01
Formal specification + pure kernel
72 audited Lean specification declarations and 15 translated-Rust refinements. The verified pure kernel is adopted; the whole Rust/Swift system is not mechanized.
complete
02
Prover baseline + D5 root-key gate
D1–D4 delivered setup caching, predecessor-key binding, AIR-native issuer authorization, frozen parameters, and proof-version boundaries. Mainnet is still blocked: v4 reconstructs its root verifier from proof-carried common data. D5 must authenticate a canonical v5 root independently.
Open receipts
03
Batching v2 + authenticated gossip
Threat model, co-funded transactions, two-round gossip, durable reservations, adversarial repairs, and Lean batch semantics have reproducible receipts.
Open receipts
04
Reference signet readiness
Synchronization, discovery, fee modeling, recovery, batch amortization, and reference build evidence exist. This baseline does not authorize a release.
Open receipts
05
Signal Test USD integration
PR #6 merged at db818658; PR #7 closed the broad hosted gate at 4804e094 with 1,552 tests passed and PR #8 merged the canonical presentation fix at 1e3472b9. The fresh parent/child run settled at height 316824. Rust PR #16 merged at 908bbb53 with green Rust CI; Signal PR #9 pins it at 9b72d86d. PR-tip Signal jobs passed, but the post-merge default Xcode job failed while recovery passed. Crash-matrix, clean recovery, and physical-device gates remain.
06
Release + mainnet
D5, independent security review, signed distribution, upstream submission, production issuer and issuance policy, and every mainnet transaction are deliberately still open. Exact registry bytes are reproducible with one secret-free Rust tool, but structural validity is neither activation nor mint authority.
Open source of truth
07
Domain hardening
Apex, www, TLS, HTTPS, and organization verification are live. DNSSEC requires Cloudflare activation and publishing the exact DS at Namecheap.