@smartledger/bsv 8.0.0 → 8.1.0

package/docs/AUDIT_SCOPE.md

@@ -5,7 +5,7 @@ cryptographic core, and carries the enquiry text to send to vendors. It exists s
 every vendor prices the *same* thing, and so that the reasoning behind the scope
 boundary survives past the engagement that prompted it.
 
-Measured against **v8.0.0**, 2026-08-13. Re-measure before sending if the version has
+Measured against **v8.1.0**, 2026-08-13. Re-measure before sending if the version has
 moved (`docs/AUDIT_SCOPE.md` is not covered by a drift gate).
 
 ## 1. The question we are asking
@@ -29,11 +29,11 @@ testing.
 Two tiers, to be **priced separately** so the boundary can be drawn against a number
 rather than before seeing one.
 
-### Tier 1 — core, 12,254 lines across 33 files
+### Tier 1 — core, 12,268 lines across 33 files
 
 | Module | Lines | Why it matters |
 | --- | ---: | --- |
-| `lib/script/` | 3,737 | Consensus script interpreter. Divergence from the node means accepting a transaction the network rejects, or the reverse. |
+| `lib/script/` | 3,751 | Consensus script interpreter. Divergence from the node means accepting a transaction the network rejects, or the reverse. |
 | `lib/transaction/` | 2,779 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
 | `lib/crypto/` | 2,519 | ECDSA, nonce derivation, signature encoding, the script-number type. |
 | `lib/hdprivatekey.js`, `lib/hdpublickey.js` | 1,168 | BIP-32 derivation, including hardened paths. |
@@ -60,17 +60,17 @@ is not.
 | `@noble/curves`, `@noble/hashes`, `@noble/ciphers` | Already audited | The primitives come from the Noble libraries, which **Cure53 has audited and published on**. We do not implement curve or hash arithmetic ourselves. State this explicitly to vendors — otherwise they price work we do not need. |
 | `lib/smart_contract/`, `lib/ltp/`, `lib/gdaf/`, `lib/ordinals/`, `lib/block/`, plus 9 further directories and 6 top-level files | Excluded | Application layer, 22,815 lines — 18,435 in the five named modules and 4,380 in the remainder. Written in-house and covered by adversarial tests. Worth a separate engagement; including it here would blur the question in §1. |
 
-Totals reconcile against `lib/`, which is 36,676 lines across 123 files:
+Totals reconcile against `lib/`, which is 36,690 lines across 123 files:
 
 ```
-tier 1      12,254
+tier 1      12,268
 tier 2       1,607
 excluded    22,815
             ------
-total       36,676
+total       36,690
 ```
 
-Core + optional = 13,861.
+Core + optional = 13,875.
 
 ## 4. What an auditor gets on day one
 
@@ -133,7 +133,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,254 lines, 33 files. Script interpreter, sighash and signing,
+  Tier 1 — 12,268 lines, 33 files. Script interpreter, sighash and signing,
   ECDSA and signature encoding, BIP-32 derivation, key and address
   construction.
 
