v0.9.1-a

Validator

Changes

• Consensus: added a first-root attestation latch that guards against a dead-fork root-divergence class (voting onto a rooted fork the cluster had skipped), together with vote-threshold shadow wiring.
• Consensus: widened vote-stake percentage math to u128 to prevent an overflow at high aggregate stake; caught by the deploy-gate golden replay before shipping, with a regression known-answer test added.
• Networking: the QUIC/TPU server now emits the original_destination_connection_id transport parameter (RFC 9000 §18.2). Standards-strict clients (quinn/Agave) previously aborted the TPU handshake with a transport-parameter error; real-client transaction ingest now completes.
• Block production: synced the transaction-bearing block-production stack and a wave-formation singleton bypass from the deployed lineage.

Programs

Changes

• The ZK ElGamal Proof program (src/vex_bpf2/zksdk/) is now a native, from-scratch Zig re-implementation of Sig's — Pedersen/ElGamal, Merlin transcripts, sigma proofs, Bulletproofs range proofs, and grouped-ciphertext validity. No verbatim Sig code remains in the build; results are byte-parity verified against the conformance corpus.

Full entry: CHANGELOG.md