yakmesh 1.2.0 → 1.3.1

package/CHANGELOG.md

@@ -1,124 +1,113 @@
 # Changelog
 
-All notable changes to YAKMESH™ will be documented in this file.
+All notable changes to YAKMESH will be documented in this file.
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+## [1.3.1] - 2026-01-16
 
-## [1.2.0] - 2026-01-15
+### Security
+- Hardened peer handshake protocol validation
+- Enhanced network fingerprint verification in HELLO/WELCOME exchange
+- Added CodebaseLock module for runtime source integrity
 
 ### Added
-- **TME (Temporal Mesh Encoding)**: Novel packet resilience system unique to YAKMESH
-  - Exploits atomic time synchronization as the redundancy dimension
-  - Cryptographic temporal chaining binds data to specific points in time
-  - Mesh topology-aware encoding for intelligent path diversity
-  - NOT erasure coding - a fundamentally new approach to packet loss recovery
-- **TemporalSlice**: Atomic unit of TME with cryptographic time binding
-  - Temporal hash includes: data + timestamp + sequence + mesh position
-  - Chain integrity via prevTemporalHash linking
-  - Tamper detection on deserialization
-- **TemporalStream**: Message slicing and reassembly with temporal properties
-  - Configurable slice size and timing intervals
-  - Completion tracking and missing slice detection
-  - Temporal chain validation
-- **TemporalReconstructor**: Recovery system using timing proofs
-  - Consensus verification from multiple mesh neighbors
-  - Missing slice attestation via timing proofs
-  - Partial reconstruction capabilities
-- **TemporalMeshEncoder**: High-level API for TME operations
-  - Full encode/decode lifecycle management
-  - Statistics tracking (slices sent/received, completion rates)
-  - Stream status monitoring
-- New test suite: 18 TME-specific tests (test-tme.mjs)
-
-### Philosophy
-- "Time IS the redundancy dimension" - unlike Walrus/Red Stuff 2D erasure coding
-- Designed for real-time mesh networks with atomic clock sync
-- Leverages YAKMESH's unique post-quantum + atomic timing combination
+- 3-node test infrastructure for protocol verification
+- iO-style (indistinguishability obfuscation) network identity derivation
+- Human-readable network names from codebase fingerprint
 
-## [1.1.0] - 2026-01-14
+### Fixed
+- Config path resolution for relative/absolute paths
+- Test suite node ID prefix assertion
 
-### Added
-- **NAVR (Network Assimilation Validation Routine)**: Computational identity verification for new nodes
-  - Replaces traditional "Proof of Work" terminology to avoid blockchain confusion
-  - One-time puzzle solve during node registration (NOT mining)
-  - Configurable difficulty for network defense scaling
-- **Sybil Defense Module** (`mesh/sybil-defense.js`):
-  - NAVR computational puzzle for identity creation
-  - ReputationTracker for trust scoring (0.0 to 1.0 scale)
-  - SubnetDiversity to prevent eclipse attacks (max 3 connections per /24 subnet)
-- **Replay Defense Module** (`mesh/replay-defense.js`):
-  - NonceRegistry with cryptographic 32-byte nonces (1hr expiry)
-  - TimestampValidator (10-minute freshness window)
-  - SequenceTracker for per-sender message ordering
-  - ChallengeResponse for mutual node authentication
-- **Message Validator Module** (`mesh/message-validator.js`):
-  - Size limits per message type (1MB max, gossip 64KB, handshake 8KB)
-  - Nesting depth protection (max 10 levels)
-  - SafeJsonParser with prototype pollution protection
-- Expanded test suite: 24 security tests covering all attack vectors
+---
 