@@ -171,7 +171,7 @@ SmartLedger Technology
 Every figure in this document, including the excluded total, must come out of this
 script. **Derive the excluded count as the complement — never by subtracting tier 1
 alone.** The first draft did exactly that, double-counted tier 2, and published parts
-summing to 37,430 against a 36,676 whole; §7 could not catch it because it reproduced
+summing to 37,430 against a 36,690 whole; §7 could not catch it because it reproduced
 every figure except the wrong one.
 
 ```sh

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@8.0.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@8.1.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@8.0.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.0.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.0.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.0.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.0.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.0.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.0.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@8.0.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@8.1.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.1.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.1.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.1.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.1.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.1.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.1.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@8.1.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@8.0.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@8.1.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@8.0.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@8.0.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.0.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.0.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.0.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.0.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.0.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.0.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@8.1.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@8.1.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.1.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.1.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.1.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.1.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.1.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.1.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.1.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/script/interpreter.js

@@ -268,11 +268,6 @@ Interpreter.MAX_SCRIPT_ELEMENT_SIZE = 520
 // operands through it, and Chronicle's shift bounds its result against it.
 Interpreter.MAXIMUM_ELEMENT_SIZE = 4
 
-// The script-number bound `useMainnetConsensus()` applies. Held separately from the
-// pre-Genesis default above so the two can diverge once the post-Genesis value is pinned
-// against the node source; see the note in useMainnetConsensus for why it is not simply
-// raised with the other caps.
-Interpreter.DEFAULT_SCRIPT_NUM_LENGTH = 4
 // Maximum number of non-push opcodes per script. Pre-Genesis consensus is 201;
 // post-Genesis BSV removed this limit. Exposed as a constant (instead of a magic
 // number) so applications can opt into post-Genesis rules — e.g. OP_PUSH_TX
@@ -327,9 +322,28 @@ Interpreter.LOCKTIME_THRESHOLD_BN = new BN(Interpreter.LOCKTIME_THRESHOLD)
 Interpreter.useGenesisLimits = function (max) {
   max = max || 0x7fffffff
   Interpreter.MAX_SCRIPT_ELEMENT_SIZE = max
-  Interpreter.MAXIMUM_ELEMENT_SIZE = max
   Interpreter.MAX_OPS_PER_SCRIPT = max
   Interpreter.MAX_SCRIPT_SIZE = max
+
+  // MAXIMUM_ELEMENT_SIZE is deliberately NOT raised. It is CScriptNum's `max_length`,
+  // and since the limits became era-derived it serves only as the PRE-Genesis fallback
+  // for `maxScriptNumLength()` — post-Genesis is 750,000 and post-Chronicle 32,000,000,
