lnurlcash-conformance 0.11.0 → 0.11.1

package/CHANGELOG.md

@@ -4,6 +4,13 @@ Semantic versioning. While the LUD-25 draft is unmerged, `0.x` minor bumps
 may add or tighten checks that a previously-passing mint now fails; pin an
 exact version if you gate CI on the grade.
 
+## 0.11.1 - 2026-09-15
+
+- Unsigned plain-hash Part 1 mutation outputs now pass the live grader cleanly
+  instead of producing an interoperability warning. Any optional legacy
+  signature that is returned must still verify; Part 2 `cp1` outputs still
+  require an amount-bearing `cs1` certificate.
+
 ## 0.11.0 - 2026-09-15
 
 **Amount-bearing certificates and internal-transfer discovery.** Part 2 now

package/README.md

@@ -95,7 +95,7 @@ must survive:
 | `--echoWrongK1` | answers the informational GET with a different `k1` |
 | `--lieAboutValue=N` | reports a `maxWithdrawable` it never signed |
 | `--signatureLayout=leading` | emits the recovery id at the other end |
-| `--signatures=false` | issues no Part 1 signatures. Accepted as the reference mint's degraded no-signer mode; the reference wallet will refuse an unsigned successful mutation |
+| `--signatures=false` | issues no optional Part 1 signatures. Unsigned plain-hash outputs are conforming; Part 2 `cp1` outputs still require certificates |
 | `--serverGeneratedSecrets` | hands back a secret it generated — the exposure `h` exists to close |
 | `--meltNeverSettles` | holds every melt in flight, so notes stay `pending` |
 | `--meltAlwaysFails` | fails every payment, restoring the note |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lnurlcash-conformance",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "Language-neutral conformance vectors, an adversarial mock mint, and a grader for LNURLcash (LUD-25) implementations",
   "author": "TheCryptoDonkey",
   "license": "MIT",

package/runner/index.mjs

@@ -1205,12 +1205,12 @@ export const gradeNote = async (noteUrl, report, options = {}) => {
       : 'the signature does not verify against the advertised mintPubkey and amount'
 
   await report.check('a legacy hash mutation signature verifies when present', async () => {
-    // The reference mint can operate without a signing backend and then has
-    // no signature to return. That mode remains usable by tolerant clients,
-    // but the committed reference wallet requires a signature after a
-    // successful mutation, so omission is an interoperability warning.
+    // Part 1 signatures are optional: a plain hash has no public note
+    // identifier to certify without disclosing its bearer secret. Older
+    // SERVICE implementations may still return one, and every signature
+    // that is present must verify.
     if (currentSig === null) {
-      throw soft('unsigned legacy output: accepted as no-signer mode, but strict reference-wallet clients may refuse it')
+      return 'unsigned legacy Part 1 output accepted'
     }
     assert(info.mintPubkey, 'a sig with no mintPubkey advertised verifies against nothing')
     assert(isCompressedPubkey(info.mintPubkey), 'mintPubkey is not a 33-byte compressed secp256k1 key')