Skip to content

Latest commit

 

History

History
247 lines (212 loc) · 40 KB

CHANGELOG.md

File metadata and controls

247 lines (212 loc) · 40 KB

Changelog

All notable changes to the EthSystems Map are documented here.

  • fix: factual audit of the Private FX entry.
  • fix: factual audit of the Private Repo entry and the Private Trade Settlement cards it builds on.
  • fix: factual audit of the Private Identity entry and the cards one hop out.
  • fix: factual audit of the Private Bonds entry and the cards one hop out. In Private Bonds set Trading as secondary domain, add the FHE PoC and the Atomic DvP Settlement approach, correct the PoC RFQ scope, mark ERC-6123 and ERC-7573 Draft and describe ERC-7573 as oracle-conditional settlement that hides no amounts, replace the unsourced HTLC-replacement forecast with the PoCs' actual DvP scope, and link the DvP, crypto-registry and ICMA BDT patterns, the eWpG jurisdiction and sibling bond use cases; in Private Bonds refresh the Railgun figure to the project Dune dashboard (~USD 5.7b, Oct 2026), source the Aztec V5 vulnerability to its 2026-08-07 post, describe the PoC whitelist as its compliance hook, set FHE gas to the PoC measurement (~330K per transfer), scope the PoC disclosure claim to what each PoC exercises, and link eWpG, MiCA, the crypto-registry bridge and ERC-7573; in Verifiable Attestation name the EIP-712 vs EIP-191 signing paths, add EAS (MIT) and ONCHAINID (GPL-3.0) licenses, cite ML-DSA (FIPS 204) and EIP-8051 for PQ migration, and note VC Data Model 2.0 Recommendation status; in ICMA BDT scope the taxonomy to term-sheet data (no lifecycle event messages), state the royalty-free licence with ICMA-retained IP and replace the 2023 factsheet with the April 2026 FAQ; in Crypto-registry bridge describe the eWpG register as a decentralised recording system (§4(11), §16) rather than an off-chain notarial store, scope attestation verification to existence, signer and time, replace dead BaFin links with the statute and the current BaFin licensing page and move EAS docs to docs.attest.org; in DvP via ERC-7573 state Draft status and that amounts and parties are observable in calls and events; mark ERC-6123 and ERC-7573 Draft and describe ERC-7573 as oracle-conditional settlement in Private Corporate Bonds; move the EAS docs link to docs.attest.org in Selective Disclosure; link these cards back to Private Bonds
  • fix: factual audit of the Private Treasuries entry and the cards one hop out. Fill the empty context section with sourced cash-pooling, transfer-pricing (OECD Chapter X, BEPS Action 13) and Kinexys/JPMD bullets and scope regulatory capital and liquidity reporting to regulated group entities in Private Treasuries; in Private Payments add the deposit verification cost, note Aztec Alpha and the July 2026 V5 proving-system disclosure, replace the exit-game description of Stateless Plasma with proof-based exits, mark Plasma user proofs as server-side, note that MPC configurations can hide addresses, correct relay-set floors to the PoC spec and state the Resilient Disbursement Rails PoC scope; add FATF R.16 Travel Rule access, the Swift shared-ledger plan and a Resilient Disbursement Rails link in Private Payments; state GENIUS Act effective date and ERC-7573 Draft status and oracle dependence, and move the Zama link to zama.org, in Private Stablecoins; date and source the tokenized Treasury market figure (rwa.xyz, 5 Oct 2026) in Private Money Market Funds; replace the unsourced Asia municipal-debt line with Hong Kong digital green bonds and Japan's 2026 Local Finance Act amendment in Private Government Debt