-### Security
-- Protection against Sybil attacks via NAVR + reputation + subnet diversity
-- Protection against replay attacks via nonces + timestamps + sequences
-- Protection against amplification attacks via message size limits
-- Protection against eclipse attacks via subnet connection limits
+## [1.3.0] - 2026-01-15
+
+### 🌟 Major New Systems - "A Beacon in the Darkness"
+
+#### ECHO™ - Encrypted Coordinate Heuristic Oracle
+- Privacy-preserving network topology discovery
+- Virtual coordinate system for latency estimation
+- Encrypted timing probes (AES-256-GCM)
+- Route optimization through coordinate-based pathfinding
+
+#### PULSE™ - Precision Universal Latency Sync Engine  
+- Mesh heartbeat system with cryptographic proofs
+- Node liveness detection (alive/suspect/dead states)
+- Network partition detection with confidence scoring
+- Raft-inspired leader election using heartbeat chains
+
+#### PHANTOM™ - Post-quantum Hidden Anonymous Network Transmission
+- **First-ever post-quantum onion routing implementation**
+- ML-KEM-768 (Kyber) key encapsulation per layer
+- Multi-layer encryption with temporal padding
+- Decoy traffic injection (10% probability)
+- Fixed packet sizing to prevent length analysis
+
+#### BEACON™ - Broadcast Emergency Alert Channel Over Network
+- Priority message propagation (ROUTINE → CRITICAL)
+- Flood-based protocol with intelligent deduplication
+- Proof-of-receipt for delivery confirmation
+- TTL-based propagation control
+
+### 📊 Test Coverage
+- 68 tests total (18 TME + 24 Security + 26 Novel Systems)
+- All tests passing
+
+### 🔐 Security Improvements
+- Enhanced cryptographic hashing (SHA3-256)
+- Timing attack resistance in PHANTOM
+- Improved rate limiting integration
+
+### 🛡️ Code Proof Protocol Hardening
+- **CRITICAL FIX**: HELLO message now includes `networkFingerprint`
+- **CRITICAL FIX**: WELCOME handler validates fingerprint, rejects mismatches (code 1008)
+- Added `CodebaseLock` module for runtime source file protection
+- Fixed config loading for relative/absolute path handling
+- Comprehensive 3-node test suite: 17/17 tests passing
+  - Same-codebase peering verification
+  - Cross-codebase rejection (bidirectional)
+  - N-way fingerprint isolation matrix
+  - Empty/partial fingerprint attack blocking
+  - Flood attack resistance (20 simultaneous rejected)
+  - Fingerprint spoofing prevention
 
-## [1.0.3] - 2026-01-15
+---
 
-### Fixed
-- **CRITICAL**: Fixed ML-DSA-65 signature verification parameter order (was: publicKey, message, signature → now: signature, message, publicKey)
+## [1.2.0] - 2026-01-15
 
 ### Added
-- **Rate Limiter**: New `ConnectionRateLimiter` class for DoS protection
-  - Connection flood protection (30 connections/minute per IP)
-  - Handshake spam detection (100 handshakes/minute global)
-  - Gossip message throttling (500 messages/minute)
-  - Automatic cleanup of stale tracking data
-- Comprehensive test suite (17 tests covering crypto, security, performance)
-- Stress test suite (14 tests with edge cases)
-
-### Security
-- Integrated rate limiting into mesh/network.js WebSocket handling
-- Protection against 51% / network isolation attacks via message throttling
+- **TME™ (Temporal Mesh Encoding)** - Novel packet resilience system
+  - Encodes data across TIME, not space
+  - Temporal slicing with cryptographic chaining
+  - Predictive reconstruction from timing proofs
+- TME FAQ documentation
+- Whitepaper (docs/WHITEPAPER.md)
 
-## [1.0.2] - 2026-01-14
-
-### Fixed
-- Fixed README.md formatting for proper rendering on npm and GitHub
+---
 
-## [1.0.1] - 2026-01-14
+## [1.1.0] - 2026-01-14
 
-### Fixed
-- Removed Pro-only security module from public npm package
-- Added `.npmignore` to exclude proprietary code
+### Added
+- **NAVR** (Network Access Verification via Resources) - Sybil defense
+- Replay attack protection (nonces, timestamps, sequences)
+- Message validator with size limits and depth checks
+- Rate limiter for DoS protection
+- Subnet diversity tracking
 
-## [1.0.0] - 2026-01-14
+---
 
-### Added
-- **Post-Quantum Cryptography**: ML-DSA-65 (NIST FIPS 204) signatures
-- **Self-Verifying Oracle**: Deterministic validation without external trust
-- **Mesh Networking**: P2P WebSocket communication with gossip protocol
-- **Precision Timing**: Support for atomic clocks, GPS, PTP, NTP time sources
-- **Plugin Architecture**: BaseAdapter for custom database integrations
-- **Phase Modulation**: Time-based anti-replay protection
-- **Network Identity**: Configurable salts for isolated network deployments
-- **Code Proof Protocol**: Integrity verification for distributed code
-- **Consensus Engine**: Distributed agreement on network state
-- **CLI Tools**: `yakmesh init`, `yakmesh start`, `yakmesh status`
-- **Dashboard**: Web-based node monitoring interface
-- **Embedded Webserver**: Caddy integration for HTTPS/reverse proxy
+## [1.0.3] - 2026-01-15
 
