MALT v0.0.6
Release date: 2026-07-14
v0.0.6 establishes DeWebProtocol/malt as an SDK-only core. It keeps the
protocol, commitment, proof, semantic, mutation, execution, and verifier
building blocks required by clients and gateways, while removing product and
application implementations from the module.
Boundary changes
Core retains:
- module-root resolve/read/query and verification values;
malt.resolve/v0alpha1andmalt.read/v0alpha1schemas;- ProofList, KZG/IPA, typed CID, map/list semantics, resolver/writer algorithms;
- portable mutation/receipt values and untrusted
execution.Executor; - local Go/WASM verifier surfaces;
- the frozen
malt.artifact/v0alpha2compatibility verifier.
Core removes:
cmd/malt,cmd/cas,cmd/eval;- daemon, config, HTTP API/server, reference executor;
- CAS/KV adapters and concrete ArcTable implementations;
- UnixFS model/client/runtime packages;
- evaluator plans, commands, and schemas.
DeWebProtocol/gateway now owns persistent ArcTable/KV/CAS and generic
resolve/read/apply service execution. DeWebProtocol/malt-client owns the
trusted CLI/daemon, accepted roots, UnixFS planning, local verification, and
payload-byte binding. Web remains a browser client using the WASM verifier.
ArcSet capability
Proof-generation algorithms accept auth/arcset/materializer.Store. This is a
narrow algorithmic capability over ArcSet views and commitment nodes, not an
ArcTable implementation or persistence contract. A small in-memory
implementation remains for conformance tests and examples.
Compatibility
This is an intentional pre-v1 source-breaking release. There are no forwarding
packages for removed product/application paths. The serialized resolve/read
profiles, ProofList format, typed root codecs, and frozen artifact profile are
not revised by this release.
Validation checklist
git diff --checkgofmtcleango test ./...go vet ./...go build -buildvcs=false ./...- native and WASM verifier builds
- external consumer compile against the SDK packages
- gateway and malt-client full test/vet suites
- Web test and production build
The GitHub release identifies the exact tag commit and final validation result.
Documentation erratum
After publication, PR #166 corrected SECURITY.md to identify v0.0.6 as the current supported experimental release and aligned its scope with the SDK-only core boundary. The immutable v0.0.6 tag remains at 841c22415a54810006d6640a24c54566b6ba3f39.