v0.4.0

23 commits, 166 files changed since v0.3.0 (Apr 2026).

Highlights

Resilience use cases (public sector, NGO, civil society)

• Resilient Civic Participation: credentialed petition protocol (forward-secure ratcheting, blob-anchored batches, chain-state resolution SNARK)
• Resilient Disbursement Rails: humanitarian disbursement under adversarial jurisdictions, off-ramp unlinkability
• Resilient Identity Continuity: identity survival across credential-source loss
• New "Civic Coordination & Governance" domain; domains reframed to cover public-sector, NGO, and resilience contexts alongside FIs

I2U (institution-to-user) protection patterns

• Immutable Guarantees, Proof of Innocence, zk-promises, ZK Wrappers, Social Recovery, Private Information Retrieval, User-Controlled Viewing Keys
• Constrained-signer set: Forward-Secure Signatures, Mesh Store-and-Forward Submission, Relay-Mediated Proving, Recipient-Derived Receive Addresses, Forward-Secure Pseudorandom Tree, Blob-Anchored State with KZG Dispute
• Network anonymity split into Onion Routing and Mixnet Anonymity sub-patterns
• I2U analysis added across existing approaches (relabelled i2i to both where the tech serves end users)

Schema v2

• Pattern template v2 and approach template v2; validator flipped to strict, so v1 aliases now fail validation
• Patterns now carry structured CROPS context and post-quantum analysis as first-class fields
• 9 approach cards ported to v2

Quality

• Q2 2026 content QA audit across all content (tracked in QA-AUDIT.md)
• Jurisdiction expert review; deepened persona POVs in approaches
• Stabilised full markdown link checks; refreshed Adjacent vendors (CROPS fit)

v0.3.0

71 commits, 162 files changed since v0.2.0 (Dec 2025).

Highlights

CROPS Evaluation Framework

• crops_profile frontmatter (CR, OS, Privacy, Security) added to pattern and vendor templates
• I2I/I2U context model defined in glossary and README
• 18 patterns CROPS-aligned with deployment-context Trade-offs analysis

20+ New Patterns

• Privacy primitives: PSI (4 variants: DH, OPRF, circuit, FHE), permissionless spend auth, safe proof delegation, vOPRF nullifiers
• Infrastructure: network-level anonymity, TEE-assisted anonymity, modular privacy stack, hybrid public-private modes, stateless plasma privacy
• Settlement: cross-chain privacy bridge, compliance monitoring, TLS payment bridge, L2 privacy evaluation framework
• Post-quantum: native account abstraction (EIP-8141), ZK proof systems taxonomy with PQ safety analysis
• Shared state: private shared state split into co-SNARKs, FHE, and TEE variants with distinct trust models

15 New Use Cases

Private supply chain, procurement, registry, read, corporate bonds, government debt, FX, stocks, commodities, repo, money market funds, treasuries, payments, oracles, messaging

Approaches

• New: Private money market funds, privacy standards survey, white-label deployment, atomic DvP settlement
• Enhanced: Private trade settlement (single-chain + cross-chain split), private bonds (PoC learnings), private payments (Plasma + TEE), private identity (credential-source taxonomy)

Post-Quantum Threat Analysis

• New domain: PQ threat landscape, Ethereum layer analysis, application-layer breakage index
• PQ exposure notes added to Trade-offs of 16 affected patterns

CI & Quality

• Vale prose linter, glossary term checker, JSON schema validation, pre-commit hooks
• LLM-based content review tool
• Pattern validation workflow

Vendors

• Peer, EY Starlight, TACEO Merces, Fhenix, Space and Time

Full changelog: https://github.com/ethereum/iptf-map/blob/v0.3.0/CHANGELOG.md

v0.2.0 - End of Year

End of Year checkpoint - unofficial release after Devconnect, before 2026.

Highlights

• 6 new patterns (TEE key manager, EIL, FOCIL, Lean Ethereum, OIF, Noir)
• 4 new vendors (Paladin, State Labs, Soda Labs, Miden)
• 2 new approaches (private broadcasting, private bonds)
• EU Data Protection jurisdiction
• Glossary additions

Full changelog

v0.1.0 - MVP

Initial public release of the IPTF Map.

Highlights

• 20+ privacy patterns (ZK, MPC, TEE, stealth addresses)
• 5 use cases (private-auth, bonds, derivatives, RWA, stablecoins)
• 6 domain overviews
• 4 jurisdictions
• 8 vendor profiles
• Glossary with standardized terminology

Full changelog