Kaspa SilverScript Studio v0.2.8
This release tracks official kaspanet/silverscript@6f9e078b1d8b5389212755183b592704de99fea5 and hardens portable covenant authorization metadata.
Compiler compatibility
- The default compiler is now
6f9e078, with SHA-256 verification. cb34aa5remains available for Studio 0.2.7 projects and2a3961cfor older reproducible builds.- Compatibility review detects runtime
byte(...)casts and ambiguous scalarint(byte)conversions. Studio never guesses signedness.
Versioned operation packages
- New lifecycle and atomic
.ssinvitefiles include a canonical v1 covenant descriptor. - The descriptor commits to CAIP-2 network, program SHA-256, covenant ID, ABI, state layout, control-principal declarations, and operation authorization principals.
- Import recomputes those commitments and rejects tampering. Legacy descriptor-free packages remain readable with a visible warning.
TN10 experiments
- A new Groth16 proof-release template uses official
g16.verify, exact fixed-recipient payout, explicit bounded fees, and local engine preflight. - Kaspa x402 is documented as a pinned alpha interoperability profile. Its current upstream escrow is not exposed as deployable until it is ported to current syntax, vectors are reproduced, and adversarial lifecycle tests pass.
SilverScript and the new template remain experimental. Mainnet stays fail-closed; compilation and preflight are not independent security review.
中文说明
本版跟进官方 kaspanet/silverscript@6f9e078b1d8b5389212755183b592704de99fea5,并强化可携带 Covenant 操作包的授权元数据。
编译器兼容
- 默认编译器升级到
6f9e078,继续校验二进制 SHA-256。 - 保留
cb34aa5复现 Studio 0.2.7 项目,并保留2a3961c复现更早项目。 - 兼容性检查会发现运行时
byte(...)和可能把标量 byte 传给int(...)的写法;Studio 不会自动猜测 signed/unsigned 语义。
版本化操作包
- 新生命周期和原子
.ssinvite文件包含 canonical v1 Covenant Descriptor。 - 描述符绑定 CAIP-2 网络、程序 SHA-256、Covenant ID、ABI、状态布局、控制主体声明和本次操作授权主体。
- 导入时重新计算承诺并拒绝篡改。没有描述符的旧包仍可读取,但会醒目警告。
TN10 实验功能
- 新增使用官方
g16.verify的 Groth16 证明释放模板,固定收款钱包、精确守恒资金、限制显式手续费并执行本地引擎预检。 - Kaspa x402 以固定 alpha 提交的互操作档案加入。上游托管合约在完成新语法迁移、向量复现和对抗性生命周期测试前不会显示成可直接部署模板。
SilverScript 和新模板仍属实验功能。主网继续失效关闭;成功编译和预检不能替代独立安全审查。