+  // both reached through the era flags rather than this static.
+  //
+  // Raising it therefore could not enable post-Genesis arithmetic; it could only corrupt
+  // pre-Genesis validation, and it did. Measured, a 5-byte operand under
+  // P2SH,STRICTENC:
+  //
+  //   fresh process:            SCRIPT_ERR_SCRIPTNUM_OVERFLOW   (what the node says)
+  //   after useGenesisLimits(): ACCEPTED
+  //
+  // A false accept, in the direction that can cost money, produced by a process-wide
+  // side effect on unrelated code later in the same process. The node's own vectors
+  // agree: all 22 SCRIPTNUM_OVERFLOW rows are pre-Genesis, and raising this static turns
+  // 15 of them into false accepts.
+  //
+  // For post-Genesis arithmetic, pass the era — `Interpreter.mainnetFlags()`, or simply
+  // omit the flags argument, which now defaults to current mainnet.
   return Interpreter
 }
 
@@ -535,9 +549,16 @@ Interpreter.mainnetFlags = function (opts) {
     Interpreter.SCRIPT_VERIFY_MINIMALDATA |
     Interpreter.SCRIPT_ENABLE_SIGHASH_FORKID |
     Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES |
-    Interpreter.SCRIPT_ENABLE_MONOLITH_OPCODES
+    Interpreter.SCRIPT_ENABLE_MONOLITH_OPCODES |
+    // The era flags. Without these the interpreter falls back to the pre-Genesis
+    // statics, so a validator built from a helper named after mainnet was applying
+    // 2019 limits — most sharply the 4-byte script-number bound, where post-Genesis
+    // is 750,000 and post-Chronicle 32,000,000. Genesis is unconditional here: it
+    // activated in 2020 and cannot be opted out of by anything still being spent.
+    Interpreter.SCRIPT_GENESIS |
+    Interpreter.SCRIPT_UTXO_AFTER_GENESIS
   if (opts.afterChronicle !== false) {
-    flags |= Interpreter.SCRIPT_ENABLE_CHRONICLE
+    flags |= Interpreter.SCRIPT_ENABLE_CHRONICLE | Interpreter.SCRIPT_UTXO_AFTER_CHRONICLE
   }
   return flags
 }
@@ -601,25 +622,18 @@ Interpreter.useMainnetConsensus = function (opts) {
   opts = opts || {}
   Interpreter.useGenesisLimits(opts.max)
 
-  // Restore a FINITE script-number bound. `useGenesisLimits()` raises all four caps to
-  // the same ceiling, and for MAXIMUM_ELEMENT_SIZE — which is CScriptNum's `max_length`,
-  // not a push-size cap — a ceiling of 0x7fffffff makes Chronicle's shift overflow check
-  // unreachable, because it tests `current_size + shift_bytes > max_length`. Measured:
-  //
-  //   default limits:              SCRIPT_ERR_SCRIPTNUM_OVERFLOW  (correct)
-  //   after useGenesisLimits():    valid, grows without bound     (WRONG)
-  //
-  // A validator looser than consensus accepts what the network rejects, so the ceiling
-  // cannot be right whatever the true post-Genesis value turns out to be.
+  // The script-number bound is NOT set here. It is era-derived from the flags by
+  // Interpreter#maxScriptNumLength(): 4 bytes pre-Genesis, 750,000 after Genesis,
+  // 32,000,000 after Chronicle. An earlier version of this function pinned
+  // MAXIMUM_ELEMENT_SIZE to a static value to stop useGenesisLimits() raising it to
+  // 0x7fffffff, which made Chronicle's shift-overflow check unreachable. That was
+  // treating the symptom: the real defect was mainnetFlags() omitting the era flags,
+  // so the era-derived bound never applied. Fixed there instead.
   //
-  // The true value is NOT settled here. Genesis raised this bound above the pre-Genesis
-  // 4 bytes, so the conservative default below is stricter than mainnet for wide
-  // arithmetic — the same class of error #112 fixed, in the opposite direction. It is
-  // chosen deliberately: given a choice between rejecting a valid script and accepting
-  // an invalid one, this library fails closed. Callers who know the bound their workload
-  // needs should pass `maxScriptNumLength` explicitly, and the value should be pinned
-  // against the SV Node source before this default changes.
-  Interpreter.MAXIMUM_ELEMENT_SIZE = opts.maxScriptNumLength || Interpreter.DEFAULT_SCRIPT_NUM_LENGTH