  • fix(approach): Private Money Market Funds: Phase 1 review for the MMF approach cycle. Stable- vs floating-NAV yield, aggregates at the fund's cadence, disclosure-key custody instead of threshold NAV opening, investor-side vs portfolio compliance, maturity corrected to documented, three new comparison rows, a conditional recommendation, and new open questions (collateral as a future extension). Links: private-vaults removed; erc3643-rwa and private-mtp-auth added.
  • fix(use-case): Private Money Market Funds: fills Additional Context, scopes Rule 2a-7 to registered funds, updates gates after the 2023 amendments, cross-links open questions to the approach card, and lists it in the Funds & Assets domain.
  • chore(pattern): re-review Private Client Authentication for Institutional EOAs and Compliance Monitoring; no content change.
  • feat(pattern): Selective Disclosure adds standing register disclosure, a second mode in which a register of record (such as a transfer agent) receives a continuous encrypted feed and rebuilds beneficial ownership for any point in time without holder cooperation. It covers the key, protocol steps, the in-circuit ciphertext constraint and the added threat-model entries, and flags feed granularity as an open trade-off.
  • feat(pattern): ERC-3643 Tokenized RWAs adds a confidentiality-boundary section: the policy layer (claim topics, trusted issuers, ONCHAINID claims) is reusable, and the execution layer (balanceOf, identity, isVerified, canTransfer) is replaced.
  • chore(pattern): re-review Shielding, Private Shared State (FHE) and TEE Key Manager against the Private Money Market Funds approach; no content change.
  • fix: factual audit of the Private RWA Tokenization entry and the cards one hop out. Refresh RWA market figures to rwa.xyz (29 Sep 2026) and repair moved category links; correct Merces gas, MPC model and throughput in Private Bonds and note the Aztec Alpha V5 soundness disclosure and decentralized sequencer set; scope the no-trusted-setup claim to the PoC in both approaches and mark Fhenix CoFHE testnet-only in Private Payments; fix co-SNARK threat model (a colluding coalition breaks privacy, not soundness) and licensing in co-SNARK; fix HNDL misuse and post-quantum mitigations in ERC-3643, ZK-KYC and L2 Encrypted Off-chain Audit; scope amount privacy in Private PvP via ERC-7573 to contracts running inside the shielded layer; replace dead ERC-734/735 and EAS docs links
  • fix: factual audit of the private-stablecoins entry and the cards one hop out
  • fix(pattern): clarify ERC-3643 Tokenized RWAs transfer-path semantics; distinguish investor-initiated transfer checks from mint and forced-transfer paths, and separate owner and agent controls.
  • fix(pattern): correct cross-chain atomicity claims. Private PvP via ERC-7573 now follows the ERC-7573 shape (one leg locked, the other paid through the decryption contract, an oracle-released key that releases or returns the locked leg) and states conditional settlement instead of "both legs settle or both revert"; the old recipe finalised one leg and then claimed both escrows revert. Atomic DvP via ERC-7573 drops the timeout reclaim that ERC-7573 does not define and names the oracle condition. Permissioned Ledger Interoperability states the coordinator trust assumption of two-phase commit (#198)
