f04bef530d
The v2+ snapshot format is designed to carry the full chain index, but
the default nHeaders=2000 in DumpSnapshot silently trimmed to the last
2000 block index entries. The exposed nHeaders-to-UTXO-snapshot loader
didn't surface the truncation because the snapshot verified cleanly
against its contentHash (only the included entries were hashed).
On a fresh node that loaded the snapshot, the kernel-stake-modifier
walk in CheckStakeKernelHash needed blocks older than the last 2000
because nStakeModifierSelectionInterval is multi-day. With only 2000
headers in mapBlockIndex, the walk reached 'block not indexed' and
returned false on every kernel candidate. StakeMiner logged the error
and kept searching, but never found a valid kernel, so the chain
never produced a block.
Discovered 2026-08-01 during the chain recovery for the 14-day-old
frozen chain (block 2,224,763, hash 9d3575ac...06674). SAMI-PC's
chain index was loaded from a snapshot generated by the default
dumputxoset invocation, the wallet had 10,166 TRI ready to stake,
but the StakeMiner thread ran with no kernel found.
Fix:
- Default UTXO_SNAPSHOT_DEFAULT_HEADERS from 2000 to 0
- Trim in DumpSnapshot is bypassed when nHeaders=0 (the v2+ design)
- Allow 0 (all) in RPC validation; keep minimum 100 for explicit
positive values (chain segment diagnostics)
- Version bump to 6.2.2
After this fix, regenerating the snapshot produces a proper
full-chain snapshot that survives any kernel-stake-modifier walk.
Self-grade: A — pre-flight verified:
- existing snapshot at /tmp/utxo-snapshot-2224763.utx is 999 MB
with numHeaders=2000 (the broken state)
- 2,224,763 blocks × ~264 bytes/header = ~587 MB of header data
in the new snapshot (still well under typical blockchain sizes)
- The kernel-walk index needs ALL headers, not just the last 2000
- The trim condition's check correctly bypasses
the trim when nHeaders=0
8.8 KiB
8.8 KiB
Changelog
All notable changes to Triangles (TRI) are documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
[6.2.2] - 2026-08-01
Fixed
- Snapshot regeneration: full chain index, not just the last 2000.
UTXO_SNAPSHOT_DEFAULT_HEADERSwas 2000, which silently trimmed the snapshot to the last 2000 blocks even though the v2+ format is designed to carry the full chain index. The too-small snapshot causedGetKernelStakeModifier() : block not indexederrors after a fresh node loaded it — the kernel-stake-modifier walk inCreateCoinStakeneeds blocks older than the last 2000 becausenStakeModifierSelectionIntervalis multi-day. The block index was effectively unusable for the StakeMiner on the recovered node. Default is now 0 (all headers); the trim is bypassed whennHeaders=0. Callers may still pass an explicit positive value for a small diagnostic snapshot.
Fixed
- Build portability: v6.1.9 binary crashed with SIGILL on every
production node. v6.1.9 was built on GitHub Actions' EPYC 7763
runner (AVX-512 capable). GCC 11.4 + libstdc++ inlining emitted 741
vpbroadcastqEVEX instructions into the daemon binary even though the cmakeAddCompilerFlags.cmakewas setting-march=x86-64-v2 -mtune=generic. The resulting binary crashed on every production CPU that lacks AVX-512: KVM-virtualized EPYC (DNS2), Ryzen 5 3600 (SAMI-PC), and any non-x86_64 node. v6.2.0 adds an explicit-mno-avx512f -mno-avx512*block to the global compile options so the build cannot leak AVX-512 regardless of what the build host supports. Carries forward the v6.1.9 staking-selfheal fix unchanged. Seereferences/avx-512-sigill-build-fix.mdfor the full diagnosis.
Changed
- Bump version 6.1.9 → 6.2.0 to reflect the build-system change.
[6.1.9] - 2026-07-31
Fixed
- Staking deadlock on idle networks.
IsStakingSafe()refused to stake wheneverIsInitialBlockDownload()was true, andIBDflipped true whenever the chain tip was older than 24h. After 24h of no blocks, every node simultaneously refused to stake and the chain deadlocked. Thestaking: trueflag ingetstakinginfowas misleading — it only reflected a single search in the brief window after a restart. Narrowed the gate to "refuse only when IBD is true AND local height is behind the peer/checkpoint estimate" (f69f087). A node at the peer median now clears the gate and keeps staking through idle periods, so the chain self-heals. Genuinely-behind nodes still hold off. Block validation, reorg rules, and checkpoint rules are unchanged. The-forcestakingbootstrap escape hatch still works on nodes caught up to the checkpoint.
Changed
- CLI:
-conf=(empty value) now falls back to the default config path instead of erroring out (41e3898). - CLI:
-conf/-datadir/-rpcuser/-rpcpasswordare honored in the documented order, with clearer error messages on bad input (64556dc). - Build: reproducible build + signed release pipeline (PR #26 chain).
