Validator tools 1.4.9 — runtime-290 readiness compatibility

Fix expanded runtime-290 validator readiness parsing (#59, #60) and use node-wallet-first enrollment guidance.

Qualified tuple: ROKO Network Testnet, chain 52370, mainnet spec 290, Linux AMD64 node fba4e76cfeb062bcba0cc2c2fd16f9d9b23c275b. Other architectures/runtime versions remain unqualified.

The actual signed installed bundle passed an isolated native fixture: expanded readiness exported through Safe RPC, seven existing session keys preserved, all three failure cases recovered, and all six Agora rejection cases passed. Production validator identity remained unchanged. This does not establish live enrollment, election, rewards, browser-wallet signing or UTC accuracy.

Exact artifact source: 53c42a8; signed tag v1.4.9. Reviewed qualification harness: c44dd91. Existing 1.4.8 assets are unchanged. Verify both detached signatures with release fingerprint 62297562B1C7053088F405DB0117DAAA677A5BF2 before installation.

Validator enrollment tools v1.4.8

Validator enrollment tools 1.4.8 support runtime 290 only on ROKO Network Testnet (chain ID 52370). The signed compatibility profile records the exact qualified Linux AMD64 native build nightly-fba4e76c-20261015, source fba4e76cfeb062bcba0cc2c2fd16f9d9b23c275b, version roko-node 3.0.0-dev-fba4e76cfeb. The date in the native release identifier is its build date.

Tools source: d93d71d9bd7eb16ff7ce6c8ddbe1e43477ac7477, integrated through PR46. The private signed 1.4.8 release and installed commands passed the disposable native delivery fixture with the exact production-mainnet runtime-290 Wasm and actual Agora module in Node. Generated and reused packages passed all six rejection cases; three fault cases restored Safe policy and preserved seven existing keys. The delivery checker reported deliveryBinding: true and outsidePublishedCompatibility: false.

The fixture covers AMD64 enrollment package handling. It does not establish ARM enrollment qualification, browser/wallet signing, election, block production, rewards, or live readiness.

For a node still running runtime 286, retain version 1.4.7. Versions 1.4.5, 1.4.6 and 1.4.7 remain available at their immutable versioned links. Do not substitute the private historical 1.4.7 build for the published runtime-286 release.

Verify SHA256SUMS.asc using the independently documented release fingerprint 6229 7562 B1C7 0530 88F4 05DB 0117 DAAA 677A 5BF2, then check the signed checksums before running the installer. The offline bundle contains the same seven authenticated release files. Restore Safe RPC after the temporary loopback session-key window.

Validator enrollment tools 1.4.7

Validator enrollment tooling 1.4.7 contains enrollment tools, not a node binary.

• The service installer now renders the session-key window contract. installer/scripts/install-roko-service.sh writes Environment=ROKO_RPC_METHODS=Safe, EnvironmentFile=-/etc/roko/node-rpc.env and --rpc-methods ${ROKO_RPC_METHODS} for every role and runtime. It creates /etc/roko/node-rpc.env as root-owned ROKO_RPC_METHODS=Safe when absent and refuses an existing policy file that is not root-owned, safe and in exact Safe state. Units rendered by 1.4.6 and earlier hardcoded --rpc-methods Safe, which roko-session-key-window refuses; rerun the 1.4.7 installer with your original arguments, or apply the documented adaptation.
• Compatibility is unchanged from 1.4.6: runtime spec 286 and node release nightly-f490bcd1-20261014 (3.0.0-dev-f490bcd12df, linux-amd64, binary SHA256 b0ddc0fdae81ce09b1f6c9b18eee61f86ab6d35ec53b825bcfcc77acf3e66fdc). Enrollment behaviour is unchanged.
• Qualified end to end before release: the signed 1.4.7 tools generated and reused a seven-key enrollment against that node and the live spec 286 runtime in a disposable chain. The deployed Agora validator accepted both packages and rejected all six tampering cases, and all three interruption faults restored Safe RPC without losing keys. Evidence: docs/evidence/guarded-f490bcd-runtime286-tools147-20261016.json.
• ARM64 has no enrollment fixture yet; this release makes no ARM qualification claim.

Verify before running: import roko-release-signing-key.asc, confirm fingerprint 6229 7562 B1C7 0530 88F4 05DB 0117 DAAA 677A 5BF2, verify SHA256SUMS.asc, then check SHA256SUMS.

Canonical install path: https://downloads.roko.network/validator-tools/current/install-roko-validator-enroll.sh

Source revision caf9eff873983a80742d56125ae48dbd8d7c893e, signed tag v1.4.7.

