diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/MONZERO_ASSETS_V1_SPEC.md | 7 | ||||
| -rw-r--r-- | docs/MONZERO_PHASE0_STABILIZATION.md | 1 |
2 files changed, 8 insertions, 0 deletions
diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md index 0da86ae83..d41dc9b7c 100644 --- a/docs/MONZERO_ASSETS_V1_SPEC.md +++ b/docs/MONZERO_ASSETS_V1_SPEC.md @@ -128,6 +128,13 @@ on-chain issuance, whether it can rotate, and how it is permanently closed. Until that complete path exists, wallets must not display a collection as verified. +The prototype now includes a strict decoder for this canonical descriptor. It +rejects truncated inputs at every byte boundary, unknown network UUIDs, +unsupported versions and classes, oversized references, embedded NUL bytes, +trailing bytes, mismatched lengths, and any encoding that does not reproduce +the canonical byte sequence exactly. This parser is still not connected to +transaction or block deserialization. + ### 4.2 Inactive registry and reorganisation model The prototype includes an in-memory reference registry, disconnected from the diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md index 2a42c8ca6..3ebf09d99 100644 --- a/docs/MONZERO_PHASE0_STABILIZATION.md +++ b/docs/MONZERO_PHASE0_STABILIZATION.md @@ -127,6 +127,7 @@ isolated disposable development network may be used after cryptographic review. - [x] Domain-separated issuer authorization signatures. - [x] Domain-separated collection-membership authorization signatures. - [x] Inactive authenticated issuance registry with deterministic reorg rollback. +- [x] Strict canonical issuance-descriptor decoder with byte-boundary truncation tests. - [x] External cryptographic-review brief and mandatory threat cases. - [ ] Reviewed confidential per-asset commitment and range-proof construction. - [ ] Versioned asset transaction serialization with strict parser limits. |