Add hardened MPC ceremony and Relay integration - #5

Draft

mellowcroc wants to merge 79 commits into

Emurgo:mainfrom

zksecurity:main

Commits on Aug 14, 2026

Reject unusable Ed25519 identity public keys
mellowcroc
committed
06410b6
Accept more than two audits in a production decision
mellowcroc
committed
096bfd8
Report chain replay progress on stderr
mellowcroc
committed
2e90bea
Add audit change list and a local ceremony runbook
mellowcroc
committed
bc0ab28
Reject untrimmed whitespace in attested string fields
mellowcroc
committed
a37c27f
Keep on-curve validation when skipping subgroup checks
mellowcroc
committed
ea03eee
Bound untrusted decode paths against allocation DoS
mellowcroc
committed
e9743f5
Clone before handing retained states to gnark
mellowcroc
committed
44cf9f9

Commits on Aug 17, 2026

Reject characters that make a name render as other than its bytes
mellowcroc
committed
150abd8
Track the ceremony attack/defense inventory
mellowcroc
committed
07dd99a
Derive the beacon round from the clock sampled after replay
mellowcroc
committed
bb39e3d
Report replay progress from the phase 1 seal
mellowcroc
committed
6e2529e
Report stage progress from phase 2 initialization
mellowcroc
committed
d85ee0d
Derive the public evidence vector at the pinned golden path
mellowcroc
committed
b921a60

Commits on Aug 18, 2026

Commits on Aug 19, 2026

Merge pull request #1 from zksecurity/audit/ed25519-key-validation
mellowcroc
authored
8076f9e
Merge pull request #4 from zksecurity/feature/mpc-relay-ops
mellowcroc
authored
c57b898
fix untrusted decode preflight bypasses
mellowcroc
committed
411adc2
Merge pull request #2 from zksecurity/harden/untrusted-decode-dos
mellowcroc
authored
5c4d422
add MPC ceremony release gates
mellowcroc
committed
1aca232
remove ineffectual replay assignments
mellowcroc
committed
528f556
Merge pull request #6 from zksecurity/agent/mpc-release-gates
mellowcroc
authored
5f6dce2

Commits on Aug 20, 2026

Commits on Sep 4, 2026

Commits on Sep 7, 2026

Commits on Sep 8, 2026

Commits on Sep 9, 2026

Commits on Sep 10, 2026

Allow single ceremony observers (#25)
mellowcroc
authored
97eed96

Commits on Sep 11, 2026

Fix single-auditor release CLI gate (#26)
mellowcroc
authored
3394553
Allow short future beacons in rehearsals (#27)
mellowcroc
authored
e67374f
Align rehearsal helper with shared beacon minimum (#28)
mellowcroc
authored
df965bd

Commits on Sep 12, 2026

fix: make ceremony output recovery atomic
mellowcroc
committed
8500f65
fix: create custody export parents safely (#30)
mellowcroc
authored
7ba406f

Commits on Sep 15, 2026

Add storage-first checkpoints and optional assurance policy (#31)
mellowcroc
authored
47bec56

Commits on Sep 17, 2026

Simplify the V4 storage-first ceremony protocol (#32)
mellowcroc
authored
0a6ec7f
Fix final release discovery inventory (#33)
mellowcroc
authored
9333ad0