Parano1d v1.0.2 Mainnet
This release closes browser-originated access to the default loopback wallet RPC. HTTP and WebSocket requests carrying an Origin header are rejected before JSON-RPC dispatch, while the native GUI, CLI and external miner remain available. Existing Bearer authentication for remote mining endpoints is unchanged. Required wallet addresses now reject an empty recipient instead of interpreting it as the all-zero owner.
Synchronization and header handling now fail closed without losing recoverable progress. A full HeaderDAG evicts a losing leaf rather than allowing sibling headers to block the selected-chain extension. Retrying an interrupted compact recursive suffix preserves its original durable authority, and ASERT/MTP validation loads a missing RAM-window header from canonical MDBX or stops instead of guessing.
The official external miner stops nonce search before its template expires and will not submit stale work. Scheduled development payouts now reserve their mandatory proof position before selecting user pages, keeping B25 and B255 selection on the documented effective-position boundary.
Photo Key import now rejects obvious low-complexity sources. Images must be at least 32 × 32 pixels and contain at least 64 distinct decoded pixel values. The deterministic derivation for accepted photos is unchanged.
There are no consensus-rule, wire-protocol, proof-profile, matrix, port or storage-format changes. v1.0.1 and v1.0.2 nodes remain network-compatible, and no data reset or configuration change is required. Wallet users, node operators, pools and miners should update.
UPD: v1.0.2 has been updated with manual network fee control in the GUI and a fix for stale dynamic fee floors after the mempool clears.