Skip to content

Blockula v1.0.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Nov 13:14
· 19 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.0.7
20745cb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Blockula v1.0.7: a validator at home in one command, shared accounts, linking an X account, the pulse. UNSIGNED, like every release so far.

This release is not signed. The offline ML-DSA-65 release key doesn't exist yet, so there's no
checksums.txt.sig and no release key id to pin. blockula release install refuses to install without one.

The one-line install.sh and the MCP's install_node check each archive's SHA-256 against checksums.txt,
whose first line is # blockula-release v1.0.7. With a logged-in gh, they also check its SLSA build
provenance (gh attestation verify <file> --repo jackdishman/blockula --source-ref refs/tags/v1.0.7), and
they report which checks ran. A compromised GitHub account or release workflow could produce both. The
stronger check is a bit-for-bit rebuild of the Linux archives:
COMMIT=20745cb98512ff5a37af2e21e488a01d65bf0e34 scripts/reproduce-release.sh v1.0.7.

Blockula is for education and research only. Each chain's coins have no value: nobody sells them, buys them or gets paid in them.

What's new

  • blockula validator setup (#158): a validator at home in one command. It checks the genesis hash, works out how the chain's validators reach each other, makes the key once, takes the bond from the faucet, runs the node as a launchd agent or systemd service, waits for sync and registers, then prints the message to send the chain's owner. --dry-run shows the plan first.
  • Shared accounts (#169): the chain's M-of-N multisig in the wallet (/shared) and the MCP. People and agents co-own an account; owners propose and approve, and the review page renders each action itself and signs its digest, never the node's summary.
  • Link an X account (#166, #168): show which X handle belongs to an account, verifiable by anyone with the SDK (verifyXLink) and no X API key, at /wallet/x/ on every node. No protocol change.
  • The pulse (#165): accounts active this week, counted as people (validators, programs, system accounts and named bots left out), on /metrics (blockula_accounts_active), /api/status (pulse) and both explorers' front pages. --pulse-exclude <address|name> leaves out bots.
  • Contributor docs point at the demo chain (#163): Blockula's own Hunts and contribution pool run on blockula-demo-2.
  • npm: @blockula/sdk and @blockula/mcp are 1.0.7.

No protocol change: v1 blocks replay exactly as before.

Assets 13
Loading