MALT Core v0.0.10-rc.4

MALT Core v0.0.10-rc.4

Exact source commit: 0d7b166

This source prerelease completes evaluator ownership of the comparison-only compact SHA256 trie and refreshes the current security policy and installation guidance. The experimental hash trie was added and removed on development commits after rc.3; its implementation, formats, tests and documentation now live in malt-evaluation/internal/baselines/hashtrie, with no Core forwarding package.

Relative to v0.0.10-rc.3, native Go APIs, authentication algorithms, Root encoding, proof/schema profiles and conformance/authentication-v2.json are unchanged. Root V remains 0. This release does not declare production readiness. Candidate Roots and execution receipts are not portable state-transition proofs or automatic trusted-root promotion; the binary evaluation baseline does not establish optimal proof size across branching factors.

Validation completed:

• Full Go tests, 386 KZG/IPA tests, vet and build on Windows with CGO disabled.
• Linux Go CI: full tests, 386 commitment tests, vet, build, six public examples and macOS/Windows example cross-builds; CodeQL checks passed.
• A temporary external module compiled the intended public SDK packages against the candidate source: sdk/authentication, sdk/authentication/builtin, protocol, derivation, maltcid and auth/arcset/materializer.
• Complete whitespace diff against MALT_RELEASE_BASE=v0.0.10-rc.3 and independent release review; tagged merge tree is identical to the verified PR head.

Core publishes Go source, schemas and portable conformance data. Browser WASM distribution remains owned by malt-ts, which independently binds this published tag and its exact module checksums. Historical evaluation pins and results retain their original identities.

See full release notes and rc.3 comparison.