pulseproof-sentinel

Changelog

All notable changes to the PulseProof Sentinel Protocol project will be documented in this file.

The format is based on Keep a Changelog.

This project uses semantic versioning for repository and documentation releases.

The protocol version and Internet-Draft revision are separate concepts.

Concept	Example
Protocol version	1
Internet-Draft revision	draft-hezami-pulseproof-sentinel-00
Repository release	1.0.0-draft

---

Unreleased

Added

• Nothing yet.

Changed

• Nothing yet.

Deprecated

• Nothing yet.

Removed

• Nothing yet.

Fixed

• Nothing yet.

Security

• Nothing yet.

---

1.0.0-draft - 2026-07-23

Initial public draft materials for PulseProof Sentinel Protocol.

Added

• Initial specification draft for PulseProof Sentinel Protocol version 1.
• Mandatory cryptographic profile:
  • PPS-ED25519-CBOR30
• Core Pulse model:
  • time-bound asymmetric proof
  • RP binding
  • nonce binding
  • counter-based replay protection
  • expiration
  • deterministic CBOR encoding
  • base64url token encoding
• Optional Verifiable Asymmetric Forward-Secure Ratchet:
  • pk
  • next_pk
  • rot_seq
  • rotation certificates
• Optional Silent Duress mechanism:
  • duress public key
  • Honey-Pulse
  • outwardly indistinguishable success response
• Optional Threshold Mode:
  • n-of-m Ed25519 multisignature
  • offline co-signing model
  • group identifier
  • threshold verification
• Optional Context Binding:
  • session identifier
  • transaction hash
  • BLE proximity hash
  • acoustic nonce hash
  • IP hash
  • user agent hash
  • device integrity hash
  • custom hash
• Optional Policy Binding:
  • minimum Trust Code digits
  • biometric requirement
  • secure enclave requirement
  • threshold requirement
  • maximum transaction amount
  • proximity requirement
  • maximum clock skew
  • offline allowance
  • AmountMark requirement
  • duress support requirement
• Human-verifiable Trust Code:
  • HKDF-SHA256 derivation
  • unbiased decimal derivation
  • default 8-digit Trust Code
• Optional AmountMark:
  • two-digit transaction amount checksum
  • embedded at the end of Trust Code
• Optional Trust Phrase:
  • three-word human-friendly phrase
• Documentation:
  • overview
  • comparison with TOTP, Push 2FA, challenge-response OTP, and WebAuthn/FIDO2
  • threat model
  • implementers guide
  • FAQ
  • IETF process guide
  • deployment guide
  • duress guide
  • threshold guide
  • policy guide
• Repository governance files:
  • README
  • SECURITY
  • CONTRIBUTING
  • CODE_OF_CONDUCT
  • CHANGELOG
• Documentation site configuration:
  • MkDocs Material configuration

Notes

• Protocol status is experimental.
• The protocol has not been independently audited.
• The initial IETF Internet-Draft is:
  • draft-hezami-pulseproof-sentinel
• The protocol version is:
  • 1
• The initial Internet-Draft revision is:
  • 00

---