v0.5.221

Lichen Validator v0.5.221

Installation

Download the archive for your platform, verify the checksum, and extract:

# Download
curl -LO https://github.com/lobstercove/lichen/releases/download/v0.5.221/lichen-validator-linux-x86_64.tar.gz

# Verify checksum
curl -LO https://github.com/lobstercove/lichen/releases/download/v0.5.221/SHA256SUMS
curl -LO https://github.com/lobstercove/lichen/releases/download/v0.5.221/SHA256SUMS.sig
mkdir -p scripts deploy
curl -fsSLo scripts/verify-release-checksums.mjs https://raw.githubusercontent.com/lobstercove/lichen/v0.5.221/scripts/verify-release-checksums.mjs
curl -fsSLo deploy/release-trust-anchor.json https://raw.githubusercontent.com/lobstercove/lichen/v0.5.221/deploy/release-trust-anchor.json
node scripts/verify-release-checksums.mjs .
sha256sum -c SHA256SUMS --ignore-missing

# Verify GitHub artifact provenance (requires GitHub CLI)
gh attestation verify lichen-validator-linux-x86_64.tar.gz -R lobstercove/lichen

# Extract
tar xzf lichen-validator-linux-x86_64.tar.gz --strip-components=1
chmod +x lichen-validator lichen-genesis lichen zk-prove
mkdir -p "$HOME/.lichen/state-mainnet"
cp seeds.json "$HOME/.lichen/state-mainnet/seeds.json"

Each archive includes lichen-validator, lichen-genesis, lichen, zk-prove,
seeds.json, and the genesis contract WASM bundle under contracts/. Linux
archives also include lichen-custody and lichen-faucet for VPS service rollouts.
Install seeds.json under your chosen --db-path (or /etc/lichen/seeds.json)
so seed-set updates flow through normal release upgrades.

Fresh validators generate their own identity, fetch the authoritative genesis config
from seed RPC, import and verify the opcode-41 block-0 state bundle, then replay later
blocks from peers. Do not copy RocksDB state, genesis wallets, genesis keys, peer cache,
or consensus WAL from another validator.

Windows artifact:

Invoke-WebRequest -Uri https://github.com/lobstercove/lichen/releases/download/v0.5.221/lichen-validator-windows-x86_64.tar.gz -OutFile lichen-validator-windows-x86_64.tar.gz
tar -xzf .\lichen-validator-windows-x86_64.tar.gz --strip-components=1
.\lichen-validator.exe --version

Auto-Update

Production validators should keep auto-update disabled until this draft has a detached
SHA256SUMS.sig attached and a canary rollout is explicitly approved.

Signature Verification

After signing (maintainer step):

# Download signature
curl -LO https://github.com/lobstercove/lichen/releases/download/v0.5.221/SHA256SUMS.sig

Note: To add a detached signature, a maintainer should:

1. Download SHA256SUMS from this release
2. Sign it offline using the private maintainer release-signing workflow
3. Upload SHA256SUMS.sig to the release (SHA256SUMS.sig is JSON-encoded PqSignature data)
4. Publish the release only after the detached signature is attached and the canary gate is approved

Full Changelog: v0.5.220...v0.5.221