@smartledger/bsv 8.0.1 → 8.2.0

package/docs/AUDIT_SCOPE.md

@@ -5,7 +5,7 @@ cryptographic core, and carries the enquiry text to send to vendors. It exists s
 every vendor prices the *same* thing, and so that the reasoning behind the scope
 boundary survives past the engagement that prompted it.
 
-Measured against **v8.0.1**, 2026-08-13. Re-measure before sending if the version has
+Measured against **v8.2.0**, 2026-08-15. Re-measure before sending if the version has
 moved (`docs/AUDIT_SCOPE.md` is not covered by a drift gate).
 
 ## 1. The question we are asking
@@ -29,11 +29,11 @@ testing.
 Two tiers, to be **priced separately** so the boundary can be drawn against a number
 rather than before seeing one.
 
-### Tier 1 — core, 12,249 lines across 33 files
+### Tier 1 — core, 12,268 lines across 33 files
 
 | Module | Lines | Why it matters |
 | --- | ---: | --- |
-| `lib/script/` | 3,732 | Consensus script interpreter. Divergence from the node means accepting a transaction the network rejects, or the reverse. |
+| `lib/script/` | 3,751 | Consensus script interpreter. Divergence from the node means accepting a transaction the network rejects, or the reverse. |
 | `lib/transaction/` | 2,779 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
 | `lib/crypto/` | 2,519 | ECDSA, nonce derivation, signature encoding, the script-number type. |
 | `lib/hdprivatekey.js`, `lib/hdpublickey.js` | 1,168 | BIP-32 derivation, including hardened paths. |
@@ -58,19 +58,19 @@ is not.
 | Component | Status | Reason |
 | --- | --- | --- |
 | `@noble/curves`, `@noble/hashes`, `@noble/ciphers` | Already audited | The primitives come from the Noble libraries, which **Cure53 has audited and published on**. We do not implement curve or hash arithmetic ourselves. State this explicitly to vendors — otherwise they price work we do not need. |
-| `lib/smart_contract/`, `lib/ltp/`, `lib/gdaf/`, `lib/ordinals/`, `lib/block/`, plus 9 further directories and 6 top-level files | Excluded | Application layer, 22,815 lines — 18,435 in the five named modules and 4,380 in the remainder. Written in-house and covered by adversarial tests. Worth a separate engagement; including it here would blur the question in §1. |
+| `lib/smart_contract/`, `lib/ltp/`, `lib/gdaf/`, `lib/ordinals/`, `lib/block/`, plus 9 further directories and 6 top-level files | Excluded | Application layer, 23,016 lines — 18,636 in the five named modules and 4,380 in the remainder. Written in-house and covered by adversarial tests. Worth a separate engagement; including it here would blur the question in §1. |
 
-Totals reconcile against `lib/`, which is 36,671 lines across 123 files:
+Totals reconcile against `lib/`, which is 36,891 lines across 123 files:
 
 ```
-tier 1      12,249
+tier 1      12,268
 tier 2       1,607
-excluded    22,815
+excluded    23,016
             ------
-total       36,671
+total       36,891
 ```
 
-Core + optional = 13,856.
+Core + optional = 13,875.
 
 ## 4. What an auditor gets on day one
 
@@ -94,7 +94,7 @@ Each of these should *reduce* the quote — they remove discovery work.
 - **`npm run conformance`** — 452 cases across 13 suites, freezing observable behaviour
   so any change surfaces as a diff. A second, independently written implementation
   (`smartledger-bsv-core`, the TypeScript port) agrees on all 452.
-- **4,461 passing tests**, plus a reproducible-bundle gate, a require-cycle gate, and a
+- **4,503 passing tests**, plus a reproducible-bundle gate, a require-cycle gate, and a
   type-drift gate that parses the published types against the runtime.
 - **`SECURITY.md`** — a published advisory (GHSA-gw63-x79h-mhjc) and a changelog of
   security fixes with the reasoning for each.
@@ -133,7 +133,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,249 lines, 33 files. Script interpreter, sighash and signing,
+  Tier 1 — 12,268 lines, 33 files. Script interpreter, sighash and signing,
   ECDSA and signature encoding, BIP-32 derivation, key and address
   construction.
 
@@ -143,7 +143,7 @@ Scope, and we would like these priced separately:
 JavaScript (CommonJS), Node >= 20.19. The code is public.
 
 Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
-by the Noble libraries and already audited; and our 22,815-line application
+by the Noble libraries and already audited; and our 23,016-line application
 layer (credentials, tokens, ordinals), which we would treat as a separate
 engagement.
 
