From 310832fe087427fc01af504821190c2482a438d7 Mon Sep 17 00:00:00 2001 From: Monzero Build System Date: Sat, 15 Aug 2026 21:57:55 +0100 Subject: Add authenticated asset issuance payload --- docs/MONZERO_ASSETS_V1_SPEC.md | 9 +++++++++ docs/MONZERO_PHASE0_STABILIZATION.md | 1 + 2 files changed, 10 insertions(+) (limited to 'docs') diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md index d41dc9b7c..a49764fe2 100644 --- a/docs/MONZERO_ASSETS_V1_SPEC.md +++ b/docs/MONZERO_ASSETS_V1_SPEC.md @@ -135,6 +135,15 @@ trailing bytes, mismatched lengths, and any encoding that does not reproduce the canonical byte sequence exactly. This parser is still not connected to transaction or block deserialization. +An additional inactive issuance-payload envelope binds the descriptor to its +issuer authorization and, when collection membership is claimed, requires an +explicit collection authorization slot. Its decoder is length-bounded, +canonical, verifies the issuer signature, rejects every truncated prefix, +rejects invalid signature flags and trailing bytes, and prevents collection +signatures from being silently omitted or attached to unrelated issuance. +Collection-controller verification still requires the future persistent +registry lookup and therefore remains part of consensus integration work. + ### 4.2 Inactive registry and reorganisation model The prototype includes an in-memory reference registry, disconnected from the diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md index 3ebf09d99..ec45be62b 100644 --- a/docs/MONZERO_PHASE0_STABILIZATION.md +++ b/docs/MONZERO_PHASE0_STABILIZATION.md @@ -128,6 +128,7 @@ isolated disposable development network may be used after cryptographic review. - [x] Domain-separated collection-membership authorization signatures. - [x] Inactive authenticated issuance registry with deterministic reorg rollback. - [x] Strict canonical issuance-descriptor decoder with byte-boundary truncation tests. +- [x] Bounded authenticated issuance-payload envelope with strict signature shape rules. - [x] External cryptographic-review brief and mandatory threat cases. - [ ] Reviewed confidential per-asset commitment and range-proof construction. - [ ] Versioned asset transaction serialization with strict parser limits. -- cgit v1.2.3