Validator enrollment tools 1.4.6

Validator enrollment tooling 1.4.6 contains enrollment tools, not a node binary.

• Compatibility now matches the running network exactly: runtime spec 286 and node release nightly-f490bcd1-20261014 (3.0.0-dev-f490bcd12df, linux-amd64, binary SHA256 b0ddc0fdae81ce09b1f6c9b18eee61f86ab6d35ec53b825bcfcc77acf3e66fdc).
• Qualified end to end before release: the signed 1.4.6 tools generated and reused a seven-key enrollment against that node and the live spec 286 runtime in a disposable chain. The deployed Agora validator accepted both packages and rejected all six tampering cases, and all three interruption faults restored Safe RPC without losing keys. Evidence: docs/evidence/guarded-f490bcd-runtime286-20261015.json.
• Package files keep correct permissions under a restrictive build umask. Enrollment behaviour is otherwise unchanged from 1.4.5.
• ARM64 has no enrollment fixture yet; this release makes no ARM qualification claim.

Verify before running: import roko-release-signing-key.asc, confirm fingerprint 6229 7562 B1C7 0530 88F4 05DB 0117 DAAA 677A 5BF2, verify SHA256SUMS.asc, then check SHA256SUMS.

Canonical install path: https://downloads.roko.network/validator-tools/current/install-roko-validator-enroll.sh

Source revision 35112c97ab820a8e1ffeb7fcd9932eecda76fa93, signed tag v1.4.6.

Validator enrollment tools 1.4.5

Validator enrollment tooling 1.4.5 contains enrollment tools, not a node binary.

• Every rendered unit now carries the fleet temporal-mesh thresholds (#38, refs #12): --timesync-convergence-threshold-ns 5000000 and --timesync-lucky-threshold-ns 10000000. These are the values the network-managed validators and the public sentry run. Before this release, external units ran the node defaults (1 ms / 100 µs), so ordinary 2–4 ms WAN spread between authorities reported Converging with timing quality 0.
• The bootnode address now uses plain TCP: /dns4/boot.roko.network/tcp/30333/p2p/…. The earlier /ws form matched no listener on the public bootnode.
• Existing installs can update without reinstalling: add the two --timesync-* lines to the unit and remove /ws from --bootnodes, then daemon-reload and restart. No key or database change is needed. See docs/validator-self-join.md#temporal-mesh-thresholds.

Verify before running: import roko-release-signing-key.asc, confirm fingerprint 6229 7562 B1C7 0530 88F4 05DB 0117 DAAA 677A 5BF2, verify SHA256SUMS.asc, then check SHA256SUMS.

Canonical install path: https://downloads.roko.network/validator-tools/current/install-roko-validator-enroll.sh

Source revision 864d66340f3cef1d2bf1b1c3e45b8f87b5c27bfa, signed tag v1.4.5.

Validator enrollment tools 1.4.4

Validator enrollment tooling 1.4.4 contains enrollment tools, not a node binary.

• Validator candidates now default to the early-testnet timing participation profile (#35, refs #12). The installer renders --timesync-participation-profile early-testnet, the same policy the network-managed validators run (core ADR-021). Chain sync, fresh authenticated authority timing updates, clock discipline and active session keys remain mandatory. Ordinary quality or convergence settling becomes a warning instead of stopping authoring. Pass --timing-profile strict to opt into strict qualification.
• Full, archive and observer units are unchanged.
• Existing validators can switch without reinstalling: add the flag to the unit, then daemon-reload and restart. No key or database change is needed. See docs/validator-self-join.md.

Verify before running: import roko-release-signing-key.asc, confirm fingerprint 6229 7562 B1C7 0530 88F4 05DB 0117 DAAA 677A 5BF2, verify SHA256SUMS.asc, then check SHA256SUMS.

Canonical install path: https://downloads.roko.network/validator-tools/current/install-roko-validator-enroll.sh

Source revision 44ef431c28300ab13c561cce94a72732a67db4e4, signed tag v1.4.4.

Validator enrollment tools 1.4.3

Validator enrollment tooling 1.4.3 contains enrollment tools, not a node binary.

• Release metadata now carries the package field. The guided install prints the resolved roko-validator-enroll path and --version, and fails with the canonical installer link if the tool is absent (#29).
• An expired or invalid authority-peer manifest now fails with a specific message. For an expired manifest it prints expiresAt and the observed time, and suggests installing with NODE_ROLE=full until a fresh manifest is published (#32, refs #30).
• install-node no longer reports a false Missing Chrony command socket when the installer runs as a non-root user with sudo. --dry-run now performs the same read-only check (#33, fixes #31).