@@ -171,7 +171,7 @@ SmartLedger Technology
 Every figure in this document, including the excluded total, must come out of this
 script. **Derive the excluded count as the complement — never by subtracting tier 1
 alone.** The first draft did exactly that, double-counted tier 2, and published parts
-summing to 37,430 against a 36,671 whole; §7 could not catch it because it reproduced
+summing to 37,430 against a 36,891 whole; §7 could not catch it because it reproduced
 every figure except the wrong one.
 
 ```sh

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@8.0.1/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@8.2.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@8.0.1/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.0.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.0.1/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.0.1/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.0.1/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.0.1/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.0.1/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@8.0.1/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@8.2.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.2.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.2.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.2.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.2.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.2.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@8.2.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@8.0.1/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@8.2.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@8.0.1/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@8.0.1/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.0.1/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.0.1/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.0.1/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.0.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.0.1/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.0.1/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@8.2.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@8.2.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.2.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.2.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.2.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.2.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.2.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@8.0.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@8.2.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/gdaf/attestation-signer.js

@@ -94,16 +94,104 @@ AttestationSigner._canonicalizeJSON = function(obj) {
   return JSON.stringify(AttestationSigner._sortValue(obj))
 }
 
+/**
+ * RFC 8785 (JCS) canonical JSON.
+ *
+ * `_canonicalizeJSON` above sorts keys and then REBUILDS an object, which loses the
+ * sort: V8 orders integer-like own properties numerically ahead of string keys whatever
+ * order they were inserted in. So `{ '10': …, '2': … }` serialized as
+ *
+ *     ours   {"2":"two","10":"ten"}
+ *     JCS    {"10":"ten","2":"two"}      (UTF-16 code-unit order)
+ *
+ * Within this library that is merely deterministic-but-nonstandard: signing and
+ * verification agree, and no forgery follows from it. Across implementations it is a
+ * verification failure — GDAF credentials exist to be checked by other parties, and a
+ * JCS-conformant verifier in any language computes a different hash and rejects a valid
+ * signature. The previous implementation acknowledged this with "do not feed integer-like
+ * keys here", which is a constraint the data cannot be relied upon to honour.
+ *
+ * This serializes directly instead of round-tripping through an object, so the order
+ * actually survives. Array.prototype.sort already compares strings by UTF-16 code unit,
+ * which is exactly what JCS specifies; the bug was never the sort.
+ *
+ * JSON.stringify is used for the leaf types on purpose: for finite numbers it produces
+ * ECMAScript Number::toString, which is what JCS mandates, and since ES2019 it emits
+ * well-formed output for lone surrogates. Both are hard to reproduce by hand and easy to
+ * get subtly wrong.
+ *
+ * @param {*} value - Value to serialize
+ * @returns {String} RFC 8785 canonical JSON
+ */
+AttestationSigner._canonicalizeJCS = function (value) {
+  if (value === null) return 'null'
+
+  var type = typeof value
+
+  if (type === 'boolean') return value ? 'true' : 'false'
+
+  if (type === 'number') {
+    // JCS has no representation for these; refuse rather than emit `null`, which is what
+    // JSON.stringify does and which would silently sign a different document.
+    if (!isFinite(value)) {
+      throw new Error('Cannot canonicalize non-finite number: ' + value)
+    }
+    return JSON.stringify(value)
+  }
+
+  if (type === 'string') return JSON.stringify(value)
+
+  if (Array.isArray(value)) {
+    // Arrays are order-significant. `undefined` has no JSON form and becomes null in an
+    // array, matching JSON.stringify.
+    return '[' + value.map(function (item) {
+      return item === undefined ? 'null' : AttestationSigner._canonicalizeJCS(item)
+    }).join(',') + ']'
+  }
+
+  if (type === 'object') {
+    var keys = Object.keys(value).filter(function (key) {
+      // Absent and explicitly-undefined are indistinguishable in JSON, so both are
