Every change, no spin

Agents, Wallet, and Relay — product previews

• AddedAgents — ERC-8004 agent passports and an operator console (27 routes), preview at agents-preview.solidus.network
• AddedWallet — multi-chain testnet wallet with send/receive, staking, social recovery, and a credential-holder view (16 routes), preview at wallet-preview.solidus.network
• AddedRelay — DIDComm v2 mediator operator console (16 routes), preview at relay-preview.solidus.network
• FixedAgents backend — hosted credentials now anchor to the Solidus L1 (fixed a transaction-signature serialization mismatch on the agent credential types)

The three new product UIs are live previews on *-preview.solidus.network — not yet public products. Testnet only, no mainnet.

L1 v2 rebuild and public v2 devnet

• AddedL1 v2 — two-lane executor, HotStuff-2 BFT consensus, DAG mempool, and an EVM subnet
• AddedPublic v2 devnet live at devnet-v2.solidus.network
• AddedPublic benchmark harness — an anonymous clone reproduces the documented differential (github.com/solidusnetwork/protocol)

v2 is a separate devnet; the production testnet stays at rpc.solidus.network. No mainnet.

GPU inference and document hardening

• AddedFirst GPU (CUDA) inference build — published to releases.solidus.network; GPU verify path live at node.solidus.network/gpu
• AddedDocuments with no MRZ now read via their printed fields (VIZ OCR), with a universal document-number checksum and cross-check
• FixedPhysically damaged and torn documents are handled — card detection survives a torn card
• AddedAssurance gate — a credential may not claim an assurance level that was never performed
• FixedWebhook delivery now retries with exponential backoff (was one-shot)

KYC still runs in shadow — the engine observes; decisions are not yet automated. Testnet.

Compute Network and an estate-wide design system

• AddedSolidus Compute Network — GPU-inference nodes with per-job envelope encryption, a fail-closed routing contract, a control-plane broker, and a pre-mainnet accounting ledger; operator page at node.solidus.network/gpu
• AddedA single design system rolled out across the estate — marketing, verify, identity, auth, pod, node, and explorer re-skinned on one tricolor token set

Compute is a private preview — admission is allow-listed, and what shipped first is CPU inference (the GPU/CUDA build landed July 14). Testnet.

Capture and Agent-identity SDKs on npm

• Added@solidus-network/capture and @solidus-network/id-extract 0.1.0 — a guided document-capture widget and a WASM extraction pipeline; live demo at capture.solidus.network/demo
• Added@solidus-network/agent-identity 0.1.0/0.1.1 — ERC-8004 agent passports, verification middleware, and spend-mandate primitives
• FixedSDK nonce-retry and a README truth-rewrite across the published packages

All SDKs are on the public npm registry under @solidus-network/*. Testnet.

SDK privacy — unlinkability and the key hierarchy

• Added@solidus-network/sdk and @solidus-network/bbs 0.6.2 — device-benchmark-routed BBS+ selective disclosure and an HKDF key hierarchy (identity, value, pairwise, and pod keys)
• AddedAn in-tarball unlinkability demo a skeptic can run, plus a clean-room publish guard

BBS+ credential primitives are testnet-grade with an external audit pending. Testnet.

did:solidus registered in the W3C DID Method Registry

• Addeddid:solidus registered in the W3C DID Method Registry (specification: did-solidus-spec v0.1.0)

Registered in the method registry — a list of known DID methods — not a W3C standards-track Recommendation.

SDK 0.6.0 — DID social recovery and unlinkability guard

• Added@solidus-network/sdk 0.6.0 — DID social recovery (guardian-threshold reconstruction) and a guard keeping the DID anchor key separate from value-bearing keys

Testnet.

SDK 0.5.0 — client-side signing split

• Added@solidus-network/sdk 0.5.0 — DID creation split into buildCreate/submitCreate so the client signs locally and the backend only relays; sponsor-funding for fee-exempt DID operations

Testnet.

Standards and security — DIF membership, SD-JWT VC, BBS+

• AddedDIF (Decentralized Identity Foundation) Associate Membership confirmed
• AddedVerifiable Credentials 2.0 (validFrom / validUntil) and SD-JWT VC with holder-key binding
• AddedBBS+ selective disclosure shipped on testnet
• FixedSecurity — patched 7 CVEs (fast-jwt and Next.js) during incident response

Testnet only. No mainnet, no token.

Protocol state root computation and VP verification

• AddedState root computation — 4 Sparse Merkle Trees (accounts, DIDs, credentials, validators) combined via BLAKE3 global root
• AddedReal Verifiable Presentation verification in SDK chain mode — Ed25519 signature, expiry, holder match, nonce validation
• AddedIn-memory challenge store with 5-minute TTL and one-time use for authentication
• FixedMulti-node consensus bug fixes — QC relay, message drain, shutdown race conditions resolved

State root now computed after block execution. VP verification replaces stub responses with full cryptographic pipeline.

