quantum + umbra — the innermost shadow, the region an eclipse makes fully dark quantum + umbra —— 本影,日食中被完全遮暗的那一块
The “post-quantum privacy chain” question was last answered with 2018-era tools. Qumbra asks what the 2026 answer is — NIST PQC standards finalized, STARK proof systems production-mature, hybrid schemes with industrial precedent. All load-bearing cryptography is post-quantum. There is one shielded pool and everything is in it by default. 「后量子隐私链」这个问题,上一次被回答时用的还是 2018 年的工具。Qumbra 问的是 2026 年的答案是什么 —— NIST 后量子标准已定稿、STARK 证明系统已进入生产成熟期、混合方案已有工业先例。所有承重密码学都是后量子的; 只有一个屏蔽池,并且默认所有交易都在池内。
No elliptic curve carries weight anywhere in consensus. Hash-based STARKs over Keccak, ML-KEM-768 addresses and note encryption, ML-DSA committee votes. Conservative hash everywhere inside the proof system — the layered hedge an earlier draft proposed was retracted as unsound. 共识中没有任何一处由椭圆曲线承重。基于 Keccak 的哈希型 STARK、ML-KEM-768 地址与票据加密、 ML-DSA 委员会投票。证明系统内部一律使用保守哈希 —— 早期草稿里那套分层折中方案已被判定不成立并撤回。
Notes, not accounts. A single global shielded pool, not rings — the anonymity set is every note that ever existed. There are no protocol privacy tiers, because a tier is just a pool split, and a split pool is a smaller anonymity set wearing a feature's name. 用票据(note)而非账户。单一全局屏蔽池,而不是环签名 —— 匿名集就是历史上存在过的全部票据。 协议层没有隐私分级,因为分级本质上就是把池子切开,而切开的池子不过是顶着功能名字的更小匿名集。
Disclosure is the holder's to give, in four layers: standing viewing keys, a per-transaction disclosure STARK, exculpatory watch proofs, and the deposit edge. The coinbase is the chain's only transparent flow, which makes it the supply-audit anchor. 披露权在持有人手里,分四层:常驻查看密钥、单笔交易的披露 STARK、自证清白的 watch 证明, 以及入金边界。coinbase 是全链唯一透明的资金流,因此它同时充当供应量审计锚点。
That is not a metaphor for privacy. It is the frozen v1.0 circuit shape: every Qumbra transaction is exactly 2-in / 2-out — two depth-32 Merkle membership proofs, two nullifier PRFs, two spend-key knowledge proofs, two commitment well-formedness checks, and an in-circuit value balance. What happens inside the box is what the STARK proves without showing. 这不是一个关于隐私的比喻,而是已冻结的 v1.0 电路形状:每一笔 Qumbra 交易都严格是 2 进 / 2 出 —— 两条深度 32 的 Merkle 成员证明、两个 nullifier PRF、两个花费密钥知识证明、两个承诺良构性检查, 外加电路内的金额平衡。盒子里发生的事,正是 STARK 要在不展示的前提下证明的东西。
The mark deliberately encodes no parameter — no N=21, no 75 s.
Those are frozen today and some still carry [devnet-placeholder]; a mark that encodes a number
inherits that number's revisions. The 2×2 shape is different in kind: changing it would not be a parameter
change, it would be a different chain. The 45° angles are geometry, not taste — both diagonal edges of a
rotated square are perpendicular to the travel direction, so the lines meet the diamond square and need
no mitre.
标识刻意不编码任何参数 —— 没有 N=21,没有 75 s。这些参数今天是冻结的,
但其中一部分仍标着 [devnet-placeholder];把数字画进标识,就等于继承这个数字的每一次修订。2×2 的形状
性质不同:改变它不是改参数,而是换一条链。45° 是几何而非品味 —— 正方形旋转后的两条对角边都与走线方向垂直,
所以线条正交地接上菱形,不需要斜接处理。
Measured in the prototype lab, not estimated. Lab numbers enter a design doc only after being reproduced twice on the same rig plus an independent rerun — every result records the git rev, the prover crate revs, the hardware, the OS and the power state. 这些数字是在原型实验室里测出来的,不是估的。实验室结果必须在同一台机器上复现两次并经过一次独立重跑, 才能写进设计文档 —— 每条结果都记录 git rev、prover crate rev、硬件、操作系统和电源状态。
The PQ tax is real and accepted: roughly 20–30× the transaction size of curve-based state of the art. Aggregation rung 1 makes per-transaction proofs prunable after the block proof lands; the permanent cost is the ciphertexts, not the proofs. 后量子代价是真实的,而且是被接受的:交易体积约为曲线派最优方案的 20–30 倍。聚合 rung 1 让单笔证明在区块证明落地后 可被剪枝;永久成本是密文,不是证明。
Status-first, including the parts that are not working. As of 2026-08-20. 状态优先,包括跑不通的部分。截至 2026-08-20。
T2 launched 2026-08-20 at 14:00 UTC+8 as a fair relaunch: no premine, no carry-over
from T1, block 0 the same starting line for everyone — including the operators. Anyone can
run a node and
mine — no registration, no permission, a CPU is enough, and qumbra-node mine is
one command from zero to mining. T2 was re-launched on 2026-10-03 on a new genesis
(59d9f054…44b1, 41,754 bytes); the earlier genesis d1dad4ea…e2f3 is retired.