+      // dropped — as JSON.stringify does.
+      return value[key] !== undefined && typeof value[key] !== 'function'
+    }).sort()
+
+    return '{' + keys.map(function (key) {
+      return JSON.stringify(key) + ':' + AttestationSigner._canonicalizeJCS(value[key])
+    }).join(',') + '}'
+  }
+
+  throw new Error('Cannot canonicalize value of type: ' + type)
+}
+
 /**
  * Create hash of credential for signing
  * @param {Object} credential - Credential object
  * @returns {Buffer} SHA256 hash
  */
-AttestationSigner._hashCredential = function(credential) {
-  var canonical = AttestationSigner._canonicalizeJSON(credential)
+AttestationSigner._hashCredential = function (credential, canonicalization) {
+  // RFC 8785 by default. `'legacy'` selects the pre-JCS sorted-key form, which is kept
+  // ONLY so credentials signed before the change still verify — see
+  // AttestationSigner.CANONICALIZATION. New signatures must never use it.
+  var canonical = canonicalization === AttestationSigner.CANONICALIZATION.LEGACY
+    ? AttestationSigner._canonicalizeJSON(credential)
+    : AttestationSigner._canonicalizeJCS(credential)
   return Hash.sha256(Buffer.from(canonical, 'utf8'))
 }
 
+/**
+ * Canonicalization forms understood when hashing a credential.
+ *
+ * JCS is RFC 8785 and is what everything signs with now. LEGACY is the sorted-key form
+ * this library used before, retained so existing credentials keep verifying: it is
+ * deterministic but not interoperable, because rebuilding the object let V8 reorder
+ * integer-like keys ahead of the sort.
+ */
+AttestationSigner.CANONICALIZATION = {
+  JCS: 'jcs',
+  LEGACY: 'legacy'
+}
+
 /**
  * Create base credential structure
  * @param {Object} credentialSubject - Subject data

package/lib/gdaf/attestation-verifier.js

@@ -306,18 +306,23 @@ AttestationVerifier._verifySignature = async function(credential) {
     delete credentialCopy.proof
     delete credentialCopy.rootHash
     
-    // Create hash
-    var credentialHash = AttestationSigner._hashCredential(credentialCopy)
-    
-    // Verify signature
+    // Signatures are made over RFC 8785 canonical JSON. Credentials signed before that
+    // change used the older sorted-key form, so both are tried — JCS first, so a
+    // current credential never pays for the legacy attempt. This is a compatibility
+    // path, not a weakening: each form is a complete, deterministic serialization and
+    // the signature must verify against one of them exactly.
     var signature = AttestationVerifier._parseJWSSignature(proof.jws)
-    
-    var ecdsa = new ECDSA()
-    ecdsa.hashbuf = credentialHash
-    ecdsa.pubkey = publicKey
-    ecdsa.sig = signature
 
-    var valid = ecdsa.verify()
+    var valid = [
+      AttestationSigner.CANONICALIZATION.JCS,
+      AttestationSigner.CANONICALIZATION.LEGACY
+    ].some(function (form) {
+      var ecdsa = new ECDSA()
+      ecdsa.hashbuf = AttestationSigner._hashCredential(credentialCopy, form)
+      ecdsa.pubkey = publicKey
+      ecdsa.sig = signature
+      return ecdsa.verify() === true
+    })
 
     if (valid) {
       return {
@@ -369,22 +374,24 @@ AttestationVerifier._verifyPresentationSignature = async function(presentation)
     var presentationCopy = JSON.parse(JSON.stringify(presentation))
     delete presentationCopy.proof
     
-    // Create hash
-    var presentationHash = AttestationSigner._hashCredential(presentationCopy)
-    
-    // Verify signature
+    // Both canonicalizations, for the reason given on the credential path above:
+    // presentations signed before the move to RFC 8785 must keep verifying.
     var signature = AttestationVerifier._parseJWSSignature(proof.jws)
-    
-    var ecdsa = new ECDSA()
-    ecdsa.hashbuf = presentationHash
-    ecdsa.pubkey = publicKey
-    ecdsa.sig = signature
 
-    var valid = ecdsa.verify()
+    var presentationValid = [
+      AttestationSigner.CANONICALIZATION.JCS,
+      AttestationSigner.CANONICALIZATION.LEGACY
+    ].some(function (form) {
+      var e = new ECDSA()
+      e.hashbuf = AttestationSigner._hashCredential(presentationCopy, form)
+      e.pubkey = publicKey
+      e.sig = signature
+      return e.verify() === true
+    })
 
     return {
-      valid: valid,
-      errors: valid ? [] : ['Presentation signature verification failed']
+      valid: presentationValid,
+      errors: presentationValid ? [] : ['Presentation signature verification failed']
     }
     
   } catch (error) {
@@ -541,10 +548,19 @@ AttestationVerifier.verifyCredentialHash = function(credential) {
     delete credentialCopy.proof
     delete credentialCopy.rootHash
     
-    var computedHash = AttestationSigner._hashCredential(credentialCopy)
+    // A rootHash written before the move to RFC 8785 was computed over the legacy
+    // form, so both are accepted. Buffer.compare on each is still an exact match —
+    // this widens which serialization is recognised, not what counts as equal.
     var storedHash = Buffer.from(credential.rootHash, 'hex')
-    
-    return Buffer.compare(computedHash, storedHash) === 0
+
+    return [
+      AttestationSigner.CANONICALIZATION.JCS,
+      AttestationSigner.CANONICALIZATION.LEGACY
+    ].some(function (form) {
+      return Buffer.compare(
+        AttestationSigner._hashCredential(credentialCopy, form), storedHash
+      ) === 0
+    })
   } catch (error) {
     return false
   }