description: Optional, but useful if you already know the likely fix.
+
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Checklist
+      options:
+        - label: I did not include secrets, private keys, or unpublished credentials.
+          required: true
+        - label: This is not a bounty claim or wallet registration request.
+          required: true

.github/actions/mining-status-badge/action.yml

@@ -4,7 +4,6 @@ author: Scottcjn
 branding:
   icon: cpu
   color: blue
-
 inputs:
   wallet:
     description: RustChain wallet identifier for /api/badge/{wallet}
@@ -17,52 +16,13 @@ inputs:
     description: Shields.io badge style for the endpoint URL
     required: false
     default: flat-square
-
 runs:
   using: composite
   steps:
     - name: Update mining badge block
       shell: bash
       run: |
-        set -euo pipefail
-
-        WALLET="${{ inputs.wallet }}"
-        README="${{ inputs.readme-path }}"
-        STYLE="${{ inputs.badge-style }}"
-        BADGE_URL="https://img.shields.io/endpoint?url=https://rustchain.org/api/badge/${WALLET}&style=${STYLE}"
-        BLOCK_START="<!-- rustchain-mining-badge-start -->"
-        BLOCK_END="<!-- rustchain-mining-badge-end -->"
-        MARKDOWN="${BLOCK_START}\n![RustChain Mining Status](${BADGE_URL})${BLOCK_END}"
-
-        if [ ! -f "$README" ]; then
-          echo "README file not found: $README"
-          exit 1
-        fi
-
-        WALLET_ENV="$WALLET"
-        STYLE_ENV="$STYLE"
-        export WALLET="$WALLET_ENV"
-        export STYLE="$STYLE_ENV"
-        python3 - "$README" <<'PY'
-import sys
-from pathlib import Path
-readme = Path(sys.argv[1])
-text = readme.read_text(encoding="utf-8")
-start = "<!-- rustchain-mining-badge-start -->"
-end = "<!-- rustchain-mining-badge-end -->"
-wallet = __import__('os').environ['WALLET']
-style = __import__('os').environ.get('STYLE', 'flat-square')
-badge_url = f"https://img.shields.io/endpoint?url=https://rustchain.org/api/badge/{wallet}&style={style}"
-block = f"{start}\n![RustChain Mining Status]({badge_url}){end}"
-
-start_idx = text.find(start)
-end_idx = text.find(end)
-if start_idx != -1 and end_idx != -1 and end_idx > start_idx:
-    new = text[:start_idx] + block + text[end_idx + len(end):]
-else:
-    new = text.rstrip() + "\n\n## Mining Status\n" + block + "\n"
-
-readme.write_text(new, encoding="utf-8")
-PY
-
-        echo "Updated $README with mining badge for wallet: $WALLET"
+        export WALLET="${{ inputs.wallet }}"
+        export STYLE="${{ inputs.badge-style }}"
+        python3 "${{ github.action_path }}/update_badge.py" "${{ inputs.readme-path }}"
+        echo "Badge updated for wallet: $WALLET"

.github/actions/mining-status-badge/update_badge.py

@@ -0,0 +1,30 @@
+#!/usr/bin/env python3
+"""Update README mining status badge."""
+import os
+import sys
+from pathlib import Path
+
+def main():
+    readme_path = sys.argv[1] if len(sys.argv) > 1 else "README.md"
+    wallet = os.environ.get("WALLET", "frozen-factorio-ryan")
+    style = os.environ.get("STYLE", "flat-square")
+    readme = Path(readme_path)
+    if not readme.exists():
+        print(f"README not found: {readme_path}")
+        sys.exit(1)
+    text = readme.read_text(encoding="utf-8")
+    start = "<!-- rustchain-mining-badge-start -->"
+    end = "<!-- rustchain-mining-badge-end -->"
+    badge_url = f"https://img.shields.io/endpoint?url=https://rustchain.org/api/badge/{wallet}&style={style}"
+    block = f"{start}\n![RustChain Mining Status]({badge_url})\n{end}"
+    start_idx = text.find(start)
+    end_idx = text.find(end)
+    if start_idx != -1 and end_idx != -1 and end_idx > start_idx:
+        new = text[:start_idx] + block + text[end_idx + len(end):]
+    else:
+        new = text.rstrip() + "\n\n## Mining Status\n" + block + "\n"
+    readme.write_text(new, encoding="utf-8")
+    print(f"Updated {readme_path} with mining badge for wallet: {wallet}")
+
+if __name__ == "__main__":
+    main()

.github/dependabot.yml

@@ -0,0 +1,181 @@
+# Dependabot Configuration for RustChain
+# Issue: #1613 - Dependency Management Automation
+# Docs: See DEPENDABOT.md for policy and usage guidelines
+
+version: 2
+registries: {}
+updates:
+  # Python ecosystem - root level
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 5
+    groups:
+      python-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      python-dev-dependencies:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+
+  # Python ecosystem - tests
+  - package-ecosystem: "pip"
+    directory: "/tests"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+
+  # Python ecosystem - SDK
+  - package-ecosystem: "pip"
+    directory: "/sdk/python"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+
+  # Python ecosystem - integrations
+  - package-ecosystem: "pip"
+    directory: "/integrations/mcp-server"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # Python ecosystem - rustchainnode
+  - package-ecosystem: "pip"
+    directory: "/rustchainnode"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # Rust ecosystem - wallet
+  - package-ecosystem: "cargo"
+    directory: "/rustchain-wallet"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+    groups:
+      rust-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      rust-minor-patch:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+
+  # Rust ecosystem - RIPs
+  - package-ecosystem: "cargo"
+    directory: "/rips"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # npm ecosystem - contracts
+  - package-ecosystem: "npm"
+    directory: "/contracts/erc20"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+    groups:
+      npm-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      npm-production:
+        applies-to: version-updates
+        dependency-type: "production"
+        update-types:
+          - "minor"
+          - "patch"
+      npm-development:
+        applies-to: version-updates
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+
+  # npm ecosystem - onboard
+  - package-ecosystem: "npm"
+    directory: "/onboard"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # npm ecosystem - react-native-wallet
+  - package-ecosystem: "npm"
+    directory: "/react-native-wallet"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # npm ecosystem - snap
+  - package-ecosystem: "npm"
+    directory: "/snap"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # npm ecosystem - solana
+  - package-ecosystem: "npm"
+    directory: "/solana"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "thursday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 5
+    groups:
+      github-actions:
+        patterns:
+          - "*"