mirror of
https://github.com/luxfi/pulsar.git
synced 2026-09-24 00:25:52 +00:00
zeekayandHanzo Dev
7a762eb446
The relabel bypass tests reused one joint nonce under a new NonceID but left the clearance QC stale, so the QC guard could have been the thing refusing the second partial. Re-attest the relabeled cert with a QC over its new payload: the QC guard passes, and the per-share single-use nonce ledger is the only guard left to refuse the reused nonce. That refusal — which keeps the (c_A-c_B)*s1 key-recovery system from ever being assembled — is now proven in isolation on both the explicit and the bare default ledger paths. Co-authored-by: Hanzo Dev <[email protected]>