mirror of
https://github.com/luxfi/dkg.git
synced 2026-10-30 16:58:45 +00:00
zeekay
288c1a1d3f
Replay-bound nonce tickets: offline inventory, consume-once, expiry, binding to (epoch, committee, policy, digest) via transcript.Hash; authenticity via channel.Sign under the new channel.CtxNonce. A ticket carries no secret nonce material (that lives in the dealerless nonce DKG) — it is the public signed lifecycle token. Inventory.Bind/Consume enforce consume-once + expiry; stateless VerifyTicket checks binding + issuer signature. Proven: bind/consume-once, double-consume rejected, expiry, binding-mutation rejected (ErrBinding), tampered signature rejected, exhaustion, foreign-ticket unknown, cross-context id isolation. go build/test/vet/gofmt green.