Dinero v8.0.0

Dinero v8.0.0

The first stable release of the Dinero v8 line.

Source commit: 7b882a7 (signed tag v8.0.0)
Tag: v8.0.0 (SSH-signed, Dinero Labs)

What v8 is

Dinero v8 is a privacy-capable, Utreexo-based cryptocurrency node with a complete AssumeUTXO trust model — fast now, prove in background, retire trust, fatal if dishonest: a new node bootstraps to the chain tip in minutes from a UTXO snapshot, then validates the entire history from genesis in the background, retires the trust assumption when the proof completes, and refuses to run (fatal) if the snapshot is ever shown to be dishonest.

Highlights since the rc line

AssumeUTXO trust model — complete and proven end-to-end:

• Fast snapshot bootstrap → foreground sync → background P2P body backfill → full genesis→base replay → trust-marker retirement (fully_validated) → legacy-mode exit. Below-base higher-work forks go fatal/safe-mode, never silently reorg canonical history.
• Validation↔backfill reconciliation (#298): a snapshot node whose background validation finds an unreadable pre-base body now deterministically re-derives its canonical hash and re-requests it, so it can never strand at validation_stalled — the lifecycle always reaches its terminal state. Includes a stall watchdog and a no-progress hang watchdog with named threads.

Consensus / wallet correctness:

• Shielded size-aware fees (#273): default-fee wallet.shield/unshield/transfer now measure the final transaction vsize and pay the mempool floor — previously every default-fee shielded send was silently unable to relay.
• Stateless undo integrity (#274): CSN/utreexo-stateless nodes reconstruct full-fidelity spent-coin undo from ChainDB rows, so a stateless tip can never become undisconnectable.

Operator & desktop:

• Linux Debian package restored and building from the release lane (#293).
• Desktop GUI now terminates its child daemon/seeder on quit, fails loud (no more silent hangs) if the RPC port is occupied or the daemon exits, and offers a move-to-Applications prompt when run from the DMG (#295).
• GUI default bootstrap seeds refreshed to the live fleet (SJ / NA / EU1).

Verification (this release)

• Full AssumeUTXO lifecycle e2e (validation_stalled → fully_validated → mode-exit → survives restart) green; mainnet fleet in block + shielded-state consensus on this code.

Assets

• Linux x86_64: server-safe dinerod (no GPU runtime in NEEDED), dinero-cli, Qt GUI, seeder, solo/gpu/stratum miners, full bundle, dinero-core .deb, SHA256SUMS-linux.
• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• Windows x86_64: Setup + Server installers + msvc zip, SHA256SUMS-windows.
  • Provenance note: the Windows binaries are built from this signed tag plus a one-line, behavior-equivalent portability fix — the v8.0.0 source had a POSIX-only #include <unistd.h> in a daemon watchdog's diagnostic log-hint (getpid()) that does not compile under MSVC. The canonical fix is merged to dinero-main (#305) and is identical in effect (it only changes the text of one gdb-capture log line); runtime behavior matches the tag exactly. Because of this single guard, the Windows artifacts are not bit-reproducible from the v8.0.0 tag — a future tagged release will build them reproducibly.

Verifying your download

# Linux / macOS
shasum -a 256 -c SHA256SUMS-<platform>-8.0.0
# macOS additionally: Gatekeeper should report "Notarized Developer ID"
spctl -a -t open --context context:primary-signature -v Dinero-v8.0.0-macOS-arm64.dmg

The tag v8.0.0 is SSH-signed by Dinero Labs; verify with git verify-tag v8.0.0.

🤖 Generated with Claude Code