Skip to content

MALT v0.0.7-rc.5 — Authenticated Writer Session Checkpoints

Pre-release
Pre-release

Choose a tag to compare

View all tags
@BernardLowe BernardLowe released this 16 Aug 13:14
· 9 commits to main since this release
v0.0.7-rc.5
4364d18
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

MALT v0.0.7-rc.5 adds authenticated local Writer session checkpoints for trusted clients.

Highlights

  • The in-memory ArcSet materializer can export deterministic detached state and restore it with strict structural validation.
  • A Writer session checkpoint authenticates the normalized update view, complete working roots, and caller-supplied materialization digest with a caller-owned 32-byte key.
  • A valid checkpoint restores verified local session state without recomputing every complete vector.
  • Cache misses, corrupt materialization, or unavailable keys must fall back to normal Session.Load verification.

Compatibility and security boundary

Checkpoints are trusted-client local execution caches. They are not portable transition, publication, freshness, or trust proofs. The client owns persistence, key protection, and verification that restored materializer bytes match the authenticated digest.

This release does not alter MALT roots, CIDs, commitment parameters, commitments, proofs, transcripts, ProofLists, receipts, schemas, or wire encodings. The v0.0.7 release-candidate line remains pre-v1 and wire-incompatible with the flat v0.0.6 root codecs.

Source

  • Tag: v0.0.7-rc.5
  • Commit: 4364d188ba2fcff8111fee2801e7408a582511c0
  • Previous authoritative tag: v0.0.7-rc.4

Validation

  • Full Go tests, 32-bit KZG/IPA tests, vet, and SDK builds passed locally and in GitHub Actions.
  • Verifier WASM Resolve/Read and Map-proof conformance passed for all, KZG, and IPA targets.
  • Writer WASM controller and stateless/session smoke passed for KZG plus IPA direct, compact, and fast profiles.
  • A temporary external module compiled public root, protocol, SDK verifier, and materializer imports.
  • GitHub PR #193 passed Go CI and CodeQL.
  • Independent release review reported no actionable findings.
  • Release assets were built twice from the exact tagged commit under different ambient Go settings and umasks; every byte matched.
  • Both asset sets passed checksum, archive/provenance, and adversarial ustar validation.

Asset checksums

66fbc837e8555ce50a86a011501fa9862e35e8fe682b54122890e30eb9c5ace0  malt-verifier-v0.0.7-rc.5-9cea0a30c601adc8bb0cd6de3027ca75d0fc8f3a22ff375397fc537e85967640-66fbc837e8555ce50a86a011501fa9862e35e8fe682b54122890e30eb9c5ace0.tar.gz
c7f6f724204471398342d6d882aa2a61ed79b6034569cd2fd29fe234a9b2315b  malt-writer-v0.0.7-rc.5-2404727fd7bacd2a6295fd90b0a230958c517e471b7aca62e4e9b4e702029b80-c7f6f724204471398342d6d882aa2a61ed79b6034569cd2fd29fe234a9b2315b.tar.gz
9a80628d28ff561cc4235a262e173044994c7cf640466a31fb97eafd0bb5b4a1  malt-wasm-release-v0.0.7-rc.5-9a80628d28ff561cc4235a262e173044994c7cf640466a31fb97eafd0bb5b4a1.json
4a57cc176d816478f8c79b0cd5cf61d3e6bcefb3650fc767973bd01096dc0350  SHA256SUMS
Assets 6
Loading