Changelog

2026-10-05Copy Anchor Link

• In-browser verifier. Verify this round checks the published round in the browser with bb.js, using verify/core.ts, which tally verify now uses too. Verification now reads events from the round's opening ledger instead of the deployment ledger, which would have left the RPC window around 2026-10-12.
• Rewritten history published; round republished. The rewritten history was force-pushed to GitHub, and round-004 replaced round-003 as the published round. Circuit artifacts now store repository-relative source paths, so CI's rebuild matches them byte for byte.
• Operator design. Documents only: split auditor-key custody, scoped audit requests, disclosure outputs, allow and deny lists, threat model, open questions, scope ledger. Research on demand, specifications and overlap.
• Published round refreshed from a clean clone. round-003 on the new deployment; both tampering cases exit with code 2; explorer evidence regenerated.
• Re-measured under protocol 29. A transfer is 22.8 % of the 400M cap; four transfers fit in one transaction; on-chain aggregate verification fits but stays off-chain. Every changed claim was corrected.
• Secret guard and CI. The build fails on any tracked secret, including the retired demo key.
• Ported to OpenZeppelin stellar-contracts v0.9.0 and redeployed.
  • The client was ported to v0.9.0 and passes the upstream test vectors.
  • The circuits were recompiled and their keys re-pinned.
  • The round registry moved to soroban-sdk 28.
  • The new auditor key is kept out of the repository.
• History rewrite. The demo auditor key committed on 2026-08-21 was removed from history.

2026-08-23Copy Anchor Link

• The landing page was deployed to GitHub Pages; evidence refreshed.

2026-08-22Copy Anchor Link

• Published evidence. A round any party can verify, with retention-expiry detection and a refresh command.
• Non-custodial registration. A registration core that follows the specification, tested against live testnet.
• Standalone tally verify.

2026-08-21Copy Anchor Link

• Initial build.
  • The repository was created (MIT).
  • The multi-sender aggregate disclosure circuits were added.
  • The round registry contract was added.
  • A reproducible demo round was added, with donor verification.
  • The first landing page was published.
• Corrections.
  • Disclosure proofs were switched to zero-knowledge mode.
  • Measurements were redone.
  • An address claim was retracted.