-### Security
-- XChaCha20-Poly1305 encryption for message payloads
-- Lattice-based cryptography resistant to quantum attacks
-- Hardware timestamping support for timing attack mitigation
+### Fixed
+- verify() function in identity module
+- Rate limiter initialization
 
 ---
 
-[1.0.3]: https://github.com/yakmesh/yakmesh/releases/tag/v1.0.3
-[1.0.2]: https://github.com/yakmesh/yakmesh/releases/tag/v1.0.2
-[1.0.1]: https://github.com/yakmesh/yakmesh/releases/tag/v1.0.1
-[1.0.0]: https://github.com/yakmesh/yakmesh/releases/tag/v1.0.0
-
-
+## [1.0.0] - 2026-01-13
+
+### Initial Release
+- ML-DSA-65 post-quantum signatures
+- SQLite-based distributed oracle
+- WebSocket mesh networking
+- Phase-based consensus timing

package/README.md

@@ -1,185 +1,185 @@
-<div align="center">
-  <img src="https://yakmesh.dev/assets/yakmesh-logo2.png" alt="YAKMESH" width="200">
-
-  <h1>🏔️ YAKMESH™: Sturdy & Secure</h1>
-
-  <p><strong>Yielding Atomic Kernel Modular Encryption Secured Hub</strong></p>
-
-  <p>
-    <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
-    <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node.js-18+-green.svg" alt="Node.js"></a>
-    <a href="https://csrc.nist.gov/projects/post-quantum-cryptography"><img src="https://img.shields.io/badge/Crypto-Post--Quantum-blue.svg" alt="Post-Quantum"></a>
-    <a href="https://www.npmjs.com/package/yakmesh"><img src="https://img.shields.io/npm/v/yakmesh.svg" alt="npm version"></a>
-  </p>
-</div>
-
----
-
-YAKMESH is a high-resiliency, decentralized networking layer designed for the 2026 threat landscape. Built with quantum-resistant cryptography at its core and anchored by PCIe atomic timing synchronization, YAKMESH provides a "sturdy" substrate for distributed systems that cannot afford to fail.
-
-## Why YAKMESH?
-
-In an era where traditional ECDSA is increasingly vulnerable and network jitter can desynchronize global state, YAKMESH offers a three-pillar solution:
-
-🌿 **Yielding Resilience**: A self-healing mesh topology that adapts to node failure and adversarial interference without central authority.
-
-⚛️ **Atomic Precision**: Integrated support for PCIe atomic clock hardware, enabling nanosecond-level hardware timestamping for low-latency synchronization.
-
-🔐 **Quantum Hardened**: Fully compatible with Project Zond and the QRL (Quantum Resistant Ledger) ecosystem, utilizing stateless lattice-based signatures (ML-DSA) from Genesis.
-
----
-
-## The Y.A.K.M.E.S.H. Philosophy
-
-| Letter | Principle | Description |
-|--------|-----------|-------------|
-| **Y** | **Yielding** | Not brittle; flexible enough to absorb network shocks |
-| **A** | **Atomic** | Grounded in the absolute truth of physical time |
-| **K** | **Kernel** | The essential, innermost part of the secure stack |
-| **M** | **Modular** | Swap out encryption primitives or transport layers as tech evolves |
-| **E** | **Encryption** | Privacy and integrity by default |
-| **S** | **Secured** | Hardened against both classical and quantum vectors |
-| **H** | **Hub** | A nexus for decentralized data and peer-to-peer logic |
-
----
-
-## Features
-
-- 🔒 **Post-Quantum Secure** - ML-DSA-65 (NIST FIPS 204) signatures
-- 🔮 **Self-Verifying Oracle** - Deterministic validation without external trust
-- 🌐 **Mesh Networking** - P2P WebSocket communication with gossip protocol
-- ⏱️ **Precision Timing** - Support for atomic clocks, GPS, PTP, NTP
-- 🔌 **Plugin Architecture** - Adapters for any database or API
-- 🛡️ **Phase Modulation** - Time-based anti-replay protection
-
-## Quick Start
-
-```bash
-npm install yakmesh
-```
-
-```javascript
-import { YakmeshNode } from 'yakmesh';
-
-const node = new YakmeshNode({
-  node: { name: 'My Node' },
-  network: { httpPort: 3000, wsPort: 9001 },
-});
-
-await node.start();
-```
-
-## CLI
-
-```bash
-# Initialize a new node
-npx yakmesh init
-
-# Start the node
-npx yakmesh start
-
-# Check status
-npx yakmesh status
-```
-
-## Documentation
-
-Full documentation available at **[yakmesh.dev](https://yakmesh.dev)**
-
-## Architecture
-
-```
-yakmesh/
-├── oracle/           # Self-verifying validation engine
-├── mesh/             # WebSocket P2P networking
-├── gossip/           # Epidemic-style message propagation
-├── identity/         # Post-quantum key management
-├── database/         # SQLite replication engine
-├── adapters/         # Platform integration plugins
-├── webserver/        # Embedded Caddy web server
-└── server/           # HTTP/WS server
