QRL Weekly, 2026-October-09

Weekly Development Snapshot

Status

• September 18th: QRL Release Verifier audit complete
• September 11th: Ledger app audit and remediation complete
• August 4th: Audit results published for go-qrllib
• April 3rd: Audit complete of 2 cryptographic libraries
• March 31st: QRL 2.0 Testnet V2 released
• Audits & Remediation: 60%

QRL 2.0 Testnet V3 checklist from that update:

• Config parameters
• [done] Upstream bug fixes
• Testnet V2 scoped audits

QRL v2.0

go-qrllib

Major cryptography work. Upstream PR #131 added/updated FALCON-1024 with the NIST API and bit-exact reference behaviour, byte-for-byte PQClean cross-verification across amd64/GOAMD64-v3/arm64, signed-message bound fixes and expanded tests; it also corrected ML-DSA-87 poly_uniform behaviour and ACVP coverage. PR #130 hardened public-API preconditions and pinned QRL v1 mainnet parity. Follow-on work added weak-key rejection, field-by-field weak-key vector tests, NTRU-equation checks on key import, sampler bounds, frozen signature encoding, and clarified ML-DSA secret-key validation semantics.

go-QRL

Broad client cleanup and hardening: added a legacy QRL XMSS signature-verification precompile; removed proof-of-work, merge-transition, unused HD-derivation and obsolete downloader/mining paths; fixed txpool chain-head subscription, malformed bad-block handling, devp2p IPv6/UDP behaviour and flaky Catalyst tests; also merged storage-key conformance and cross-runner work.

Qrysm

Added an alltools image containing every command binary, adjusted the gocognit limit for the block-batch path, and added further SSZ input validation for hand-written merkleization helpers.

Hyperion

Add xmssverify builtin for legacy QRL XMSS signatures PR #20.

QRL v1.0 -> v2.0 Migration

QRL v1 archive

Began implementation and testnet-rehearsal framework. Added rehearsal warnings/status material, placeholder transport-test assets and documentation for the planned canonical archive: exact block protobuf export, independent integrity/signature verification, versioned canonical/SQLite/Parquet schemas, golden fixtures, rebuildable derived data and signed archive releases.

QRL v1 archive explorer

Created the read-only archive explorer scaffold for testnet rehearsals. The planned explorer will search archived blocks, transactions and addresses, show balances at the archive cutoff and serve immutable data without a live QRL v1 node.

QRL v1.0

webtools

Updated dependencies and the build process, including the ML-DSA signing action, and replaced the previous single-file bundler with a custom in-house solution.

dice

Dependency refresh and associated lockfile/build maintenance.