PQCAuth software release based on v1.0.1, built from the validated frozen commit 7cd976b85de27f43fc06cc434299567f30ef23ca. Upgrade plan and binary version: v1.1.0. Publishing this release does not deploy or authorize a mainnet upgrade; public-testnet, wallet/IBC and target-hardware acceptance remain separate rollout gates.
- Add opt-in PQCAuth protection to existing single-key classical accounts without changing their addresses. Protected transactions require both the account signature and an ML-DSA-65 factor; lifecycle operations require a single top-level message and DIRECT signing.
- Support registration, signing/recovery key rotation, delayed recovery, cancellation, protection changes and bounded historical key retention. Authz/Feegrant permissions remain unchanged and are explicitly disclosed by the CLI.
- Allow OPTIONAL and REQUIRED_FOR_REGISTERED enforcement only. Keep phase-one registration open except during applicable emergency pauses; global REQUIRED, registration cutoff and CLOSED/FRESH modes are not supported.
- Unify PQC verification pricing at a default/minimum of 750 gas. Remove independent per-transaction/per-block verification-count quotas and custom proposal filtering; retain SDK gas/byte/signature limits, the block gas meter, fixed extension caps and pre-decode wire limits.
- Set immutable launch defaults to 17,280 blocks for governance safety delay, 107,520 blocks for recovery and 46,080 blocks for maximum emergency pause. Use explicit emergency-only update intent and protect pending emergency activation from same-block full updates.
- Skip only PQC cryptographic verification on mempool recheck, preserving gas and state-dependent checks. First admission and block execution still verify signatures. Remove duplicate ML-DSA public-key parsing.
- Require trusted new-key target checks for offline recovery and rotation signing; display key fingerprints and reject mismatches. Preserve local factor-independence checks and reject incompatible registration backends.
- Restore committed height/time context for admission after restart. Keep the v1.0.1 IBC Amino fix and require its activation before the separate PQCAuth upgrade. Initialize module version 4; old experimental PQC databases are not automatically migrated.
- Build with Go 1.26.10 and patched dependencies pinned in go.mod. Preserve historical upgrade identities, archive-only Wasm behavior and ordinary SDK native ML-DSA/multisig transactions.
- Target-hardware capacity and final-artifact deployment rehearsals remain separate acceptance gates. Default mempool/proposal ordering can reject dependent same-account transactions under concurrent admission; this is not a PQCAuth-specific authentication failure. See the module README and
docs/PQCAUTH-ROLLOUT-PLAN.md.