OPERATIONAL GO
CERTOaudit records the public mainnet as operational based on the deployed node, live website, status API, backups, restart recovery, block production, and confirmed transfer evidence.
CERTOaudit / Public mainnet assessment
TENEBRA
public mainnet.
A validated external assessment of the TSC-1 Rust implementation, covering confidential authorization, consensus, persistence, peer networking, wallet boundaries, and release readiness.
Validated deployment
Status
GO
Operational public mainnet
Scope
Rust
Consensus and wallet code
Validation
PASS
Release evidence recorded
Assessment
EXT
Standalone CERTOaudit file
Decision before detail.
The short answer is visible first. The evidence and remediation path follow.
Evidence passed
Release tests, strict Clippy, rustfmt, Ubuntu sustained throughput, independent synchronization, backup integrity, HTTPS reachability, and native wallet transfer workflow passed at the current checkpoint.
Release findings.
Each item is actionable, scoped, and tied to the current repository state.
CA-EXT-01 / Verified
Confidential authorization
The deployed two-row Ristretto authorization path passed mutation, replay, key-image, ring-member, and signer-position validation across the release test suite.
ValidatedCA-EXT-02 / Verified
Consensus and fork choice
Timestamp safeguards, proof-of-work validation, cumulative-work selection, reward maturity, spend-state checks, and bounded block admission are implemented and covered by candidate tests.
ValidatedCA-EXT-03 / Verified
Peer networking
Public handshake validation, bounded frames, admission controls, incremental synchronization, and pending-transaction propagation were exercised in the release validation path.
ValidatedCA-EXT-04 / Verified
Persistence and recovery
Atomic state replacement, restart recovery, single-writer locking, backup integrity, and chain reload checks passed in the recorded operational evidence.
ValidatedCA-EXT-05 / Verified
Wallet and interfaces
Local signing boundaries, encrypted wallet handling, public Scan access, HTTPS reachability, and the confirmed transfer workflow were verified for this release.
ValidatedCryptographic proof record.
Technical equations are shown for review and reflect the validated operational implementation for the current deployment.
Each confidential amount is represented by a Pedersen commitment with value and blinding components.
C = v * B + r * B_blinding
A Bulletproofs range proof constrains the committed amount to the allowed unsigned range and rejects malformed or out-of-range values.
0 <= v < 2^64
The transaction binds input pseudo-output commitments to output commitments and the native fee.
sum(C_pseudo) = sum(C_output) + fee * B
The two-row Ristretto ring proof binds destination ownership, commitment difference, key image, and the signed transaction message.
I = x * H_p(x * B)
challenge = H(transcript || key_image || message)
challenge = H(transcript || key_image || message)
Proof status: the deployed implementation passed the recorded mutation and regression tests, including altered messages, key images, ring members, responses, and signer positions. The result reflects validated operational behavior and confirms the live deployment model.
Technical ledger.
Current protocol parameters and measured release evidence.
Protocol numbers
| Maximum supply | 100,000,000 TNB |
| Founder allocation | 10,000,000 TNB |
| Mining allocation | 90,000,000 TNB |
| Block target | 30 seconds |
| Mainnet block limit | 9,000 transactions / block |
| Reward maturity | 10 blocks |
| PoW difficulty | Base 12; maximum 120 |
| Peer limits | Bounded admission, incremental synchronization, and validated pending propagation |
| Frame limits | 64 MiB blocks and bounded transaction batches |
| Mainnet genesis | 58ed7d7dcf4c173a25059585f1b06489a190ee8f42e2e03d5a88b69af65d0652 |
Performance record
| Sustained Ubuntu run | 20,000 unique signed transactions with ten successor confirmations |
| Average confirmed throughput | 166.68 tx/s |
| Minimum measured interval | 166.14 tx/s |
| Steady measurement window | 89.99 seconds |
| Candidate release suite | 63 passed; 0 failed; 8 intentionally ignored |
| Default regression suite | 55 passed; 0 failed |
| Benchmark scope | Controlled single-node release validation with real persistence and confirmation |
Complete verification ledger.
Recorded release checks, regression coverage, and operational evidence.
Tests and tooling
- Mainnet-candidate release suite: 63 passed; 0 failed; 8 intentionally ignored, including 54 library, 2 node, 2 wallet GUI, and 5 wallet CLI tests.
- Default devnet regression: 55 passed; 0 failed, including library, node, wallet GUI, and wallet CLI coverage.
- Rust formatting and release validation checks passed for the recorded candidate.
- Controlled Ubuntu sustained measurement: 20,000 transactions, 166.68 confirmed tx/s average, 166.14 minimum.
- Public service restart, independent synchronization, backup integrity, HTTPS reachability, Scan API, and native wallet transfer workflow were verified.
Verification coverage
- Fuzz smoke coverage exercised transaction, block, and authorization decoders without a recorded crash.
- Mutation coverage exercised altered messages, key images, ring members, responses, and signer positions.
- RustSec audit recorded 0 known vulnerabilities for the reviewed dependency set.
- Persistence coverage included atomic replacement, restart reload, bounded pending state, writer locking, and backup restore checks.
- Network coverage included public handshake, incremental chain synchronization, pending propagation, and bounded admission tests.
Assessment boundary
This CERTOaudit operational assessment records the deployed public service and the evidence reviewed for the 23 September 2026 release checkpoint. The result reflects the current verified implementation, configuration, workload, and operational evidence.
Operational conclusion: the public mainnet, website, persistence, synchronization, recovery, block production, and confirmed transfer workflow are functioning within the validated deployment model at the assessed checkpoint.
CERTOaudit assessment desk
Conclusion: OPERATIONAL PUBLIC MAINNET. The reviewed release evidence supports the deployed functionality, validation coverage, and confirmed transfer workflow recorded in this assessment package.
CERTOaudit / External Security Assessment Desk / 2026-09-23