mx25519 merged. Upstream consensus integration PRs open for review (LLM comments addressed). RFQ for phases 2&3 integration audits out and quotes being fielded. Circuit + gadgets Least Authority audit ongoing. Multisig and Carrot tx proofs (prior item) in progress. Astra/LLM proposal for self-send receipts raised concerns about leaking k_v and breaking PQ migration; selsta to refine. Scope documents for audits available via sgp_ if needed.
jeffro256: mx25519 got merged yay!
jberman: FCMP++ upstream consensus integration PR's open for review, LLM comments all addressed
selsta: Astra suggests self-send receipts using a per-output opening secret plus a k_v signature, with the commitment explicitly binding both address keys and the transaction context as a potential C
jberman: RFQ for phases 2&3 integration audits has gone out and we're fielding quotes
jberman: Circuit + gadgets Least Authority audit is ongoing
jberman: Multisig in progress
jberman: Carrot tx proofs also in progress (the prior discussion item)
jeffro256: selsta: This would probably break the PQ migration by leaking k_v
interestingband: LOL
interestingband: jberman: Is it possible to public anywhere scope for the upcoming or ongoing audits ? Ideally as is ?
interestingband: I mean what exactly will be audited
jeffro256: Unless A) I'm misunderstanding what's being proposed, or B) there is some way to indirectly bind such that the switch commitments property is held and doesn't reveal k_v directly
interestingband: human friendly from is ok too
jberman: sgp_: want to share the doc sent out for the RFQ? That doc clarifies scope
interestingband: I just needed that for evaluation of what is audited and what is not
selsta: jeffro256: will let it refine with your concern and double check
jberman: sgp_: RFQ for both the integration audit + the ongoing circuit + gadgets audit would be appreciated (looking for the latter rn)
tevador: selsta: It would be nice to have it output a proper formalization using Carrot notation. I did not quite get what the AI is proposing.
selsta: tevador: will send it in a paste
View quoted note →