Last Week: High-level reviews. Transaction chaining design document + started implementation.
Coming Week: Scrutinize the post-quantum libp2p fork; review medium-severity issues with Thorkil.
Thorkil Værge
Last Week: Released Version 0.14.3 (including mempool updates and viewing keys). A security review of the software and cryptography stack using Claude 5, which confirmed cryptographic integrity and system monetary soundness while identifying medium-severity issues in Neptune Core.
Coming Week: Review the medium-severity issues with Alan; prepare Version 0.14.4 to ship low-hanging security fixes ahead of planned succinctness work.
3. Technical Discussion
Transaction Chaining & Architecture: Implementation is underway starting at the TASM layer. Discussions centered on the recursive definition challenge regarding the single proof program hash—specifically whether the chain transaction proof must encode the single proof digest. To ensure access to low-cost proof generation, the legacy transaction pipeline will be maintained alongside the new chaining pipeline.
Security & Post-Quantum Encryption: A 36-hour security evaluation confirmed that the core cryptography stack maintains monetary soundness with no critical flaws.
Post-quantum transport-layer encryption: (e.g. via a post-quantum libp2p fork) was assessed as low priority: monetary soundness is enforced at the blockchain layer rather than the transport layer, so protecting against transport-level man-in-the-middle attacks offers negligible security benefit.
Version 0.14.3 Release Features:
Mempool Improvements: Proof collections are no longer dropped from the mempool when unsynced.
Viewing Keys: Generation keys now include viewing keys, enabling users to view incoming transactions without granting spend authority or exposing outgoing transactions (which still require receiver pre-images).
4. Updates and Announcements
Version 0.14.3 Released: Published with updated mempool proof retention and viewing key integration.
Upcoming Version 0.14.4 Release: Scheduled as a quick-follow update to apply low-hanging security fixes from the recent audit prior to starting major work on recursion.