soft3/mudra/audit/releases/specs-2026-09-12.md

π 0.0% 312 words · 2 min

Mudra specification and research snapshot — 2026-09-12

Release kind: documentation/research prerelease, tag specs-2026-09-12. The Cargo library remains version 0.1.0. Its committed production source, ordinary tests and Cargo manifests/lockfile are unchanged from v0.1.0. This release does not deliver a new signature algorithm, private index or wallet-recovery implementation.

Included work

  • Authority: exact action/policy binding and independent authorization, viewing and delivery roles.
  • Module profiles: distinguish CSIDH parameter qualification, standard ML-KEM and separately qualified native-field/FHE candidates.
  • Recovery contract: private selection, complete history coverage, recoverable delivery data, spent state and restart/provider-loss obligations.
  • Recovery proposal: prioritize neuron-prepared updates/checkpoints and private indexing; compact OMR is a comparison baseline. The concrete protocol remains draft.
  • Five-system assessment and retrieval evidence, with published costs, source pins and explicit security/error assumptions.

The later account/UTXO brainstorming remains discussion-only and introduces no additional accepted protocol in this snapshot.

Cross-repository source references

Workspace-relative links in the specifications assume sibling repositories. For review on GitHub, the relevant published source snapshots are:

The Neuron identity specification referenced by the workspace is still part of separately active, uncommitted Neuron work. This snapshot's identity requirements do not certify delivery of that implementation.

Validation and limits

Publication checks cover clean committed source, unchanged production code, Markdown target/anchor integrity inside the repository and release provenance. Previously recorded executable audit results retain their own source/hardware scope; this documentation release does not claim they were all rerun.

The legacy identity probe preserves historical machine paths and build context from its audit. It is archival evidence, not a portable release test target. Published paper measurements in the recovery research have not been reproduced locally.

Parameter/security qualification, private index construction, aggregate-release leakage and complete end-to-end recovery measurements remain open. The separate in-progress neuron-auth implementation is outside this committed snapshot.

Graph