Wallet API, Security, Attestation, Architecture, Policy.
ABI and IDL signatures are now bound to chain and identity, backed by a fail-closed signer allowlist, with the development signing key gated out of production builds. On the signing path,
validate_charset runs unconditionally and rejects JSON short-form control escapes.The parser gateway emits a mock
bootProof and mounts the v2 route, matching the production TDX deployment shape for local development.parser_app now mirrors parser_cli’s chain-feature flags, so enclave and gRPC builds can include or exclude individual chains.Added
scripts/extract-nitro-pcrs.sh for extracting AWS Nitro PCR values, alongside self-hosted TEE deployment docs.The HTTP gateway now forwards
chain_metadata end-to-end and exposes content digests on every response. Downstream tools — policy engines, signing pipelines, audit logs — can compose VisualSign output into their own workflows without re-parsing the transaction.