# Changelog

Short commit hashes cited in this repository refer to the pre-publication development
history, which is not public. This public history starts at the import of 2026-10-01.

## v0.1.1 — 2026-10-04

- **Status:** first signed release (SSH-signed tags, `release.json`); GitHub pre-release; wire `sigelo/0` may change until
  v0.2; the keeper is stagenet-only and unaudited.
- **npm:** first publish, all five packages at 0.1.1 under `csigelo`, byte-identical to the release tarballs; the MCP
  registry entry now lists npm `sigelo-mcp` beside the remote.
- **Mirror:** `site/deploy/mirror-release.sh` carries `release.json` (checked against the tag and SHA256SUMS), so
  `release/verify-release.sh <tag>` works from sigelo.io.

- **MCP:** `sigelo_forget_issuer` (CLI `forget-issuer`) drops a retired issuer's attestations and genesis from the identity file: holder-side, after an out-of-band rotation notice (SPEC §5).
- **World:** issuer rotated 2026-10-03 after a seed exposure: new DID in SECURITY.md, chain at `/world/rotations.json`,
  old DID retired; the 24 h re-issue never replays a retired issuer's attestation.
- **Provenance gate (prototype):** signed instructions (`ctx: "sigelo/instruction"`) gate shell and write tools in
  Claude Code and Hermes; root-owned hooks, taint after reads, deny on error (`6df8a59`, `be75ec3`).
- **CI:** the `DEVICE_STRINGS` secret is deleted; CI checks generic shapes only; the identity gate runs locally
  before every push (`a1b944e`).
- **Releases:** mirrored at `sigelo.io/releases/<tag>/` against SHA256SUMS; from v0.1.1 an SSH-signed tag plus a
  `release.json` attestation, checked by `release/verify-release.sh` (`62407e2`, `709f412`).
- **Site:** `/privacy` with terms; SECURITY.md lists the official channels; mail is receive-only, replies go over
  SimpleX (`62407e2`, `709f412`).

### 2026-10-02
- **Licence check:** vendor genesis pinned, vendor chain verified from the licence, longest-chain rule, term ≤ 3 years; legacy files warned (`dba9b9e`). Vendor ceremony procedure published (`release/vendor-ceremony.md`).
- **Spec coverage:** vectors for §7.2 `hash(next_genesis) == next` and a sixth-key challenge test in both suites (`9cd82d0`).
- **ts = go messages:** 2,960-case mutation differential, 0 result or message differences after `4e1c8d2`.
- **Hygiene:** SPDX MIT headers on every source file (`fe4e8ac`); spend suite runs offline with `SIGELO_TEST_NO_LIVE=1` (`00af8e4`).
- **Reproducible tarballs:** gzip normalised so SHA256SUMS no longer depend on the Node version (`8e197df`).
- **Docs halved:** every public README cut to commands-first with budgets enforced in CI (`docs-test/check-budgets.mjs`).
- **Drill 2:** freeze in 6 s, keeper identity recovered offline from the root, fees 2.4 %; freeze.sh now kills every keeper on the policy (`bce9114`, `6099880`).
- **Gate pass 3:** orphan-process kill, background denylist, TUI paste fix, session-scope taint, HARDENING.md (`297501c`).

## v0.1.0 — 2026-10-02 (draft)

- **Status:** first tagged release (GitHub pre-release, unsigned); wire `sigelo/0` may change until v0.2; the keeper is
  stagenet-only and unaudited.

### 2026-10-02, up to the tag

- **World:** `sigelo.io/world/` issues §5.2 challenges, `admission: "open"` and 90-day self-reported conformance
  attestations; `POST /world/verify` returns §9.1 (`5191235`, `4088ce2`).
- **MCP:** remote server at `https://sigelo.io/mcp` (Streamable HTTP), one tool, `sigelo_verify` (`4088ce2`).
- **Accept:** `accept/` drop-ins for node, Python and Go: `challenge(did, ctx)` and `accept(challenge, answer,
  bundle)` (`3d741c6`).
- **Hermes:** adapter through MCP config, no code (`7475a5c`); upstream A2A authenticator hook proposal drafted
  (`1cbfaf6`).
- **CI:** a missing `DEVICE_STRINGS` secret warns instead of failing (`d5e1428`).
- **Site:** eight pages under word budgets the site test enforces; Markdown twins via `Link: rel=alternate`,
  IndexNow, AI crawlers in robots.txt (`978fad6`, `6273d0e`).
- **Analytics:** from nginx logs only; addresses cut to /24 or /48, 30-day retention, no cookies, no third party
  (`83bcac7`).

