Every change, no spin

Protocol state root computation and VP verification

• AddedState root computation — 4 Sparse Merkle Trees (accounts, DIDs, credentials, validators) combined via BLAKE3 global root
• AddedReal Verifiable Presentation verification in SDK chain mode — Ed25519 signature, expiry, holder match, nonce validation
• AddedIn-memory challenge store with 5-minute TTL and one-time use for authentication
• FixedMulti-node consensus bug fixes — QC relay, message drain, shutdown race conditions resolved

State root now computed after block execution. VP verification replaces stub responses with full cryptographic pipeline.

Production stability and UX improvements

• FixedServer crash recovery — identity and explorer services rebuilt after OOM-induced crash loops
• Added2GB swap file added to prevent future OOM kills on production server
• FixedGoogle Analytics — corrected measurement ID across all 3 frontends
• FixedExplorer client-side crash — null check for recipient field in DID operations table
• ChangedExplorer defaults to mainnet view with rich data and "Mainnet not yet active" banner
• FixedAll dead href="#" links replaced with real URLs across verify, identity, and explorer
• AddedVerify sandbox/production context — shared state via React context replaces isolated toggle

Full audit + honesty pass across all products

• FixedRemoved fake investor names and exchange partnerships from marketing site
• FixedSQL injection vulnerability in verify webhook updates patched
• AddedMobile responsive sidebars for identity and verify — slide-over drawers with hamburger menus
• AddedVerify and identity dashboards wired to real backend APIs — stats, activity, credentials all live
• AddedForgot/reset password flow — migration, endpoints, and frontend wiring
• AddedAudit log writes on auth events, API key changes, webhook updates, and verifications
• Added13 mock pages across verify and explorer marked with amber "preview" banners
• FixedExplorer homepage — removed fake TPS, validator counts, and block rewards; shows real API data
• AddedCSV export and real pagination for verify verifications list
• FixedCredential verification endpoint now properly decodes JWT and validates via SDK

Comprehensive audit identified real vs mock across all 5 products. 4 sprint passes completed.

Guardian recovery, KYC pipeline, and OAuth login

• AddedGuardian recovery module — 8 API endpoints, 3 database tables, 3-of-5 threshold with 48h expiry
• AddedEdge states wired into identity app — loading skeletons, connection error toasts, session expired modal, credential expiry banners
• AddedShareFlow disclosure defaults — interactive Reveal/Derive/Hide toggle with data minimization
• AddedGitHub OAuth login for verify and identity apps
• AddedTOTP 2FA setup with QR code and manual key entry
• AddedKYC ML models deployed — face detection, recognition, and landmarks (12MB total)
• AddedKYC worker PM2 service running on production server
• AddedTestnet seed script on 4-hour cron — 19 real transactions per run

KYC pipeline fully operational with native ML inference. Guardian social recovery enables account restoration without seed phrases.

Production deployment and domain launch

• Addedsolidus.network domain live with SSL — marketing site, verify, identity, and auth subdomains
• AddedVerify and Identity backends deployed to production — PostgreSQL, Redis, and RabbitMQ provisioned
• AddedFrontend-to-backend wiring complete — API calls route through nginx reverse proxy
• Addedauth.solidus.network deployed — identity API live, OIDC routes in development
• ChangedEd25519 keypairs generated for session signing and credential issuance in production

Protocol Slice 1 — single-node block production

• Added7 Rust crates — solidus-crypto, solidus-txns, solidus-state, solidus-consensus, solidus-rpc, solidus-p2p, solidus-node
• AddedSingle-node block production with native state transitions (no WASM VM)
• AddedToken transfers via JSON-RPC with 7 methods implemented
• AddedSparse Merkle tree (Jellyfish-style, 256-bit depth, BLAKE3 hashing)
• Added85 tests passing with zero clippy warnings

HotStuff-inspired BFT consensus. Multi-node networking planned for Slice 2.

Identity backend and frontend integration

• AddedIdentity backend — 12 API endpoints covering auth, credentials, sharing, and trust-score
• Added13 identity frontend pages wired to real API (DID challenge-response auth)
• AddedMarketing backend — contact form and newsletter API routes with JSONL storage
• AddedVerify frontend — 7 pages wired to real API, 37 routes building clean

KYC pipeline and shared packages

• AddedNative KYC pipeline — document upload, OCR via Tesseract, MRZ parsing, face detection with TensorFlow.js
• Added3 verification endpoints and 2 background worker jobs for async document processing
• Added@solidus-network/sdk — stub mode with PostgreSQL-backed DID and credential operations
• Added@solidus-network/types — shared TypeScript types for Ed25519 token signing and verification
• Added@solidus-network/auth — DID challenge-response authentication with Verifiable Presentations
• ChangedPluggable storage backend — local filesystem for development, S3-compatible (Cloudflare R2) for production

31 tests passing across the KYC pipeline.

Frontend foundations

• AddedVerify frontend — 34 pages with dark/light mode, design token system, all routes building
• AddedIdentity frontend — 31 pages with DID dashboard, credential management, sharing flows
• AddedMarketing site — 33 pages covering landing, product, developer, and company sections
• AddedUnified design system — Inter typography, Lucide icons, consistent spacing and color tokens

All frontends built with Next.js 15 and Tailwind CSS.

Project bootstrap

• AddedMonorepo structure with 16 product folders, synthesized documentation, and per-product configuration
• Added14 project documents — vision, protocol spec, architecture, tokenomics, product strategy, design system