Internal security audit

The two-row Ristretto proof binds destination ownership, commitment difference, key image and transaction message. Tests cover altered messages, images, ring members, responses and all signer positions. It is handwritten cryptography; tests cannot establish soundness, privacy or resistance to undiscovered attacks.

ChainV3::append applies every block transaction through cloned SpendState. The state checks reward maturity, ring lookup, anonymous proof verification, key-image replay, output uniqueness and atomic replacement before commit. The generic Transaction::validate_for_consensus(height) helper remains fail-closed because it has no output registry; it is not the v3f append path.

Output IDs, spent key images, reward maturity, transaction outputs, atomic batches and serialized recovery are implemented. Reorganization and crash behavior still require production operational review.

V3f checks the 90% miner / 10% treasury split, overflow, public fee commitments, reward issuance and the total supply cap. This is not yet a stable mainnet specification.

The candidate commits difficulty, calculates cumulative work, retargets within bounds and chooses a heavier validated snapshot. Parameters remain weak for public security; the inner reward proof of work is still low difficulty. A deterministic 10-block finality checkpoint rejects deeper reorgs.

Implemented: mutual Ed25519 nonce authentication, bounded peer discovery through static peers and seeds, 64 active connections, 8 attempts per IP per 60 seconds, bounded snapshots, transaction/block relay and timeouts. Still required for hardened operation: ban policy, durable concurrent single-writer coordination, monitoring, key rotation and incident procedures.

The release benchmark validated 237 anonymous transactions in 4,831.51 ms, or 49.05 confirmed tx/s on the local Windows build. The separate 500-proof verifier benchmark reached 2,274.16 proof verifications/s. The 150–250 confirmed tx/s target is not achieved by the complete pipeline; these are local measurements, not a public-network or mainnet throughput guarantee.

There is no public TENEBRA wallet currently exposed on the network site or available for production use. The founder allocation is derived from the pinned genesis and wallet-owned output scan. No private wallet material was accessed. It is not public transferable value and must not be represented as a live mainnet balance.