Readiness-gated delivery. H-001 Testnet-10 canary: 100% complete and independently evidenced. Core-network rollout: 84–88%. Complete roadmap vision: 50–55%. No fixed release date is claimed.
95d05cc; no live model evidence or production authority28da2d4: development-only owner-pin manifest-to-caller-observation consistency for one Testnet-10 RuleStorage UTXO, with unique outpoint, covenant, script, amount, block-DAA, checked maturity-proxy, and exact constructor-byte checksbbe7efb: explicit operator-invoked Development/Testnet-10 rule-sync preflight/run CLI with private no-symlink config and signed-envelope files, ASCII TOML configuration, offline non-mutating preflight, loopback-IP-literal RPC/IPFS, redacted status, and SIGINT/SIGTERM cancellation; CI 31950806131, Security 31950806118, and Pages 31950805653 pass; no autonomous authority, wallet, chain write, key governance, persistent sequence authority, deployment, Mainnet, or production readiness13c1812: test-only real-binary loopback E2E evidence covers offline/connected preflight, private checkpoint commit, SIGTERM/SIGINT drain, restart exact replay, rollback/equivocation rejection, and malformed, timeout, or disconnected peers; CI 31978132036, Security 31978132044, and Pages 31978131647 pass. This is local Development evidence only, not public Testnet operation, independent RPC/IPFS truth or availability, deployment, Mainnet, or production readinessfile_sha256 production from exact caller-supplied bytes plus typed scope, with Python validation of shared vectors; no path API, transport authorization, external provenance, privacy approval, or proof bindingbyte_pattern production from exact caller-supplied bytes, checked offset, boolean wildcard mask, and typed scope, with mandatory local-only review_required_v1 and Python validation of shared vectors; no pattern/path API, transport authorization, external provenance, privacy approval, or proof bindingapi_import production from exact bytes plus a checked sorted/deduplicated import index; 16 MiB and 4096-dynamic-symbol parser limits, internally derived scope, mandatory review_required_v1, and independent Python parsing of shared exact-byte vectors; no path/string/generic builder, transport authorization, external provenance, privacy approval, or proof bindingapi_import boundary for exact PE32/PE32+ bytes, with 16 MiB, 4096-import-descriptor, and 4096-thunk-entry limits, fail-closed ordinal/grammar checks, fixed windows/pe scope, architecture-specific Rust coverage, and independent Python parsing of a synthetic shared PE32+ vector. Library names never become observables; no path/string/generic, transport, proof, analyzer, wallet, chain, or promotion behavior.RelationManifest-v2 parsers plus an atomic raw-manifest-anchor/network/domain/public-input compatibility binding; Groth16 verification, approved artifacts, transport, analysis, promotion, and rollout remain separate gatesverify-v2 binds owner-only manifest/relation-source/verifying-key bytes and performs real canonical BN254 verification over binding-derived inputs; runtime loads no proving key, all generated artifacts are test-only, and production relation/key/ceremony approval plus atomic acceptance remain openverify-v2 under bounded, scrubbed, shell-free, fail-closed process control; its receipt is data only and no SQLite access or approval consumption occurs/prometheus/threat-hint/2.0.0 channel, trusted-network parsing before owner-only IPC, trusted session/time resolution before governed promotion, strict accepted/rejected/busy acknowledgements, shared admission budgets, and separate-process same-host evidence. PR #168 published exact main 7c62608; Prometheus CI 31645624623, Security Audit 31645624601, and Pages 31645623547 pass. No production proof approval, semantic/actionable analysis, disclosure, public multi-host claim, model/YARA, wallet, chain, reward, or deployment effect is added.8d8e29c; CI 31650123073, Security 31650123055, and Pages 31650122593 pass. Structural validation only; semantic quality, actionable analysis, and production authority remain open.1107b11; CI 31654308969, Security 31654308964, and Pages 31654308875 pass. No source, model, scan, submission, publication, chain, reward, deployment, semantic-quality claim, or production authority is added.396d347; CI, Security Audit, and Pages pass on that SHA. No real sample, file/process scan, governed wiring, actionable authority, or production-quality claim is added.a28ad00; CI 31662874366, Security Audit 31662874399, and Pages 31662873670 pass. No product runtime or authority path is added.6c39af5; Prometheus CI 32675287618, Security Audit 32675287530, and Pages 32675287300 pass. GH-226 implements one Development-only Light Client v1 ThreatHint sender over the existing Guardian P2P stack. Strict owner-local files, offline preflight, one static literal-loopback QUIC peer, exact canonical bytes, bounded redacted accepted/duplicate/rejected/busy/transport-failure outcomes, and real same-host binary evidence are covered. This adds no proof or membership authority, public multi-host operation, wallet, chain, reward, deployment, or production readiness.fba8bb4 provides the tested capability for one explicit Development/Testnet-10 