  • fix(ci): repair the Vale prose gate. Scope EthSystems.Marketing to promotional claims instead of the bare words "only", "first" and "unique"; drop the EthSystems.Terminology swap that forced "Multi-Party Computation" to lower case against GLOSSARY.md; ignore file names used as link text; pass files to vale-action as a JSON array, the one form the action parses, so the job lints the six content directories instead of the whole repository; and drop the continue-on-error added in #196, which kept the job green while Vale still exited 1 on 207 findings. Also clears the five real marketing terms and the remaining ERC-7573 and DA Layer terminology drift in the prose. Vale findings in the linted scope: 187 to 0 (#197)
  • feat(vendor): add Interfold, plus patterns Publicly Verifiable DKG and Threshold Decryption and Ephemeral Committees, covering single-use committees that dispose of key material after decryption (#178)
  • feat(vendor): add The Graph, decentralized indexing and query infrastructure as the audit read path (#186, landed via #193)
  • feat(pattern): add Reproducible Audit Extraction, the verifier's data-acquisition leg the disclosure patterns presuppose (#186, landed via #193)
  • feat(pattern): Confidential Policy Verdicts -- pre-execution allow/deny for agent actions, proven in zero knowledge against a policy never disclosed on-chain, bridging ERC-8004 identity and ERC-7812 policy commitments (#183, tracks ethereum/ERCs#1919)
  • feat(pattern): Private Geospatial Attestation -- prove a plot polygon does not intersect a committed deforestation layer without revealing coordinates, with the reference-layer commitment named as the load-bearing assumption (#184)
  • feat(vendor): add Bermuda, a shielded-UTXO privacy layer for EVM chains with in-circuit issuer policy enforcement (#191)
  • fix(vendor): Privacy Pools -- v1 has been live on Ethereum mainnet since March 2025; replace the stale "not yet deployed at large scale" line and point the GitHub link at 0xbow-io/privacy-pools-core (reported by 0xbow in #92)
  • feat(vendors): add Inco vendor page (TEE-based confidential compute — confidential ERC-3643, private vaults, shielded stablecoin payments); wire Inco into custody, funds-assets, and payments domains and the relevant TEE/privacy patterns (#177)
  • feat(approach): link private-stocks, private-commodities, private-fx, and private-repo to Private Trade Settlement, and private-treasuries to Private Payments, as explicit variants (#190, part of #138)
  • feat(pattern): add CMTAT as an alternative to ERC-3643 in ERC-3643 Tokenized RWAs, a blockchain-agnostic compliant-tokenization standard with an Aztec/Noir privacy-preserving implementation, cross-referenced in GLOSSARY.md and Private RWA Tokenization (#190, closes #174)
  • feat(vendor): Gateway Open Privacy Suite — governed JSON-RPC access, selective disclosure, and compliance controls for private EVM networks and Gateway L2/validium deployments (#189)
  • docs: add the Beasley preprint to the vOPRF Nullifiers ## See also section, an implemented lattice VOPRF and candidate post-quantum replacement for the DDH construction
  • docs: add Espalier preprint reference to ZK Proof Systems, Post-Quantum Threats, and Safe Proof Delegation ## See also sections
  • feat(jurisdiction): Indonesia / OJK (Digital Financial Assets) and Singapore / MAS -- adds ASEAN coverage, including the POJK 27/2024 listing criterion that bars assets whose features conceal ownership or transaction information (#182)
  • feat(jurisdiction): EU / EUDR (Deforestation Regulation) -- Article 9 plot-level geolocation and the DDS reference-number model, ahead of the 30 December 2026 application date (#181)
  • fix(vendor): Zama -- mainnet maturity, symbolic-execution architecture, TFHE-rs, ERC-7984; sync fhEVM status and docs link in Private Shared State (FHE) (#180)
  • chore: fix 18 terminology inconsistencies across 11 files -- ZK proof, zk-SNARK, Data Availability, FHE encryption, ERC-3643 (#67)