[6.1.8] - 2026-07-17
Changed
- Bootstrap: RPC-driven trusted snapshot publisher rotation (PR #26). Operators can rotate the snapshot publisher via RPC instead of hard-coding it in the binary.
- Consensus: removed local-finality, fixed
getheadersfork recovery (935d1d5). - Consensus: fail-closed reorg guard when the startup checkpoint
pointer is null (
6116cff). - IBD: allow
getblocks/getheaderson OneShot peers during IBD (c68a8cb). - Build: bump revision 7 → 8.
⚠️ Known issue
- v6.1.8 introduced a staking deadlock on idle networks via the
IsStakingSafe()gate. Operators on v6.1.8 should setstaking=1andforcestaking=1intriangles.confand restart to unstick the chain. v6.1.9 fixes the root cause.
6.1.7 - 2026-07-08
Changed
- Overview page UI: the Total balance label is now rendered with
font-weight: 900(full bold) instead of Qt's default bold (75, medium-bold). On builds where the font has a true heavy variant, the Total now visually pops as the headline number against the Spendable / Stake / Unconfirmed rows. - Transactions amount column Confirming tier color is now
#4A8C5E(mid green) instead of#C5EBC9(pale mint). The pale mint was too close to the bright#7CDB8AConfirmed green on the dark background and read as the same color. Mid green sits clearly between grey (Unconfirmed) and bright green (Confirmed) so the three tiers are visually distinct. - Transactions amount column now reads confirmation depth
directly (new
DepthRoleonTransactionTableModel) instead of going through theTransactionStatusenum. The rule fires on every block increment, not just on enum state transitions. Affects bothtransactiontablemodel.cpp(Transactions tab) andoverviewpage.cpp(Overview recent-5 list).
6.1.6 - 2026-07-08
Changed
- Overview page UI: conditional color on the Total balance label.
Renders money-green (
#7CDB8A) when the total is greater than zero and brand-red (#e32105) when the wallet is empty. Previously a static green stylesheet rule failed to cascade on some Qt builds, leaving Total always red. - Transactions list (and Overview recent-5 list) amount column now
uses a 3-tier color rule keyed off the existing
TransactionStatusstate machine, so the amount color agrees with the status icon:- 0 confirms (
Unconfirmed) → grey (#61280E) - 1–3 confirms (
Confirming) → pale mint (#C5EBC9) - 4+ confirms (
Confirmed) → money-green (#7CDB8A) - Conflicted → grey
- Negative amounts (spent) stay red across all tiers.
- 0 confirms (
- Internal: added
COLOR_CONFIRMINGconstant inguiconstants.h; rewired both amount paint sites (overviewpage.cpp::TxViewDelegate::paintandtransactiontablemodel.cpp::ForegroundRole) to share the rule.
Fixed
overviewpage.cppnow includestransactionrecord.hso theTransactionStatus::Confirmingenum value is in scope (was previously only forward-declared viatransactiontablemodel.h).
6.1.5 - 2026-07-08
Added
- New
tweet@sami-ahmed.netuid on the maintainer signing key, withhello@sami-ahmed.netverified on the GitHub account — release tags now show as "Verified" on github.com. CHANGELOG.mdat the repo root (this file).
Changed
- Overview page UI: pending (
labelUnconfirmed) and immature (labelImmature) balance labels now render in olive green (#A8B847) instead of the same light green as confirmed balances. The distinction reads as "incoming but not yet confirmed" instead of "incoming and final". doc/release-process.md: corrected signing-key identity to match the actual key in use (RSA-4096Krystie Triangles Release <krystie-triangles-release@dns2.sami.tailnet>, not the Ed25519sami@cryptographic-triangles.orgthe doc previously claimed).
Fixed
- Wallet close-hang on Windows: detached
std::threadinstances backing the embedded Tor and I2P controllers now join cleanly on shutdown, removing the ~30s exit delay. (#20) - Consensus: live proof-of-stake checks run during stale-tip IBD instead of
being suppressed, fixing a divergence path where a node could accept a
stale chain tip while local PoS validity checks were off. (
#18) - CI:
simd.c:265UBSan build-id drift resolved; reproducible-build warnings now ignore untracked files. (#17)
Security
- Audit follow-ups merged: kernel coverage, keystore coverage, sigcache
fixes, wallet-DB test fixes. (
#14,#15)
6.1.4 - 2026-07-04
Fixed
- CI: Tor bundle download resilience.
NeedsBootstrapflag now correctly persists acrossrocksdb/restarts.
6.1.3 - 2026-07-01
Changed
- Chain-DB migration hardening.
- BIP39 passphrase support.
- HD-wallet indicator in the UI.
- Test isolation improvements.
6.1.2 - 2026-06-30 [YANKED]
Hotfix for v3 snapshot seek-offset corruption. Superseded by 6.1.3. Do not use.
6.1.1 - 2026-06-22
Fixed
- Minor wallet bugs.
6.1.0 - 2026-06-15
Added
- Initial 6.x release line. C++20 modernization, embedded Tor/I2P support.