### 2026-10-01

- **Keeper:** `sigelo-spend init`, `doctor`, `receipts export`, `licence`; paid verbs need a licence attestation
  verified offline; `init` requires a wallet-rpc binary (`17e7787`, `eb9f428`, `194fd86`).
- **Keeper recovery:** `init` commits the keeper genesis to the root recovery key; `sigelo-spend init --adopt`
  restores the same DID after a compromise (`164b8c4`, `cc0a83c`).
- **Keeper:** builds wait 180 s; a build outliving its wait answers `TRY LATER wallet_slow` and is never relayed
  (`98ea994`).
- **Soak:** `freeze.sh`/`unfreeze.sh` hold a burnt keeper down; drill fixes to vault sync and `gen-keys.mjs`; a test
  licence, warned 30 days before expiry (`c38b9e3`, `1b574ac`, `5b4a488`).
- **Kit:** `sigelo-recovery-kit` 0.1.0: offline ceremony, printed procedure, drill schedule and grader; the vendor
  never holds a key (`ad970a5`, `9f75a7d`).
- **Site:** static, agent-first, generated from the tree: `.md` twins, `llms.txt`, `index.json`, JSON-LD; `/contact`
  (`0a4381f`, `4bf622b`, `3c2d364`, `a52163e`).
- **Deploy:** `site/deploy/` server setup, atomic deploy with rollback, live checks; sigelo.io live (`ca39b0e`).
- **Release:** public at `github.com/csigelo/sigelo`; `release/publish.sh` update mode adds one `sync:` commit
  (`8a024b3`).
- **CI:** green on Linux, macOS and Windows, Node 22 and 24; Windows skips systemd and POSIX-mode checks (`1bcb01f`,
  `0fbd592`, `a71fb06`).
- **Names:** domain sigelo.io, account `csigelo`, Go module `github.com/csigelo/sigelo/go`, mail contact@sigelo.io
  (`8cde486`, `f85a42a`, `724a903`).

### 2026-09-29 (evening)

- **Docs:** QUICKSTART gives the exact `ed25519-test` `bind()` call, a Timestamps paragraph and the
  recovery-beats-`iat` example (`a795275`).
- **Ceremony:** `--human` shows the 25 words on the terminal only; `restore --words` reads a file or stdin;
  `--import` needs `--i-know-this-seed-was-cold` (`278e87c`, `29a0402`).
- **Monero:** FCMP++/Carrot keeps the 25-word root (ROADMAP §2); the wallet-rpc canary accepts 1.30–1.33; unused
  `get_tx_key` removed (`085bf06`, `ba825f3`).
- **Export:** placeholders replace real stagenet subaddresses and oracle signatures; host specifics removed from
  docs (`5e96d29`, `77a7be4`, `78878b6`, `da03f18`).

### 2026-09-29

- wire: an envelope has exactly its defined keys; an extra key discards an item and is fatal in a rotation
  (`bcee912`, SPEC §3.1; vectors `binding_envelope_extra_key`, `fatal_rotation_envelope_extra_key`).
- **Keeper:** token changes apply per request, no restart (`37190c5`); `SIGELO_DAEMONS` switches daemon after three
  connection failures or a 20-minute stuck height (`e9b4970`).
- **Spec:** a duplicated attestation counts twice; a retired world key keeps minting valid attestations until they
  expire (`5cde1ac`).
- **Soak:** hourly `check.mjs --notify` alerts; agent ticks wait for NTP sync (`246fd66`, `4ec79b2`).
- **Crosscheck:** JCS, base58, addresses, 25-word seeds and Ed25519 against third-party references; no divergence
  (`0a17aa3`).
- **Sim:** dishonest worlds, nested delegation and live policy edits (`ecb7f17`, `4d14292`, `ddff500`).
- **Release:** `release/build.sh` builds tarballs, static `sigelo-verify` and reproducible SHA256SUMS;
  `pack-test.sh` installs them (`20fd24e`, `7cdf4ea`).
- **Conformance:** `sigelo-verify --conformance --impl '<command>'` grades a foreign implementation; weekly
  wallet-rpc canary (`c4cef7d`, `4e1a5aa`).
- **Docs:** THREAT-MODEL §3.7a and INCIDENT §1 cover a wrong clock and an offline host (`7cefd5d`).

