# QRL Weekly, 2026-October-09

> For the complete documentation index, see [llms.txt](/llms.txt). This markdown page mirrors [the canonical HTML page](/weekly/2026-october-09/).





Published: 2026-10-09
Updated: 2026-10-09



Author: The QRL Core Contributors
















Weekly Development Snapshot Status September 18th: QRL Release Verifier audit complete September 11th: Ledger app audit and remediation complete August 4th: Audit results published for go-qrllib April 3rd: Audit complete of 2 cryptographic libraries March 31st: QRL 2.0 Testnet V2 released Audits & Remediation: 60% QRL 2.0 Testnet V3 checklist from that update:
Config parameters [done] Upstream bug fixes Testnet V2 scoped audits QRL v2.0 go-qrllib
Major cryptography work. Upstream PR #131 added/updated FALCON-1024 with the NIST API and bit-exact reference behaviour, byte-for-byte PQClean cross-verification across amd64/GOAMD64-v3/arm64, signed-message bound fixes and expanded tests; it also corrected ML-DSA-87 poly_uniform behaviour and ACVP coverage. PR #130 hardened public-API preconditions and pinned QRL v1 mainnet parity. Follow-on work added weak-key rejection, field-by-field weak-key vector tests, NTRU-equation checks on key import, sampler bounds, frozen signature encoding, and clarified ML-DSA secret-key validation semantics.
go-QRL
Broad client cleanup and hardening: added a legacy QRL XMSS signature-verification precompile; removed proof-of-work, merge-transition, unused HD-derivation and obsolete downloader/mining paths; fixed txpool chain-head subscription, malformed bad-block handling, devp2p IPv6/UDP behaviour and flaky Catalyst tests; also merged storage-key conformance and cross-runner work.
Qrysm
Added an alltools image containing every command binary, adjusted the gocognit limit for the block-batch path, and added further SSZ input validation for hand-written merkleization helpers.
Hyperion
Add xmssverify builtin for legacy QRL XMSS signatures PR #20.
QRL v1.0 -> v2.0 Migration QRL v1 archive
Began implementation and testnet-rehearsal framework. Added rehearsal warnings/status material, placeholder transport-test assets and documentation for the planned canonical archive: exact block protobuf export, independent integrity/signature verification, versioned canonical/SQLite/Parquet schemas, golden fixtures, rebuildable derived data and signed archive releases.
QRL v1 archive explorer
Created the read-only archive explorer scaffold for testnet rehearsals. The planned explorer will search archived blocks, transactions and addresses, show balances at the archive cutoff and serve immutable data without a live QRL v1 node.
QRL v1.0 webtools
Updated dependencies and the build process, including the ML-DSA signing action, and replaced the previous single-file bundler with a custom in-house solution.
dice
Dependency refresh and associated lockfile/build maintenance.