Verify before running: import roko-release-signing-key.asc, confirm fingerprint 6229 7562 B1C7 0530 88F4 05DB 0117 DAAA 677A 5BF2, verify SHA256SUMS.asc, then check SHA256SUMS.

Canonical install path: https://downloads.roko.network/validator-tools/current/install-roko-validator-enroll.sh

Source revision fcb88b6efe90087f4a608397fcf51066524410f5, signed tag v1.4.3.

Validator enrollment tools 1.4.1

Validator enrollment tooling 1.4.1 adds guarded reuse of existing session keys and fixes helper resolution through installer-created command links. It contains enrollment tools, not a node binary.

To refresh a package without rotating keys, pass --reuse-session-keys 0xPUBLIC_ENCODED_KEYS before the guarded helper's -- separator, and choose a new output filename. The helper proves local custody, preserves the non-authoring and isolation gates, and restores the exact prior Safe policy. A custody failure never falls back to generation. Complete the existing-install preflight, preserving custom PHC devices, flags and readiness checks before any restart.

Qualification covers Linux amd64 node sources 086baf26c0e0db666526b8f649269facd1c37da7 (nightly-086baf26-20260913) and be8920f47d282da73297c17875791c4e3d444625 (historical v1.1.0), with public runtime 286 code in isolated development chains. Real generated/reused packages passed the actual pinned Agora validator, plus wrong-genesis/runtime/metadata, expiry, tampering and replay rejection. Seven existing key files stayed unchanged and service-fault recovery passed. The signed installed command-link path was additionally qualified on nightly 086baf26; shipped helper/CLI code matches that tested candidate. Evidence and scope.

This release retains the portable offline checksum and strict RPC-policy correction first delivered in tooling 1.4.0. Historical v1.1.0/v1.3.0 offline sidecars remain unchanged. Verify downloaded checksums and authenticate the manifest/metadata with release key fingerprint 62297562B1C7053088F405DB0117DAAA677A5BF2.

Signed source tag v1.4.1: 3763da4c8084bdc30899eb785c9af835bd3e4683. Twelve helper-contract cases, the full smoke suite and native installed qualification passed. No downgrade is needed merely to match tool/node version labels.

Browser wallet signing, owner-controlled finalized enrollment, custom PHC derivative qualification, public relay timing, disabled-validator recovery and database catch-up remain separate work. Package acceptance does not establish election or active membership.

Validator enrollment tools 1.4.0

Validator enrollment tooling 1.4.0 fixes the guarded RPC policy probe and portable offline archive checksum. It does not contain a node binary.

The probe now sends a valid author_hasKey request. Exact Safe-policy denials are distinguished from malformed requests, missing methods, proxy failures, and malformed JSON-RPC responses. The temporary RPC window restores the original policy file exactly on success and failure.

Qualification covers Linux amd64 node builds 086baf26c0e0db666526b8f649269facd1c37da7 (nightly-086baf26-20260913) and be8920f47d282da73297c17875791c4e3d444625 (testnet-v1.1.0), each with the public runtime 286 code in an isolated development genesis. Real three-authority generation and restart-failure, interruption, and RPC-loss cases passed. This does not require downgrading to v1.1.0. See the qualification and exact binary digests.

The offline checksum sidecar contains only the archive basename. After downloading the archive and its sidecar into the same directory, run:

sha256sum --strict -c roko-validator-enroll-offline-1.4.0.tar.gz.sha256

Extract the offline archive and run its installer with --bundle-dir pointing to the extracted directory. The installer authenticates the signed manifest and metadata against fingerprint 62297562B1C7053088F405DB0117DAAA677A5BF2; a checksum alone is not authentication.

Signed source tag: v1.4.0, commit 370b9a65b5880368801341a290c4491bab0c3c73. The attached metadata binds the payload to this source revision. Full smoke tests and an installation of the signed production bundle passed.

Custom PHC configuration, owner-wallet registration, election, public temporal relay health, disabled-validator liveness, and database catch-up remain separate qualification work tracked in #13, #12, and #18.

ROKO validator enrollment CLI v1.1.0

First public signed distribution of roko-validator-enroll.

The CLI validates an exact node/runtime/genesis compatibility contract, opens a guarded loopback-only Unsafe RPC window solely for session-key rotation, restores exact Safe state, and exports a public-only Agora enrollment package.

Verify SHA256SUMS.asc with the included release key. Expected fingerprint: 62297562B1C7053088F405DB0117DAAA677A5BF2. The offline bundle contains all required integrity material.