Repository navigation
v0.6 🛡️ — the zkVM, recursion-VM and aggregation fixes, and the v0.6 hardening
v0.6 🛡️ — the zkVM, recursion-VM and aggregation fixes, and the v0.6 hardening
🔍 The 27–28 September reviews (the internal Recursion VM security report v2, the zkVM and ISA
review, the automated and unified scans) and this session's seven-part zk scan and rescan. Every
fix red-first, each half reverted to confirm, the red quoted in its commit. Circuits pin 4bb4d9a.
🔐 Live on chain 15 at this roll
COV-2/INT-6 Small private tables were readable from the FRI openings: the prover floors input,
keccak and sha256 tables at 2^7 rows; nodes refuse to pool a call below it.
CPUV-1 The bundle's verifier key has its own cache; warm-ups run one at a time.
VERIFIER-1 Machine::verify refuses a non-zero commit-phase proof-of-work word (chain 15's
98 825-block history re-verified clean under this rule before tagging).
HB-1 HB-3 An invalid ML-KEM key or a full commitment tree is a refusal, never a panic.
CPU-1 INT-5 VERIFIER-2 ZKV-11 Pool policies now (uncallable deploys, canonical proof shapes,
the pc window over the floored program table).
#41 #47 The node raises its open-files limit; the ssh -A scripts refuse to run.
🧭 At the next genesis cut (rand-node genesis --hardening-v6 --bundle-guest v2)
hardening_v6 One switch: all of the above as validity rules, plus the call binding (INT-4) and
the program-table floor.
Guest v2 The branch-free bundle guest (INT-2/GV-1): the proof no longer shows which input
slots are real or the spent leaves' popcounts. Same statement and proof shape.
💤 Dormant (aggregation stays off everywhere)
rVM RVM-1, OPCODES-1, V-OPCODES-1, ZKR-4, OPCODES-4, ZKQ-3 — four ways to forge rVM
memory closed; the aggregate program digest is unchanged.
Interface INTERFACE-1…7, IFACE-6…9, V-INTERFACE-2, ZKQ-1/2/4, AGG-TRUNC-1.
↩️ Deferred to chain 16 (they change verifier keys): LogUp blinding, in-circuit 32-bit range
checks, POSEIDON2 padding, key_derivation_v2. Open: #45 end-to-end forged aggregate (≥64 GB).
Linux x86_64 binaries built on E from the tag (RAND_BUILD_SHA=12a56d1):
2be892da58751ad92570315804f7a1ff28812cc21f9a89cf2f4823a03d10e793 rand-node
d7d9f8b91c7a8527eae1e71f8503e448187bd1c49f792eda1f8fc43845b73071 rand
Reports: Rand_zkVM_Bug_Fixes_Report_2026-09-28.pdf and the four updated scan reports (internal).