From e933bd36cee44b42d631c1c64e9f3df027be7ab0 Mon Sep 17 00:00:00 2001 From: Monzero Build System Date: Sat, 15 Aug 2026 21:55:20 +0100 Subject: Add strict canonical asset descriptor decoding --- docs/MONZERO_ASSETS_V1_SPEC.md | 7 +++++++ docs/MONZERO_PHASE0_STABILIZATION.md | 1 + 2 files changed, 8 insertions(+) (limited to 'docs') diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md index 0da86ae83..d41dc9b7c 100644 --- a/docs/MONZERO_ASSETS_V1_SPEC.md +++ b/docs/MONZERO_ASSETS_V1_SPEC.md @@ -128,6 +128,13 @@ on-chain issuance, whether it can rotate, and how it is permanently closed. Until that complete path exists, wallets must not display a collection as verified. +The prototype now includes a strict decoder for this canonical descriptor. It +rejects truncated inputs at every byte boundary, unknown network UUIDs, +unsupported versions and classes, oversized references, embedded NUL bytes, +trailing bytes, mismatched lengths, and any encoding that does not reproduce +the canonical byte sequence exactly. This parser is still not connected to +transaction or block deserialization. + ### 4.2 Inactive registry and reorganisation model The prototype includes an in-memory reference registry, disconnected from the diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md index 2a42c8ca6..3ebf09d99 100644 --- a/docs/MONZERO_PHASE0_STABILIZATION.md +++ b/docs/MONZERO_PHASE0_STABILIZATION.md @@ -127,6 +127,7 @@ isolated disposable development network may be used after cryptographic review. - [x] Domain-separated issuer authorization signatures. - [x] Domain-separated collection-membership authorization signatures. - [x] Inactive authenticated issuance registry with deterministic reorg rollback. +- [x] Strict canonical issuance-descriptor decoder with byte-boundary truncation tests. - [x] External cryptographic-review brief and mandatory threat cases. - [ ] Reviewed confidential per-asset commitment and range-proof construction. - [ ] Versioned asset transaction serialization with strict parser limits. -- cgit v1.2.3