+  // The node's vectors settle the pre-Genesis value at 4 and are silent on the rest —
+  // all 22 SCRIPTNUM_OVERFLOW rows carry P2SH,STRICTENC and no era flag. Raising the
+  // static bound to 8 turns 15 of them into false accepts, which is how that was
+  // measured.
 
   return Interpreter.mainnetFlags(opts)
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "8.0.0",
+  "version": "8.1.0",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",

package/test/script/defaults.js

@@ -91,3 +91,70 @@ describe('verify() consensus defaults', function () {
     })
   })
 })
+
+// The script-number bound is era-derived, not a process-wide static.
+//
+// `mainnetFlags()` omitted every era flag except SCRIPT_ENABLE_CHRONICLE, so
+// `maxScriptNumLength()` fell back to the pre-Genesis 4 for a validator built from the
+// helper named after mainnet — while post-Genesis is 750,000 and post-Chronicle
+// 32,000,000. An earlier fix pinned MAXIMUM_ELEMENT_SIZE to stop useGenesisLimits()
+// raising it to 0x7fffffff and making Chronicle's shift-overflow check unreachable; that
+// treated the symptom rather than the missing flags.
+//
+// The node's vectors settle the pre-Genesis value at 4 and are silent above it: all 22
+// SCRIPTNUM_OVERFLOW rows carry P2SH,STRICTENC and no era flag, and raising the static
+// bound to 8 turns 15 of them into false accepts.
+describe('script-number bound follows the era', function () {
+  function boundFor (flags) {
+    var i = new Interpreter()
+    i.set({ flags: flags })
+    return i.maxScriptNumLength()
+  }
+
+  it('is 4 before Genesis, which the node vectors pin', function () {
+    boundFor(0).should.equal(4)
+  })
+
+  it('is the post-Genesis figure when only Genesis is asked for', function () {
+    boundFor(Interpreter.mainnetFlags({ afterChronicle: false }))
+      .should.equal(Interpreter.MAX_SCRIPT_NUM_LENGTH_AFTER_GENESIS)
+  })
+
+  it('is the post-Chronicle figure under mainnetFlags() and the default', function () {
+    boundFor(Interpreter.mainnetFlags())
+      .should.equal(Interpreter.MAX_SCRIPT_NUM_LENGTH_AFTER_CHRONICLE)
+    boundFor(Interpreter.currentConsensusFlags())
+      .should.equal(Interpreter.MAX_SCRIPT_NUM_LENGTH_AFTER_CHRONICLE)
+  })
+
+  // Genesis activated in 2020 and nothing still spendable predates it in a way that
+  // makes a mainnet helper want the older limits, so it is not opt-out-able here.
+  it('carries the Genesis era flags in mainnetFlags(), both variants', function () {
+    ;[Interpreter.mainnetFlags(), Interpreter.mainnetFlags({ afterChronicle: false })].forEach(function (f) {
+      (f & Interpreter.SCRIPT_GENESIS).should.equal(Interpreter.SCRIPT_GENESIS)
+      ;(f & Interpreter.SCRIPT_UTXO_AFTER_GENESIS).should.equal(Interpreter.SCRIPT_UTXO_AFTER_GENESIS)
+    })
+  })
+
+  it('drops only the Chronicle pair for a pre-activation UTXO', function () {
+    var pre = Interpreter.mainnetFlags({ afterChronicle: false })
+    ;(pre & Interpreter.SCRIPT_ENABLE_CHRONICLE).should.equal(0)
+    ;(pre & Interpreter.SCRIPT_UTXO_AFTER_CHRONICLE).should.equal(0)
+  })
+
+  // useMainnetConsensus() must no longer pin the static; the flags carry the bound.
+  //
+  // The limits are process-wide statics, so this saves and restores them. Without the
+  // restore the raised caps leak into every later test in the same mocha process — 24 of
+  // them, when this was first written, including the inherited pre-Genesis bitcoind
+  // vectors. The same trap #114 hit and documented.
+  it('is not overridden by useMainnetConsensus()', function () {
+    var saved = Interpreter.getLimits()
+    try {
+      var flags = Interpreter.useMainnetConsensus()
+      boundFor(flags).should.equal(Interpreter.MAX_SCRIPT_NUM_LENGTH_AFTER_CHRONICLE)
+    } finally {
+      Interpreter.setLimits(saved)
+    }
+  })
+})

package/test/script/genesis_limits.js

@@ -3,6 +3,7 @@
 /* global describe, it, beforeEach, afterEach */
 var should = require('chai').should()
 var bsv = require('../..')
