diff options
| author | Monzero Build System <builds@monzero.org> | 2026-08-15 21:57:55 +0100 |
|---|---|---|
| committer | Monzero Build System <builds@monzero.org> | 2026-08-15 21:57:55 +0100 |
| commit | 310832fe087427fc01af504821190c2482a438d7 (patch) | |
| tree | 35aea99aed4d209e7b972106da94dde6fead4bc4 /docs | |
| parent | e933bd36cee44b42d631c1c64e9f3df027be7ab0 (diff) | |
| download | monzero-core-310832fe087427fc01af504821190c2482a438d7.tar.gz monzero-core-310832fe087427fc01af504821190c2482a438d7.tar.xz monzero-core-310832fe087427fc01af504821190c2482a438d7.zip | |
Add authenticated asset issuance payload
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/MONZERO_ASSETS_V1_SPEC.md | 9 | ||||
| -rw-r--r-- | docs/MONZERO_PHASE0_STABILIZATION.md | 1 |
2 files changed, 10 insertions, 0 deletions
diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md index d41dc9b7c..a49764fe2 100644 --- a/docs/MONZERO_ASSETS_V1_SPEC.md +++ b/docs/MONZERO_ASSETS_V1_SPEC.md @@ -135,6 +135,15 @@ trailing bytes, mismatched lengths, and any encoding that does not reproduce the canonical byte sequence exactly. This parser is still not connected to transaction or block deserialization. +An additional inactive issuance-payload envelope binds the descriptor to its +issuer authorization and, when collection membership is claimed, requires an +explicit collection authorization slot. Its decoder is length-bounded, +canonical, verifies the issuer signature, rejects every truncated prefix, +rejects invalid signature flags and trailing bytes, and prevents collection +signatures from being silently omitted or attached to unrelated issuance. +Collection-controller verification still requires the future persistent +registry lookup and therefore remains part of consensus integration work. + ### 4.2 Inactive registry and reorganisation model The prototype includes an in-memory reference registry, disconnected from the diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md index 3ebf09d99..ec45be62b 100644 --- a/docs/MONZERO_PHASE0_STABILIZATION.md +++ b/docs/MONZERO_PHASE0_STABILIZATION.md @@ -128,6 +128,7 @@ isolated disposable development network may be used after cryptographic review. - [x] Domain-separated collection-membership authorization signatures. - [x] Inactive authenticated issuance registry with deterministic reorg rollback. - [x] Strict canonical issuance-descriptor decoder with byte-boundary truncation tests. +- [x] Bounded authenticated issuance-payload envelope with strict signature shape rules. - [x] External cryptographic-review brief and mandatory threat cases. - [ ] Reviewed confidential per-asset commitment and range-proof construction. - [ ] Versioned asset transaction serialization with strict parser limits. |