Repository navigation

feat(protocol): wire v2 without signatures, gateway-served challenge profile - #319

Merged

Mathis (echobt) merged 56 commits into

mainfrom

forge/no-signatures

Oct 19, 2026

Merged

feat(protocol): wire v2 without signatures, gateway-served challenge profile#319
Mathis (echobt) merged 56 commits into
mainfrom
forge/no-signatures

Commits on Oct 19, 2026
- refactor(trust): drop the signed trust-root ceremony; the gateway serves the profile
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  3ba4fba
- feat(validator): only the weight-setting role needs a validator hotkey
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  034a889
- feat(cli): keep keygen for challenge leaf keys
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  1e46373
- refactor(profile): rename trust root to challenge profile in code, checks and config text
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  e2f6cd7
- docs: describe the gateway-served challenge profile; drop the trust-root ceremony
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  cccfa5a
- test(gateway): validator without local trust uses the gateway-served profile; pin mismatch refuses
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  27d6b33
- docs,deploy: drop gateway/leaf keys, keygen and signature docs for wire v2
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  4c24c76
- Remove signatures from leaves, bundle and gateway; wire format v2
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  b463ce4
- Remove cortex keygen command
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  6606ebb
- Refuse a v1 gateway store that only holds trust profiles
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  33d2cf8
- Dissent unsupported version for a v1 bundle before decoding it
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  c699f87
- docs: remove stale gateway/leaf-key mentions, document operator-bearer forge risk
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  3951660
- Test the strict leaf epoch check of verify_inputs
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  b6de502
- Refresh wire-format docstrings for v2
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  0d534b9
- Persist trust-version watermarks only after verification
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  6af357f
- Test the validator-reconcile CLI end to end
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  97fd3a9
- Reject a non-integer profile epoch/version with a clear error
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  fe4ecc6
- docs: never set introduced_epoch in the future; third challenge needs challenges_version >= 3
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  f03b843
- feat(gateway): require a separate bearer for raw leaf intake
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  d846671
- feat(validator): add an operator-only watermark reset command
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  6263a2a
- docs: describe raw intake under the separate intake bearer
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  0f594d3
- fix(cli): report a sqlite failure in watermark reset without traceback
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  927eb55
- fix(validator): fail fast on an unreadable hotkey or half a wallet
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  6dc89eb
- fix(validator): say the chain preflight is skipped without a hotkey
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  f8f10a9
- docs(deploy): add the validator to weight-setter upgrade note
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  6c6b843
- docs(deploy): keep consensus.key out of the verify-only identity dir
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  2d8f3cb
- docs: drop the last signed-profile and leaf-signing claims
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  d9b2885
- test(config): pin the 503 for a placeholder challenge profile
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  3151f6e
- fix(protocol): cap measurements_version before the watermark moves
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  05bd7c2
- fix(gateway): refuse raw intake while an epoch is being sealed
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  7a8ce56
- fix(http): re-check bearer distinctness and length on every request
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  5e1a0e3
- fix(cli): open the watermark-reset target read-only before writing
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  9e504c4
- fix(config): validate challenge profile field types before decoding
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  a08d5f6
- fix(deploy): give the weight-setter its own identity directory variable
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  748eaae
- docs(changelog): describe algorithm 2 activation in the past tense
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  d909255
- fix(gateway): scope the sealing refusal to the epoch being sealed
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  922112a
- fix(cli): keep watermark-reset preflight free of sidecars and schema
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  1a7754f
- fix(deploy): check the operator env file and real volume names
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  5fb36cd
- fix(protocol): cap challenges_version like measurements_version
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  b3ec7db
- docs(changelog): explain the version cap upgrade consequence
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  3eda466
- test(master): pin the intake refusal across the whole emit window
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  dfad4d3
- fix(config): map a deeply nested challenge profile to the clean 503
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  1826891
- fix(cli): give watermark-reset fixed reasons for unusable state files
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  60f7ac7
- fix(cli): read the watermark-reset preflight without sidecars
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  1161319
- fix(deploy): read validator env values as compose does and refuse nesting
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  4145240
- docs(security): state the 32-byte bearer minimum and per-request check
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  3196cc3
- test(cli): cover watermark-reset --netuid on a journal without netuid
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  5a330f7
- test(master): pin the 32-byte bearer boundary on a rotated intake file
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  94a680a
- docs(config): describe profile reload and cautious restart in comments
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  3d4e315
- docs(deploy): describe profile activation as cautious, not required
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  b05daf0
- docs(validator): state the reset lock guard limits and drop gateway key
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  cb8179d
- docs(changelog): describe the master restart on share change as caution
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  9eec8ea
- docs(review): describe wire v2 rules in coderabbit and AGENTS
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  aed7efe
- fix(deploy): refuse nested validator identity directories
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  1c4c1f4
- test(validator): skip read-only watermark reset cases as root
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  71b0cca
- docs(validator): cover both profile version caps and restart wording
  
  Mathis (echobt)
  and
  Claude (claude)
  committed
  b50cb7a

Commits

Commits on Oct 19, 2026