+var BN = bsv.crypto.BN
 var Interpreter = bsv.Script.Interpreter
 var Script = bsv.Script
 var Opcode = bsv.Opcode
@@ -28,11 +29,30 @@ describe('Interpreter post-Genesis limits', function () {
     Interpreter.MAX_OPS_PER_SCRIPT.should.equal(500)
   })
 
-  it('useGenesisLimits() lifts all three caps', function () {
+  // MAXIMUM_ELEMENT_SIZE is no longer among them. It is CScriptNum's max_length, and
+  // since the limits became era-derived it is only the PRE-Genesis fallback — raising it
+  // could not enable post-Genesis arithmetic, only corrupt pre-Genesis validation.
+  it('useGenesisLimits() lifts the size caps but not the script-number bound', function () {
     Interpreter.useGenesisLimits()
     Interpreter.MAX_SCRIPT_ELEMENT_SIZE.should.equal(0x7fffffff)
-    Interpreter.MAXIMUM_ELEMENT_SIZE.should.equal(0x7fffffff)
     Interpreter.MAX_OPS_PER_SCRIPT.should.equal(0x7fffffff)
+    Interpreter.MAXIMUM_ELEMENT_SIZE.should.equal(4)
+  })
+
+  // The reason it must not be raised, stated as a test: a 5-byte operand is an overflow
+  // before Genesis, and no process-wide call may turn that into an accept.
+  it('cannot be made to accept a pre-Genesis script-number overflow', function () {
+    var overflow = new Script()
+      .add(Buffer.from('1234567890', 'hex'))
+      .add(Buffer.from([2]))
+      .add(Opcode.OP_MUL)
+    var flags = Interpreter.SCRIPT_VERIFY_P2SH | Interpreter.SCRIPT_VERIFY_STRICTENC |
+      Interpreter.SCRIPT_ENABLE_MONOLITH_OPCODES | Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES
+    Interpreter.useGenesisLimits()
+    var interp = new Interpreter()
+    interp.verify(new Script(), overflow, new bsv.Transaction(), 0, flags, new BN(0))
+      .should.equal(false)
+    interp.errstr.should.equal('SCRIPT_ERR_SCRIPTNUM_OVERFLOW')
   })
 
   // <2^32> <2^32> OP_ADD <2^33> OP_NUMEQUAL  — operands exceed the 4-byte cap.
@@ -54,9 +74,18 @@ describe('Interpreter post-Genesis limits', function () {
     run(bigAdd).should.equal(false)
   })
 
-  it('allows >4-byte arithmetic after useGenesisLimits()', function () {
+  // Post-Genesis arithmetic is reached through the ERA, not through the static. Before
+  // the limits became era-derived, useGenesisLimits() was the only route; it no longer
+  // is, and using it for this would corrupt pre-Genesis validation elsewhere.
+  it('allows >4-byte arithmetic when the post-Genesis era is asked for', function () {
+    var interp = new Interpreter()
+    interp.verify(new Script(), bigAdd, new bsv.Transaction(), 0,
+      Interpreter.mainnetFlags(), new BN(0)).should.equal(true)
+  })
+
+  it('still rejects it under pre-Genesis rules, whatever the statics say', function () {
     Interpreter.useGenesisLimits()
-    run(bigAdd).should.equal(true)
+    run(bigAdd).should.equal(false)
   })
 
   // 220 OP_NOPs then OP_1 — more non-push opcodes than the 201 cap allows.
@@ -156,14 +185,16 @@ describe('Interpreter post-Genesis limits', function () {
     })
   })
 
-  it('useGenesisLimits raises all four caps, and getLimits/setLimits round-trip', function () {
+  it('useGenesisLimits raises the size caps, and getLimits/setLimits round-trip', function () {
     var before = Interpreter.getLimits()
     before.maxScriptSize.should.equal(10000)
     Interpreter.useGenesisLimits(64 * 1024)
     var after = Interpreter.getLimits()
     after.maxScriptElementSize.should.equal(64 * 1024)
-    after.maximumElementSize.should.equal(64 * 1024)
     after.maxOpsPerScript.should.equal(64 * 1024)
+    // Not raised — see the note on useGenesisLimits. setLimits() can still set it
+    // explicitly, which is what the round-trip below checks.
+    after.maximumElementSize.should.equal(4)
     after.maxScriptSize.should.equal(64 * 1024)
     Interpreter.setLimits(before)
     Interpreter.getLimits().maxScriptSize.should.equal(10000)

package/version.js

@@ -1,3 +1,3 @@
 'use strict'
 // GENERATED by scripts/sync-version.js on `npm version` — do not edit.
-module.exports = '8.0.0'
+module.exports = '8.1.0'