v0.4.0

bcommon v0.5.1. Stricter parsing: every public key bfinger reads (resolved identities, key addresses, pins, payment and rotation keys, domain-docs -key) must be a point on the curve in its one compressed encoding; every BEEF and raw transaction from the network is bounds-checked before parsing; tokens, carriers and funding outputs are accepted only in the exact encoding the template writes. Readers refuse other forms with REFUSED-DECODE; the host refuses them as bad-tag or bad-record.

• keys trust pins in lower-case hex.
• A known_keys file holding a key that is not a valid point is now refused on read; remove that line by hand.
• A transaction paid from a coinbase coin now carries the real coinbase transaction in any BEEF bfinger keeps or publishes.
• Some refusal messages changed wording.
• The AWS CloudFormation template (finger-host.yaml) now ships with each release, beside compose.yaml.
• Docs: BRC-180 host discovery explained in the README; QUICKSTART terms explained.