Production stability and UX improvements

• FixedServer crash recovery — identity and explorer services rebuilt after OOM-induced crash loops
• Added2GB swap file added to prevent future OOM kills on production server
• FixedGoogle Analytics — corrected measurement ID across all 3 frontends
• FixedExplorer client-side crash — null check for recipient field in DID operations table
• ChangedExplorer defaults to mainnet view with rich data and "Mainnet not yet active" banner
• FixedAll dead href="#" links replaced with real URLs across verify, identity, and explorer
• AddedVerify sandbox/production context — shared state via React context replaces isolated toggle

Full audit + honesty pass across all products

• FixedRemoved fake investor names and exchange partnerships from marketing site
• FixedSQL injection vulnerability in verify webhook updates patched
• AddedMobile responsive sidebars for identity and verify — slide-over drawers with hamburger menus
• AddedVerify and identity dashboards wired to real backend APIs — stats, activity, credentials all live
• AddedForgot/reset password flow — migration, endpoints, and frontend wiring
• AddedAudit log writes on auth events, API key changes, webhook updates, and verifications
• Added13 mock pages across verify and explorer marked with amber "preview" banners
• FixedExplorer homepage — removed fake TPS, validator counts, and block rewards; shows real API data
• AddedCSV export and real pagination for verify verifications list
• FixedCredential verification endpoint now properly decodes JWT and validates via SDK

Comprehensive audit identified real vs mock across all 5 products. 4 sprint passes completed.

Guardian recovery, KYC pipeline, and OAuth login

• AddedGuardian recovery module — 8 API endpoints, 3 database tables, 3-of-5 threshold with 48h expiry
• AddedEdge states wired into identity app — loading skeletons, connection error toasts, session expired modal, credential expiry banners
• AddedShareFlow disclosure defaults — interactive Reveal/Derive/Hide toggle with data minimization
• AddedGitHub OAuth login for verify and identity apps
• AddedTOTP 2FA setup with QR code and manual key entry
• AddedKYC ML models deployed — face detection, recognition, and landmarks (12MB total)
• AddedKYC worker PM2 service running on production server
• AddedTestnet seed script on 4-hour cron — 19 real transactions per run

KYC pipeline fully operational with native ML inference. Guardian social recovery enables account restoration without seed phrases.

Production deployment and domain launch

• Addedsolidus.network domain live with SSL — marketing site, verify, identity, and auth subdomains
• AddedVerify and Identity backends deployed to production — PostgreSQL, Redis, and RabbitMQ provisioned
• AddedFrontend-to-backend wiring complete — API calls route through nginx reverse proxy
• Addedauth.solidus.network deployed — identity API live, OIDC routes in development
• ChangedEd25519 keypairs generated for session signing and credential issuance in production

Protocol Slice 1 — single-node block production

• Added7 Rust crates — solidus-crypto, solidus-txns, solidus-state, solidus-consensus, solidus-rpc, solidus-p2p, solidus-node
• AddedSingle-node block production with native state transitions (no WASM VM)
• AddedToken transfers via JSON-RPC with 7 methods implemented
• AddedSparse Merkle tree (Jellyfish-style, 256-bit depth, BLAKE3 hashing)
• Added85 tests passing with zero clippy warnings

HotStuff-inspired BFT consensus. Multi-node networking planned for Slice 2.

Identity backend and frontend integration

• AddedIdentity backend — 12 API endpoints covering auth, credentials, sharing, and trust-score
• Added13 identity frontend pages wired to real API (DID challenge-response auth)
• AddedMarketing backend — contact form and newsletter API routes with JSONL storage
• AddedVerify frontend — 7 pages wired to real API, 37 routes building clean

KYC pipeline and shared packages

• AddedNative KYC pipeline — document upload, OCR via Tesseract, MRZ parsing, face detection with TensorFlow.js
• Added3 verification endpoints and 2 background worker jobs for async document processing
• Added@solidus-network/sdk — stub mode with PostgreSQL-backed DID and credential operations
• Added@solidus-network/types — shared TypeScript types for Ed25519 token signing and verification
• Added@solidus-network/auth — DID challenge-response authentication with Verifiable Presentations
• ChangedPluggable storage backend — local filesystem for development, S3-compatible (Cloudflare R2) for production

31 tests passing across the KYC pipeline.

Frontend foundations

• AddedVerify frontend — 34 pages with dark/light mode, design token system, all routes building
• AddedIdentity frontend — 31 pages with DID dashboard, credential management, sharing flows
• AddedMarketing site — 33 pages covering landing, product, developer, and company sections
• AddedUnified design system — Inter typography, Lucide icons, consistent spacing and color tokens

All frontends built with Next.js 15 and Tailwind CSS.

Project bootstrap

• AddedMonorepo structure with 16 product folders, synthesized documentation, and per-product configuration
• Added14 project documents — vision, protocol spec, architecture, tokenomics, product strategy, design system