### 2026-09-29 (soak incident #4)

- **Keeper:** refuses to sign (`503 clock_behind`) on a clock behind its build floor or log; new TRY LATER
  `wallet_offline`; wallet `store` after each relay (`7a91fdb`, `0fc50f5`, `f98b8cf`).
- **Soak:** outage ticks count as `outage`, not MISMATCH; `check.mjs` flags no payment in 2 h, a stuck height or a
  bad log clock (`9e5e35f`, `90de821`, `efa9f33`).

### 2026-09-24, hostile-JSON differential

- wire: D1 JSON nesting is bounded at 512 levels (`425d2bb`, vector `raw_fatal_depth_513_in_claims`).
- wire: S1 `created` is exactly `YYYY-MM-DDTHH:MM:SSZ`, a real date (`bc7165a`, vector
  `fatal_genesis_created_leap_second`).
- wire: S2 key slots hold canonical points not of small order (`731483b`, vector `fatal_genesis_key_all_zero`).
- wire: S3 the recovery commitment is `sha256:` + 64 lowercase hex (`63cceed`, vector
  `fatal_genesis_recovery_uppercase_hex`).
- wire: S4 a nonce is `z` + 1 to 63 base58btc digits (`c5faf69`, vector `fatal_genesis_nonce_z_hex`).
- wire: S5 noncharacters are a parse error (`001ecfa`, vector `raw_fatal_noncharacter_in_claims_value`).
- **Verifiers:** base58 lengths bounded before decoding; TypeScript readers decode bytes fatally; no argument spread
  over data; parse-error offsets agree (`1380098`, `b0d98d8`, `6498291`, `093abe0`).

### 2026-09-24, audit before the public export

- wire: A1 two identical rotation entries are a fork (`7c285ea`, vector `fatal_duplicate_rotation_is_fork`).
- **Verifiers:** invalid UTF-8 rejects the whole document in ts as in go (`2d9227e`); the 1f916 adapter checks the
  full genesis shape (`8fa96e0`).
- **Export:** `release/publish.sh` makes a single-commit export; its identity gate works on busybox and holds no
  pattern (`41611f6`, `175be8f`).
- **Soak:** genesis nonces as bytes; a compat guard refuses a redeploy the verifier would reject (`200aeb5`).

### 2026-09-17 to 2026-09-23 (wire `sigelo/0`)

- **Spec:** bundles carry `issuers`; chain cycles rejected; §3.1 field tables; §5.2 challenge; §6.3 invoices; §9
  takes `now` and returns §9.1 (`ef829d7`, `f1aba94`, `4de92b8`, `01d6347`).
- **Spec:** a malformed attestation or binding discards that item, identity faults stay fatal; §3.1 field types
  enforced in both verifiers (`ceab548`, `e658348`).
- **Spec:** `monero` bindings accept subaddresses, refuse integrated addresses and SigV1; points decoded as Monero
  decodes them (`c4821e9`, `fcb8c54`).
- **Implementations:** TypeScript; Go reference verifier with one dependency; vector generator in TypeScript; Python
  removed (`ff981a8`, `ea0b9a4`, `c4da3b6`, `00193b0`).
- **Monero:** MONERO.md design; Keccak, base58, addresses, subaddresses and SigV2 in ts and go (`05cf11c`,
  `4bdb430`, `6aea9c9`).
- **Keys:** the root is a Monero 25-word seed whose own wallet is the cold vault; keeper roots and agent identities
  by HKDF, ts = go (`feb7e96`, `846b7cd`, `4f85df7`).
- **Ceremony:** `sigelo-offline ceremony|restore`: age backup, fingerprint, keeper packages (`c2202d8`).
- **Keeper:** `sigelo-spend`: two-phase relay, fees inside caps, per-agent policy entries, `ref` idempotency
  (`7ae0836`, `3f642bd`, `85b0e27`).
- **Keeper:** `sigelo-wallet` agent verbs, delegation, approvals above `approval_above`; run end to end on stagenet
  (`fdaba3f`, `9e2756f`, `12408e6`, `8e554aa`).
- **Keeper:** the lane cannot freeze, names are never reused, one keeper per directory; `spend.lock` survives
  reboots; consistent API errors (`57b57a4`, `44c614e`, `3b01de1`).
- **Adapters:** 1f916 world side; moadim agent sidecar with Monero commands (`4de92b8`, `d7d3349`, `7ae0836`).
- **Docs:** QUICKSTART and the mock world `examples/world.mjs` (`cd450a8`, `38e9c76`).

## v0.1 draft (wire `sigelo/0`) — 2026-09

- **Spec:** hashed genesis; `"sigelo\n" || JCS(body)` signing; no floats; recovery beats `iat`; commitment carried
  forward; forks rejected; unproven bindings labelled (`cc2349d`).