- internal/{address,identity,protocol,tce,transport,verify} -> pkg/ so
external Go projects can import the verified core; invariant tests
updated for the new paths
- Config.TrustProxy: key rate limiting by X-Forwarded-For when the relay
sits behind a reverse proxy (off by default, header never trusted
otherwise)
- examples/service + examples/approve: complete passwordless login round
trip (mint request -> wallet approves -> local verify), run live in CI
- docs/SERVICE-GUIDE.md: the integration recipe
- BLAKE3 keyed proof-of-work on object storage and auth challenges,
with frozen vectors cross-checked against an independent Python
reference implementing the single-block hash it needs.
- Sparse Merkle trie over object IDs: order-independent roots,
inclusion and absence proofs (internal/smt).
- Signed checkpoint chain per relay: transport key amendment to INV-1,
/v1/checkpoint/* and inclusion/absence proof endpoints, restart-safe
epoch continuity (internal/checkpoint).
- Head gossip with TOFU pinning and equivocation detection; light node
(cmd/lightnode) that stores no history: quorum of pinned relays,
every served object proven against the agreed root, LRU disk cache.
- WebSocket streaming on relay and light node (coder/websocket):
scoped channels mirroring REST, raw envelopes verified client-side;
light node marks streamed objects unproven until checkpoint coverage.
- Protocol v1 additions: DelegationClaim tag 0x07 with deterministic
chain resolution in verify.Graph, KeyRotationRequest/Confirm tags
0x08/0x09 with hash-bound two-sided consent and Policy.RotationMaxAge;
spec sections, frozen vectors appended byte-identically, Python
reference extended.
- Optional permissioned BFT finality over gossip (internal/bft):
prevote/precommit with quorum certificates verifiable offline.
- Quick wins: Policy.TrustedIssuers, per-type stored metrics,
batch fetch, lexicographic lists with stable cursor pagination.
- Security review of the network layer (docs/SECURITY-REVIEW.md) with
findings F-01..F-09; hub send/close race and unstable pagination
fixed under review.
12 packages green, vet/gofmt clean, protocol fuzzing stable.