-```
-
-## Network Identity
-
-Each YAKMESH network has a unique identity derived from configurable salts:
-
-```javascript
-import { setIdentityConfig } from 'yakmesh/oracle/network-identity.js';
-
-setIdentityConfig({
-  networkPrefix: 'my',           // Network ID prefix
-  identitySalt: 'my-app-v1',     // Unique network salt
-});
-
-// Different salt = different network (cannot interoperate)
-```
-
-## Time Source Trust Levels
-
-| Level | Source | Tolerance | Oracle Capable |
-|-------|--------|-----------|----------------|
-| ATOMIC | PCIe atomic clock | ±100ms | ✅ Yes |
-| GPS | GPS with PPS | ±500ms | ✅ Yes |
-| PTP | IEEE 1588 (Meinberg) | ±500ms | ⚠️ Partial |
-| NTP | Standard NTP | ±5000ms | ❌ No |
-
-## Adapters
-
-Create custom adapters by extending `BaseAdapter`:
-
-```javascript
-import { BaseAdapter } from 'yakmesh/adapters/base-adapter.js';
-
-class MyAdapter extends BaseAdapter {
-  async init() { /* Connect to your database */ }
-  getSchema() { return { tables: ['users', 'orders'] }; }
-  async fetchChanges(since) { /* Return changed records */ }
-  async applyChange(table, record, op) { /* Write to database */ }
-}
-```
-
-### Official Adapters
-
-- `@yakmesh/adapter-peerquanta` - PeerQuanta phpBB marketplace
-
-## API Endpoints
-
-| Endpoint | Method | Description |
-|----------|--------|-------------|
-| `/health` | GET | Node health status |
-| `/node` | GET | Node identity info |
-| `/peers` | GET | Connected peers |
-| `/oracle/status` | GET | Oracle integrity check |
-| `/network/identity` | GET | Network identity (hash obfuscated) |
-| `/time/status` | GET | Time source detection |
-| `/time/capabilities` | GET | Time oracle eligibility |
-| `/connect` | POST | Connect to a peer |
-
-## Pro Features
-
-YAKMESH Pro includes additional security features:
-
-- 🔐 **WebSocket Authentication** - Challenge-response auth with signatures
-- 🔒 **Message Encryption** - XChaCha20-Poly1305 encrypted messages
-- 📋 **Peer Allowlist/Blocklist** - Access control for private networks
-- 🛡️ **Connection Rate Limiting** - DDoS protection
-
-## License
-
-- **Community Edition**: MIT License (see [LICENSE](LICENSE))
-- **Pro Edition**: Proprietary License
-
-See [TRADEMARK.md](TRADEMARK.md) for trademark usage policy.
-
----
-
-<div align="center">
-  <sub>Built with quantum principles. Secured by math.</sub>
-  <br><br>
-  <strong><a href="https://yakmesh.dev">yakmesh.dev</a></strong>
-  <br><br>
-  <sub>© 2026 YAKMESH™ Project. Sturdy & Secure.</sub>
-  <br>
-  <sub>YAKMESH™ is a trademark of PeerQuanta, application pending (Serial No. 99594620).</sub>
-</div>
+<div align="center">
+  <img src="https://yakmesh.dev/assets/yakmesh-logo2.png" alt="YAKMESH" width="200">
+
+  <h1>🏔️ YAKMESH™: Sturdy & Secure</h1>
+
+  <p><strong>Yielding Atomic Kernel Modular Encryption Secured Hub</strong></p>
+
+  <p>
+    <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+    <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node.js-18+-green.svg" alt="Node.js"></a>
+    <a href="https://csrc.nist.gov/projects/post-quantum-cryptography"><img src="https://img.shields.io/badge/Crypto-Post--Quantum-blue.svg" alt="Post-Quantum"></a>
+    <a href="https://www.npmjs.com/package/yakmesh"><img src="https://img.shields.io/npm/v/yakmesh.svg" alt="npm version"></a>
+  </p>
+</div>
+
+---
+
+YAKMESH is a high-resiliency, decentralized networking layer designed for the 2026 threat landscape. Built with quantum-resistant cryptography at its core and anchored by PCIe atomic timing synchronization, YAKMESH provides a "sturdy" substrate for distributed systems that cannot afford to fail.
+
+## Why YAKMESH?
+
+In an era where traditional ECDSA is increasingly vulnerable and network jitter can desynchronize global state, YAKMESH offers a three-pillar solution:
+
+🌿 **Yielding Resilience**: A self-healing mesh topology that adapts to node failure and adversarial interference without central authority.
+
+⚛️ **Atomic Precision**: Integrated support for PCIe atomic clock hardware, enabling hardware timestamping with support for high-precision time sources for low-latency synchronization.
+
+🔐 **Quantum Hardened**: Fully compatible with Project Zond and the QRL (Quantum Resistant Ledger) ecosystem, utilizing stateless lattice-based signatures (ML-DSA) from Genesis.
+
+---
+
+## The Y.A.K.M.E.S.H. Philosophy
+
+| Letter | Principle | Description |
+|--------|-----------|-------------|
+| **Y** | **Yielding** | Not brittle; flexible enough to absorb network shocks |
