v0.3.35

Release v0.3.35 retires the legacy job-side environment readers and keeps the exported compatibility constants available to existing imports.

Use LISKOV_BOOTSTRAP instead of PROOF_SLIPWAY_BOOTSTRAP. PROOF_SLIPWAY_URL is no longer read; the default core URL remains available and LISKOV_CORE_URL supplies an explicit override. Legacy names have no fallback.

Old name	Action	What replaces it
PROOF_LISKOV_CORE_URL	renamed LISKOV_CORE_URL	The platform already emits LISKOV_CORE_URL, with the same value, in every handoff that carries PROOF_LISKOV_CORE_URL.
PROOF_LISKOV_SECRETS_URL	removed	The signed runtime bootstrap's secrets.url, then bootstrap.secretsUrl, then DEFAULT_LISKOV_SECRETS_URL.
PROOF_LISKOV_BOOTSTRAP_ALLOW_INSECURE_HTTP	removed	The bootstrap.allowInsecureHttp option.
PROOF_LISKOV_BOOTSTRAP_REQUEST_TTL_MS	removed	The bootstrap.requestTtlMs option, else 60 s.
PROOF_SLIPWAY_RUNTIME_ENV_ALLOW_INSECURE_HTTP	removed	The bootstrap record's allowInsecureHttp.
PROOF_SLIPWAY_RUNTIME_ENV_REQUEST_TTL_MS	removed	60 s default.
PROOF_SLIPWAY_RUNTIME_ENV_NONCE	removed	A random nonce per request. config.nonce stays as a code option.
PROOF_SLIPWAY_RUNTIME_HEALTH_INTERVAL_MS	removed	The bootstrap's x.h.i. The runtimeHealth.intervalMs option still applies.
PROOF_SLIPWAY_RUNTIME_HEALTH_INITIAL_DELAY_MS	removed	The bootstrap's x.h.d.
PROOF_SLIPWAY_RUNTIME_DIAGNOSTIC_SEND_TIMEOUT_MS	removed	The bootstrap's x.h.to, and the diagnosticSendTimeoutMs option.
PROOF_LOCKBOX_BOOTSTRAP	no longer read	LISKOV_LOCKBOX_BOOTSTRAP only.
PROOF_LOCKBOX_URL, _APPLICATION_ID, _GRANT_ID, _POLICY_DIGEST, _DEPLOYMENT_ID, _SECRET_IDS, _REQUESTED_SECRET_IDS, _FILE_BASE_DIR	removed, with the whole expanded-config fallback	The compact LISKOV_LOCKBOX_BOOTSTRAP (its f field carries the file base directory), or the signed secret bootstrap.
PROOF_LOCKBOX_ALLOW_INSECURE_HTTP, _REQUEST_TTL_MS, _OVERWRITE_ENV	removed	The compact record's allowInsecureHttp. A 60 s TTL. An env-delivered bootstrap never overwrites, and a signed one always does (unchanged).
SLIPWAY_HOME	renamed LISKOV_HOME	The default directories $HOME/.slipway and /tmp/slipway are unchanged.
PROOF_ACURAST_JOB_ID, PROOF_ACURAST_PROCESSOR_ID, PROOF_ACURAST_ENCRYPTION_PUBLIC_KEY, SWITCHBOARD_MANAGED_JOB_ID, SWITCHBOARD_MANAGED_PROCESSOR_ID, SWITCHBOARD_MANAGED_ENCRYPTION_PUBLIC_KEY	removed from the identity defaults	_STD_.job.getId(), _STD_.device.getAddress() and the encryption-key lookups.

The signed payload domains and default state directories are unchanged. ACURAST_* identity names remain in Acurast's namespace. LEGACY_LOCKBOX_BOOTSTRAP_ENV remains exported but is no longer read; SLIPWAY_HOME_ENV_NAME remains exported as a deprecated alias for the LISKOV_HOME constant.

Contains BKLG-20260922-91r7 and BKLG-20261002-qihk. The package version and its release tag both identify 0.3.35. Install through the GitHub release/tag; npm publication is not part of this release.