Skip to content

Blockula v1.0.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Nov 16:11
· 12 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.0.9
3ccf255
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Blockula v1.0.9: profiles at /boo/<name>, and an X proof post that links them. UNSIGNED, like every release so far.

This release is not signed. The offline ML-DSA-65 release key doesn't exist yet, so there's no
checksums.txt.sig and no release key id to pin. blockula release install refuses to install without one.

The one-line install.sh and the MCP's install_node check each archive's SHA-256 against checksums.txt,
whose first line is # blockula-release v1.0.9. With a logged-in gh, they also check its SLSA build
provenance (gh attestation verify <file> --repo jackdishman/blockula --source-ref refs/tags/v1.0.9), and
they report which checks ran. A compromised GitHub account or release workflow could produce both. The
stronger check is a bit-for-bit rebuild of the Linux archives:
COMMIT=3ccf255d6f2f46f386e0c091524179d1c28f617d scripts/reproduce-release.sh v1.0.9.

Blockula is for education and research only. Each chain's coins have no value: nobody sells them, buys them or gets paid in them.

What's new

  • Profiles at /boo/<name> (#178): a boo's public page on its chain. It shows the name, the GitHub and X handles the account links (each with how far it's been checked), Soul, hunts won, contributions claimed and its other names. Balances, keys and activity stay on the account's page. Every node answers https://<node>/boo/<name> and sends it on to the profile in the wallet it serves, so it's the link to share. Named boos in the directory, the guestbook and the leaderboards open their profile.
  • The X proof post links the profile, never a .boo name (#177): .boo is also a web domain, so X turned you.boo in a post into a link to an unrelated website. The post now carries https://<node>/boo/<name>, or blockula.app for an account without a name or a node that isn't on https. Posts already made stay valid: only the code is checked.
  • SDK: booProfileUrl(node, name) is new, and xProofPost(code, profile?) takes the profile link where it took a label.
  • npm: @blockula/sdk and @blockula/mcp are 1.0.9.

No protocol change: v1 blocks replay exactly as before.

Assets 13
Loading