+| **A** | **Atomic** | Grounded in the absolute truth of physical time |
+| **K** | **Kernel** | The essential, innermost part of the secure stack |
+| **M** | **Modular** | Swap out encryption primitives or transport layers as tech evolves |
+| **E** | **Encryption** | Privacy and integrity by default |
+| **S** | **Secured** | Hardened against both classical and quantum vectors |
+| **H** | **Hub** | A nexus for decentralized data and peer-to-peer logic |
+
+---
+
+## Features
+
+- 🔒 **Post-Quantum Secure** - ML-DSA-65 (NIST FIPS 204) signatures
+- 🔮 **Self-Verifying Oracle** - Deterministic validation without external trust
+- 🌐 **Mesh Networking** - P2P WebSocket communication with gossip protocol
+- ⏱️ **Precision Timing** - Support for atomic clocks, GPS, PTP, NTP
+- 🔌 **Plugin Architecture** - Adapters for any database or API
+- 🛡️ **Phase Modulation** - Time-based anti-replay protection
+
+## Quick Start
+
+```bash
+npm install yakmesh
+```
+
+```javascript
+import { YakmeshNode } from 'yakmesh';
+
+const node = new YakmeshNode({
+  node: { name: 'My Node' },
+  network: { httpPort: 3000, wsPort: 9001 },
+});
+
+await node.start();
+```
+
+## CLI
+
+```bash
+# Initialize a new node
+npx yakmesh init
+
+# Start the node
+npx yakmesh start
+
+# Check status
+npx yakmesh status
+```
+
+## Documentation
+
+Full documentation available at **[yakmesh.dev](https://yakmesh.dev)**
+
+## Architecture
+
+```
+yakmesh/
+├── oracle/           # Self-verifying validation engine
+├── mesh/             # WebSocket P2P networking
+├── gossip/           # Epidemic-style message propagation
+├── identity/         # Post-quantum key management
+├── database/         # SQLite replication engine
+├── adapters/         # Platform integration plugins
+├── webserver/        # Embedded Caddy web server
+└── server/           # HTTP/WS server
+```
+
+## Network Identity
+
+Each YAKMESH network has a unique identity derived from configurable salts:
+
+```javascript
+import { setIdentityConfig } from 'yakmesh/oracle/network-identity.js';
+
+setIdentityConfig({
+  networkPrefix: 'my',           // Network ID prefix
+  identitySalt: 'my-app-v1',     // Unique network salt
+});
+
+// Different salt = different network (cannot interoperate)
+```
+
+## Time Source Trust Levels
+
+| Level | Source | Tolerance | Oracle Capable |
+|-------|--------|-----------|----------------|
+| ATOMIC | PCIe atomic clock | ±100ms | ✅ Yes |
+| GPS | GPS with PPS | ±500ms | ✅ Yes |
+| PTP | IEEE 1588 (Meinberg) | ±500ms | ⚠️ Partial |
+| NTP | Standard NTP | ±5000ms | ❌ No |
+
+## Adapters
+
+Create custom adapters by extending `BaseAdapter`:
+
+```javascript
+import { BaseAdapter } from 'yakmesh/adapters/base-adapter.js';
+
+class MyAdapter extends BaseAdapter {
+  async init() { /* Connect to your database */ }
+  getSchema() { return { tables: ['users', 'orders'] }; }
+  async fetchChanges(since) { /* Return changed records */ }
+  async applyChange(table, record, op) { /* Write to database */ }
+}
+```
+
+### Official Adapters
+
+- `@yakmesh/adapter-peerquanta` - PeerQuanta phpBB marketplace
+
+## API Endpoints
+
+| Endpoint | Method | Description |
+|----------|--------|-------------|
+| `/health` | GET | Node health status |
+| `/node` | GET | Node identity info |
+| `/peers` | GET | Connected peers |
+| `/oracle/status` | GET | Oracle integrity check |
+| `/network/identity` | GET | Network identity (hash obfuscated) |
+| `/time/status` | GET | Time source detection |
+| `/time/capabilities` | GET | Time oracle eligibility |
+| `/connect` | POST | Connect to a peer |
+
+## Pro Features
+
+YAKMESH Pro includes additional security features:
+
+- 🔐 **WebSocket Authentication** - Challenge-response auth with signatures
+- 🔒 **Message Encryption** - XChaCha20-Poly1305 encrypted messages
+- 📋 **Peer Allowlist/Blocklist** - Access control for private networks
+- 🛡️ **Connection Rate Limiting** - DDoS protection
+
+## License
+
+- **Community Edition**: MIT License (see [LICENSE](LICENSE))
+- **Pro Edition**: Proprietary License
+
+See [TRADEMARK.md](TRADEMARK.md) for trademark usage policy.
+
+---
+
+<div align="center">
+  <sub>Built with quantum principles. Secured by math.</sub>
+  <br><br>
+  <strong><a href="https://yakmesh.dev">yakmesh.dev</a></strong>
+  <br><br>
+  <sub>© 2026 YAKMESH™ Project. Sturdy & Secure.</sub>
+  <br>
+  <sub>YAKMESH™ is a trademark of PeerQuanta, application pending (Serial No. 99594620).</sub>
+</div>

