Skip to content

MALT Core v0.0.10

Choose a tag to compare

View all tags
@BernardLowe BernardLowe released this 10 Oct 03:08
v0.0.10
aaa7873
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

MALT Core v0.0.10 consolidates the v0.0.10 release candidates and promotes the validated v0.0.10-rc.5 source without further code changes.

Exact source commit: aaa78737c35f82fe91bb3f749cfddbcb7953ed2b (merged PR #221). The annotated v0.0.10 and v0.0.10-rc.5 tags point to this same commit.

Published Go module: github.com/dewebprotocol/malt-core@v0.0.10.
Module checksum: h1:HgzuUot+AAKiLz20KdeUlnVDCVFHxfjQc7unsQOqm7Q=.
go.mod checksum: h1:o6L8K9vJp5hyrVo3fUtSsj0rvNpcboOcOb3nQwnR/gs=.
The downloaded final module matches all 243 files of the tagged source.

Changes since v0.0.9:

  • Separate opaque labels and coordinate derivation from authentication, with canonical Direct key/index encodings, explicit builtin commitment profiles and the top-level maltcid package.
  • Add the Object SDK for composing immutable content, Prefix Maps, Positional Lists and tagged custom structures, including recursive commit, retained writer snapshots, graph deltas and independently verified traversal.
  • Use Positional layout 3 with count and optional opaque payload CID only in Root slot zero. Descendant vectors use every position; routing and height come from authenticated context. Append/truncate preserve payload metadata, and ranges authenticate element indices. Application byte geometry belongs in CID-bound documents owned by consumers.
  • Publish candidate malt.authentication/4, query malt.authentication/5, binding /1, delta/batch/receipt /2, and malt.conformance.authentication/3 contracts. Retired Positional layout 2, former operation profiles and removed package paths are rejected without forwarding aliases or migration readers.
  • Keep comparison-only hash-trie implementation and measurements in malt-evaluation. Core owns the portable SDK, protocol, schemas and conformance data; malt-ts owns browser APIs and reproducible WASM distribution.

Validation:

  • Full native Go tests, 386 KZG/IPA commitment tests, vet/build, all six public SDK examples and macOS/Windows example cross-builds.
  • Byte-for-byte conformance regeneration, clean formatting/whitespace checks and an external Go consumer of the public SDK packages.
  • Published RC module archive compared against all 243 files of the tagged source; merged Core Go/CodeQL CI and runtime Go/platform CI passed.
  • malt-ts locked to the published rc.5 module and checksums: 152 JS tests, TypeScript declarations, native Go checks, 20 portable verifier vectors, KZG and IPA direct/compact/fast writer, retained-state/batch and Worker conformance.
  • Rebuilt browser archives matched packaged assets byte-for-byte; adversarial archive validation rejected seven malformed tar variants and seven provenance substitutions.
  • Gateway tested with the actual pinned browser package: Go tests/vet/build, 244 Console tests, production build, SDK/Core binding audit and KZG/IPA UnixFS writer regressions.
  • Independently built Gateway and runtime binaries passed encrypted backup/sync, rooted UnixFS, KZG/IPA authentication and tamper-rejection Product E2E.

This v0.0.x source release remains experimental. Root V stays 0; a non-prerelease SemVer tag does not declare production readiness. Candidate Roots, graph deltas and execution receipts are not portable state-transition proofs, publication or automatic client trust. Consumers must adopt the new source and wire contracts together. Browser assets are distributed by malt-ts, not this Core release.

Changes from v0.0.9 · Current authentication contract · Compatibility policy

Assets 2
Loading