- BLAKE3 keyed proof-of-work on object storage and auth challenges,
with frozen vectors cross-checked against an independent Python
reference implementing the single-block hash it needs.
- Sparse Merkle trie over object IDs: order-independent roots,
inclusion and absence proofs (internal/smt).
- Signed checkpoint chain per relay: transport key amendment to INV-1,
/v1/checkpoint/* and inclusion/absence proof endpoints, restart-safe
epoch continuity (internal/checkpoint).
- Head gossip with TOFU pinning and equivocation detection; light node
(cmd/lightnode) that stores no history: quorum of pinned relays,
every served object proven against the agreed root, LRU disk cache.
- WebSocket streaming on relay and light node (coder/websocket):
scoped channels mirroring REST, raw envelopes verified client-side;
light node marks streamed objects unproven until checkpoint coverage.
- Protocol v1 additions: DelegationClaim tag 0x07 with deterministic
chain resolution in verify.Graph, KeyRotationRequest/Confirm tags
0x08/0x09 with hash-bound two-sided consent and Policy.RotationMaxAge;
spec sections, frozen vectors appended byte-identically, Python
reference extended.
- Optional permissioned BFT finality over gossip (internal/bft):
prevote/precommit with quorum certificates verifiable offline.
- Quick wins: Policy.TrustedIssuers, per-type stored metrics,
batch fetch, lexicographic lists with stable cursor pagination.
- Security review of the network layer (docs/SECURITY-REVIEW.md) with
findings F-01..F-09; hub send/close race and unstable pagination
fixed under review.
12 packages green, vet/gofmt clean, protocol fuzzing stable.
20cc52c3a5