package/discord.md

@@ -0,0 +1,74 @@
+# 🦬 YAKMESH™ — Post-Quantum Mesh Networking
+
+**The Yielding Atomic Kernel for quantum-resistant mesh orchestration**
+
+```
+npm install yakmesh
+```
+
+---
+
+## ⚡ What is YAKMESH?
+
+A **post-quantum secure** mesh networking library featuring:
+
+🔐 **ML-DSA-65 Signatures** — NIST FIPS 204 standard, quantum-resistant
+⏱️ **Atomic Time Sync** — High-precision timing for mesh coordination  
+🛡️ **TME™ (Temporal Matrix Encoding)** — Novel packet resilience without retransmission
+
+---
+
+## 🆚 How is TME Different?
+
+| Walrus/Red Stuff | YAKMESH TME |
+|------------------|-------------|
+| Encodes across **space** (nodes) | Encodes across **time** (slices) |
+| For storage | For transmission |
+| Retransmit on loss | **Zero latency** recovery |
+
+> *"Time IS the redundancy dimension."*
+
+---
+
+## 🛠️ Quick Start
+
+```js
+import { TemporalMeshEncoder } from 'yakmesh';
+
+const encoder = new TemporalMeshEncoder();
+const { slices } = encoder.encode('Hello mesh!');
+// Slices sent across different paths
+// Lost slices reconstructed from timing proofs
+```
+
+---
+
+## 🔒 Security Modules
+
+- **NAVR** — Sybil attack prevention (computational identity puzzle)
+- **Replay Defense** — Nonces + timestamps + sequence tracking
+- **Rate Limiter** — DoS protection (30 conn/min per IP)
+- **Message Validator** — Size limits, depth checks, prototype pollution protection
+
+---
+
+## 📦 Current Version: `1.2.0`
+
+✅ TME (Temporal Matrix Encoding)
+✅ ML-DSA-65 Post-Quantum Signatures  
+✅ Full security hardening suite
+✅ 42+ tests passing
+
+---
+
+**Links:**
+🌐 Website: https://yakmesh.dev
+📦 npm: https://npmjs.com/package/yakmesh
+📖 GitHub: https://github.com/yakmesh/yakmesh
+📄 Whitepaper: `docs/WHITEPAPER.md`
+
+**USPTO Serial No. 99594620**
+
+---
+
+*Powered by TME™ — The world's first temporal-erasure protocol for atomically-synced mesh networks.*