[0.4.0] - 2026-07-02

23 commits, 166 files changed since v0.3.0 (Apr 2026). Major additions: resilience use cases (civic participation, disbursement rails, identity continuity), I2U protection patterns, pattern/approach schema v2 (strict flip) with CROPS and post-quantum analysis, domain reframing beyond FIs, and a Q2 2026 content QA audit.

Removed

  • chore: Retire PRD-IPTF-PUBLIC-Q1-2026.md -- Q1 closed; remaining unfinished items tracked in #143 (#144)

0.3.0 - 2026-04-13

71 commits, 162 files changed since v0.2.0. Major additions: CROPS evaluation framework, 20+ new patterns, 12 new use cases, 4 new approaches, post-quantum threat analysis, CI quality guardrails.

Added

Patterns

Approaches

Use Cases

Domains & Vendors

  • feat(domain): Post-Quantum Threats — PQ threat landscape, Ethereum layer analysis, and application-layer breakage index (#121)
  • feat(vendor): Peer — P2P fiat-to-crypto onramp using TLSNotary proofs (#88)
  • feat(vendor): EY Starlight - Solidity transpiler for private on-chain state
  • feat(vendor): TACEO Merces - MPC + ZK approach for private stablecoin transfers
  • feat(vendor): Fhenix - FHE privacy (#32)
  • feat(vendor): Space and Time (#46)

CROPS Framework & Evaluation

  • feat(template): crops_profile frontmatter block added to pattern template for CROPS dimension indexing (#101)
  • feat(template): crops_profile frontmatter block and CROPS evaluation criteria added to vendor template and README (#102)
  • docs(glossary): CROPS, I2I, I2U evaluation framework definitions (#100)
  • docs(readme): Evaluation Framework section with CROPS alignment statement (#100)
  • feat(patterns): CROPS-aligned 18 patterns with crops_profile frontmatter and deployment-context Trade-offs notes (#104)
  • feat(patterns): Add context and crops_profile CROPS frontmatter to additional patterns

CI & Quality

  • feat(ci): Enhanced AI content quality guardrails (#58)
    • Vale prose linter with custom EthSystems styles for marketing language, hedging, and terminology
    • GLOSSARY.md term consistency checker (scripts/check-terminology.js)
    • Extended validation to all content types (vendors, use-cases, approaches, jurisdictions)
    • JSON Schema validation for frontmatter
    • Husky pre-commit hooks with lint-staged
    • LLM-based content review tool (scripts/llm-review.js)
  • feat(ci): Pattern validation workflow (#40)

Documentation

  • docs(glossary): Add PQ cryptography terms (CRQC, HNDL, ML-KEM, ML-DSA, SLH-DSA, Poseidon) (#121)
  • docs: Q1 2026 PRD with sprint planning (#39)
  • docs: CHANGELOG.md and weekly summary script (#49)
  • docs: weekly-updates directory (#59)

Changed

  • chore(approach|use-case): Updated Private Payments approach and use case with PoC validation data
  • refactor(use-case): Renamed Private Authentication → Private Identity — authentication reframed as one application of private identity (also renamed approach)
  • feat(use-case): Enriched Private Payments with conditional & programmable payment privacy (grant disbursement, milestone-based releases)
  • feat(use-case): Enriched Private Government Debt with fiscal transparency vs operational privacy tension
  • feat(use-case): Enriched Private Identity with credential portability & reuse problem, government credential sources
  • feat(use-case): Enriched Private Oracles with data provenance & consent angle
  • feat(use-case): Broadened Private Identity beyond institutional KYC to cover governance and national identity use cases
  • feat(approach): Restructured Private Identity Approach with credential-source taxonomy and validated deployment references
  • fix(patterns): Add PQ exposure notes to Trade-offs of 16 affected patterns and cross-refs to 4 PQ-aware patterns (#121)
  • fix(pattern): Refreshed TEE-Based Privacy — added CPU-encrypted vs hypervisor-isolated platform classification and threat model comparison

Removed

  • refactor(patterns): Deleted 4 redundant patterns (#104): pattern-zk-derivative-delta.md (covered by shielding + co-SNARKs), pattern-zk-htlc.md (covered by cross-chain privacy bridge + shielding), pattern-zk-shielded-balances.md (merged into Shielding), pattern-zk-spv.md (removed from map)
  • refactor(patterns): Deleted original pattern-private-shared-state.md, replaced by 3 trust-model-specific cards (#104)

Fixed

  • fix(pattern): include tradeoff around handling of stock splits in ERC-3643 (#81)
  • fix(refs): Updated Private Bonds PoC links to ethsystems/pocs
  • fix(pattern): Required frontmatter fields across all patterns (#42)

0.2.0 - 2025-12-19 (End of Year)

Added

Changed

  • refactor: Split patterns directory into patterns + approaches (#2)

Fixed

  • fix(pattern): DvP ERC-7573 updates (#31)
  • fix(use-case): Private Identity - revocation, zk-TLS mechanism
  • fix(docs): Glossary - clarified core privacy concepts (#29)
  • fix(docs): ZKsync naming standardization (#20)

0.1.0 - 2025-10-06 (MVP)

Added