Files
zeekayandHanzo Dev ef5d6e9ae8 Put back what the deps refresh deleted, and pin the node that carries /v1/chain
node v1.36.179 adopts api v1.1.14, so the health service compiles and the
whole module builds. That tag also carries the /v1/chain cutover, which makes
it the node this SDK is written against.

The same "deps: go.mod refresh" that reverted the wallet also deleted 211
lines from two other files, additions only, no edits, nothing touching them
since:

profiles.Consensus derives K and alpha from the live validator count and is
the single source of truth for sampling safety -- its own comment records the
K=5/alpha=3 drift that was sub-BFT and that the engine refused. Deleting it
left the derivation with no home.

The hybrid signature verifier enforces AND across the classical and PQ
halves. It exists because a red-team finding showed OR semantics let a forged
hybrid through on a valid ECDSA half and a random PQ blob, which is hybrid
security reduced to the weaker half. Deleting it took the fix with it.

Both had kept their tests, which is the only reason the loss was visible: the
tests named functions that were gone, so the packages stopped compiling, so
none of their other tests ran either. Nothing calls either function today, so
restoring them changes no live path -- it returns the capability and lets the
tests run again.

TestListProfiles expected four profiles and there are five; production
arrived with the consensus derivation and the list never caught up, because
it could not run. It now names the set it means.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-30 15:26:37 -07:00
..