Skip to content

MALT v0.0.6

Latest

Choose a tag to compare

@BernardLowe BernardLowe released this 14 Jul 04:34
841c224

MALT v0.0.6

Release date: 2026-07-14

v0.0.6 establishes DeWebProtocol/malt as an SDK-only core. It keeps the
protocol, commitment, proof, semantic, mutation, execution, and verifier
building blocks required by clients and gateways, while removing product and
application implementations from the module.

Boundary changes

Core retains:

  • module-root resolve/read/query and verification values;
  • malt.resolve/v0alpha1 and malt.read/v0alpha1 schemas;
  • ProofList, KZG/IPA, typed CID, map/list semantics, resolver/writer algorithms;
  • portable mutation/receipt values and untrusted execution.Executor;
  • local Go/WASM verifier surfaces;
  • the frozen malt.artifact/v0alpha2 compatibility verifier.

Core removes:

  • cmd/malt, cmd/cas, cmd/eval;
  • daemon, config, HTTP API/server, reference executor;
  • CAS/KV adapters and concrete ArcTable implementations;
  • UnixFS model/client/runtime packages;
  • evaluator plans, commands, and schemas.

DeWebProtocol/gateway now owns persistent ArcTable/KV/CAS and generic
resolve/read/apply service execution. DeWebProtocol/malt-client owns the
trusted CLI/daemon, accepted roots, UnixFS planning, local verification, and
payload-byte binding. Web remains a browser client using the WASM verifier.

ArcSet capability

Proof-generation algorithms accept auth/arcset/materializer.Store. This is a
narrow algorithmic capability over ArcSet views and commitment nodes, not an
ArcTable implementation or persistence contract. A small in-memory
implementation remains for conformance tests and examples.

Compatibility

This is an intentional pre-v1 source-breaking release. There are no forwarding
packages for removed product/application paths. The serialized resolve/read
profiles, ProofList format, typed root codecs, and frozen artifact profile are
not revised by this release.

Validation checklist

  • git diff --check
  • gofmt clean
  • go test ./...
  • go vet ./...
  • go build -buildvcs=false ./...
  • native and WASM verifier builds
  • external consumer compile against the SDK packages
  • gateway and malt-client full test/vet suites
  • Web test and production build

The GitHub release identifies the exact tag commit and final validation result.

Documentation erratum

After publication, PR #166 corrected SECURITY.md to identify v0.0.6 as the current supported experimental release and aligned its scope with the SDK-only core boundary. The immutable v0.0.6 tag remains at 841c22415a54810006d6640a24c54566b6ba3f39.