direct literal-IP/UDP/QUIC-v1 route with strict unsafe-route rejection and a non-authorizing evidence boundary. At 2026-08-26T23:36:04Z (2026-08-27 operator-local), one operator-attested run from source commit 27e8b02 delivered one canonical hint between two distinct controlled hosts with rejected/rejected, zero retries, no persistence and acknowledgement authority none. The temporary sender-restricted UDP rule was removed immediately. The redacted evidence does not independently prove host separation and is not public-network, relay/v2, deployment or production evidence.b450740, exact main f146fb2, adds one Development/Testnet-10-only Light Client ThreatHint-v2 sender for an owner-prepared canonical shared payload. Strict owner-only files, separately trusted network parsing before identity/network, offline preflight, one-shot Guardian v2 delivery, redacted outcomes, Beta/Mainnet gates and unchanged v1 behavior are locally tested, including the real binary over same-host QUIC. Exact-main CI 33272578070, Security Audit 33272577951, and Pages 33272577407 pass. It adds no proof generation or approval authority, public/multi-host v2 evidence, deployment, Mainnet or production operation.912d96d, implements and locally tests repository-only preparation for one later controlled distinct-host Development/Testnet-10 ThreatHint-v2 attempt: challenge-bound role-specific operator attestations over the source commit, actual executable digest, exact canonical payload digest, exact v2 protocol, shared observed UTC time, actual rejected status, one attempt, zero retries and no persistence, with strict owner-only/no-symlink files, the exact 9,265-byte Rust wire bound, atomic no-clobber record output, a closed redacted verifier and CI test wiring. Exact-main CI 33279351831, Security Audit 33279351822, and Pages 33279351387 pass. No real GH-238 remote run has occurred and no GH-238 evidence record exists; host separation is not independently proven. This repository preparation is not a deployment or remote demonstration and adds no port, firewall, host, IAM, wallet, chain, deployment, Mainnet or production action or authority; a later real run requires separate explicit authorization.d468426; CI 31340112225, Security 31340112204, and Pages 31340111625 pass95d05cc, with CI, Security, and Pages green; no pull, live inference, provenance, calibration, or authorityaeecffb; CI 30863940497, Security 30863940502, and Pages 30863940053 pass. This proves structural assignment consistency only, not source authority, key ownership/rotation, Sybil resistance, chain attestation, or production readiness5cb132c670d1e7771ccaf6dab2ddf5b1a6fd905a: local ballot-session establishment owner-loads one GH-147 source exactly once, checks a separately trusted network and expected epoch, derives the snapshot and public BIP340 signer map internally, and removes the public caller-built context registration path without changing ballot bytes, session digests, replay behavior, or ensemble math. Exact-main CI 33433012614, Security Audit 33433012605, and Pages 33433011653 pass. Epoch is an identity pin only; external membership authority, key ownership/rotation, Sybil resistance, multi-host operation, L1 attestation, and production trust remain open.f12e821bb492caae3b94e5b3c882488eb7f2982d: canonical BIP340-signed transitions bind exact previous/next source digests, advancing epoch, bounded validity and nonce into an owner-only durable ledger. New ballot sessions use only the stored current source under the same lock. Rollback, same-epoch equivocation, replay, clock rollback, source substitution, restart and concurrent duplicates fail closed. CI 33452085421, Security Audit 33452085419, and Pages 33452084065 pass. This is owner-pinned public verification only, not external authority, key ownership/rotation, Sybil resistance, L1, multi-host or production trust.5920cb4bb737376977f762beb0d5e3108519c7a0: the durable current key authorizes one gapless successor and the proposed key independently proves possession under a separate BIP340 digest domain. Current membership, validity and nonce bind the atomic rotation; exact schema-v1 ledgers migrate transactionally to v2 and later membership transitions use only the durable current key. Prometheus CI 34031999904, Security Audit 34031999907, and Pages 34031999575 pass. This owner-local mechanism has no signer/private-key path and does not prove real-world key ownership, external/decentralized membership authority, Sybil resistance, L1, public multi-host operation, deployment or production trust.| Role | Target hardware | Evidence boundary | Status |
|---|---|---|---|
| Light Client | Any device, 4 GB RAM | Production ONNX and platform validation open. | Development stub |
| Honeypot | Any internet-exposed server | Requires isolated implementation and threat-model review. | Planned |
| Validator | 2 vCPU · 4 GB RAM + 10,000 KAS | KAS-only state machines tested; no operated network. | Target |
| Guardian (8B) | NVIDIA GPU · 24 GB VRAM | 8B-first runtime scaffold; no independently evaluated run. | Target |
| Guardian (70B) | 4× A100/H100 80 GB · 256 GB RAM | Optional escalation tier; no independently evaluated run or reputation authority. | Target |