Threshold v1.0.0

First release per build-contract §2 'ship the loop on day one'. Heartbeat → escalation → release loop works end-to-end at minimum fidelity.

SHA-256: 0a9a1ee510ce8882193c68198f962ea2cd63b421dd41eee924606074ef1f514c

What works:

• Vault (BIP-39 backup), Identity (BIP-340 Schnorr), Crypto (libsodium crypto_box_seal)
• Nostr transport (multi-relay), Heartbeat (kind:30078), Escalation (kind:30080)
• Release (kind:30081 1-of-1 only per iter-1 P0-17), False-alarm (kind:30082), Audit (kind:30083)
• Survivor client: catch-up + max-seen rule

40 tests pass (golden vectors + 10k fuzz + wiring-boundary + max-seen + audit)

Known limitations (per Council iter-1):

• M-of-N deferred to v1.1+ (P0-17)
• Per-packet one-time recipient npub deferred to v1.1+ (P0-2)
• Android-only; iOS via future web client (P0-19)
• Single watchdog (P0-5)
• v1.0.0 NOT safe against state-actor adversaries who can subpoena relays

Threshold is not a lawyer, will, or substitute for estate planning advice.

This release was built and signed in a Next.js sandbox. Per build-contract §5 rule #1 (green CI ≠ working app), this release is 'shipped, not verified' until real-device install + tap-through.