MANDATORY hardfork update — H10 one-way seed
Update before the H10 activation (mainnet DAA 87,360,000). After activation, blocks mined with the old seed derivation are rejected (no reward, and the service bond counts missed answers). Pairs with node v1.5.7 and matches it byte-for-byte.
H10 one-way PoM walk-seed (consensus)
An exploit steered the proof-of-model seed toward cheap walks — valid proofs for a fraction of the real work (~22% of blocks since 27/08) — because the re-walk seed derivation was invertible. H10 replaces it with a one-way derivation: the seed is the leading 64 bits of PowHash(pre_pow_hash, timestamp, nonce) = cSHAKE256("ProofOfWorkHash"). Proof format and the memory walk are unchanged; only the seed changes, and only at/after the activation height. Below the gate, mining is byte-identical to v0.11.x.
Verified byte-for-byte against the node's pinned cross-implementation golden vectors on both the host and the GPU keccak (0x1fadaf72b089e024, 0xcec7e2d9fce5bda6, 0x60977326f8e922ab), plus a host↔GPU lockstep through the production walk kernels and a pre-H10 bit-exactness check.
Also in this release (matching reference miner v0.5.3)
- Escrow persistence: restarting against a pruned or not-yet-synced node no longer wipes unclaimed escrow entries — a block the node cannot return is treated as unknown (entries kept) instead of a ghost (purged). Reorged ghosts are still purged on the validated path.
- IPFS upload recovery: a failed local inference upload now restarts the kubo daemon and retries once (a dropped upload is a missed answer and a service-bond penalty). Remote endpoints are unchanged.
Notes
- The seed switch is automatic at the activation DAA — nothing to configure.
- Includes v0.11.17–v0.11.20 (chaseless PoM solver +8–14% on GDDR cards,
--wait-ready, the staging-crash VRAM fix,--force-modelverbatim loading). - AMD/OpenCL assets: from AMD claude.