Verify before you trust: download the
genesis file (41,754 bytes) and check that its
keccak-256 is 59d9f054bb15116dac40c42ddb67c7d377407eec3010e9f98a5cc76e9e0544b1, the hash
join-and-mine
pins. (Updated 2026-10-04.)
T2 已于 2026-08-20 14:00(UTC+8)上线,公平重启:无预挖、不带入 T1 余额,第 0 块对所有人
—— 包括运营者 —— 都是同一条起跑线。任何人都可以运行节点并挖矿
—— 无需注册、无需许可,一颗 CPU 就够,qumbra-node mine 一条命令从零到挖矿。
T2 已于 2026-10-03 在新的创世上重启(59d9f054…44b1,41,754 字节);
原先的创世 d1dad4ea…e2f3 已退役。
先验证再信任:下载 genesis 文件(41,754 字节),
核对它的 keccak-256 是否为 59d9f054bb15116dac40c42ddb67c7d377407eec3010e9f98a5cc76e9e0544b1,也就是
加入与挖矿文档里钉住的哈希。(2026-10-04 更新。)
Four node hosts, three continents, one Terraform state. The consensus core was sealed
on T1: a 48-hour WAN soak, and all four scenario drills — restart, late-joiner, committee stall,
2+2 partition — adjudicated PASS: no safety stop-point was reached in any of them.
A stranger's node syncs in minutes, not hours; every incident to date has been liveness, never safety.
That lineage now runs T2 — re-launched 2026-10-03 on genesis 59d9f054…44b1
(the first T2 genesis, d1dad4ea…e2f3, minted 2026-08-20 in launch mode, is retired) —
the hash is pinned rather than reproduced, and a wrong-genesis node refuses to start. Later the same
afternoon: committee 21/21 active, quorum 15, finality forming on cadence.
四台节点主机、三个大洲,共用一份 Terraform 状态。共识内核在 T1 上封存:48 小时广域网浸泡测试,
四项场景演练 —— 重启、后加入者、委员会停摆、2+2 网络分区 —— 全部裁定通过:任何一项都没有触及安全性停止条件。
陌生节点分钟级完成同步,而不是数小时;迄今所有事故都是活性问题,从未涉及安全性。这套系统现在运行的是 T2:
2026-10-03 在创世 59d9f054…44b1 上重启(最初的 T2 创世 d1dad4ea…e2f3
于 2026-08-20 以 launch 模式铸造,现已退役)—— 哈希靠钉住而非复现来保证,
创世不符的节点会拒绝启动。上线当天下午:委员会 21/21 在位,法定数 15,终局按节奏形成。
Consensus never validated the coinbase against the emission schedule, and the audit found exactly one under-paying block on the live net (height 1377, −4,114 bessel), fleet-unanimous. The schedule is now a validity rule: activated 2026-08-12 at height 8,640 via a planned halt — unanimous finality id across the fleet, emission audit clean on resume. The coinbase-as-audit-anchor thesis above got its first real test and held. All of that happened on T1; T2 carries the exact integer rule from block 1 — the scar stays in T1's archive. 共识层此前从未用发行时间表校验 coinbase,而审计在运行中的网络上恰好找到一个少付的区块 (高度 1377,−4,114 bessel),全集群一致确认。发行时间表现已成为有效性规则:2026-08-12 经计划停机在高度 8,640 激活 —— 全集群 finality id 一致,恢复后发行审计零差异。上文「coinbase 即审计锚点」的立论迎来第一次实战检验,并且成立。 这一切都发生在 T1 上;T2 从第 1 块起就运行整数精确规则 —— 那道疤留在 T1 的档案里。
The first public wallet build, for macOS 14 or later on Apple silicon or Intel:
download the DMG
(release page). It holds
QMB on T2 and QIA — assets issued on the Annulet testnet — with balances checked against the chain itself
before they are shown, and sends that show their whole plan before anything is proved.
All of it is test money. QIA spends are not yet verified, so a QIA balance can be
overstated, and the app says so; sending a shape-P QIA needs a Mac with 34 GiB of memory.
Verify before you run it: shasum -a 256 on the DMG must print
7bec829279ca233632e118408a70da52f7a5378b3d4a7047d686c8c14043a8f0 (the same line as the release's
checksum file), and spctl -a -vv must report a Notarized Developer ID from
Apple team CMV44JGUS3. (Added 2026-10-04.)
第一个公开的钱包版本,支持 macOS 14 及以上,Apple 芯片和 Intel 都可以:
下载 DMG
(发布页)。它管理 T2 上的 QMB,
以及 QIA —— 在 Annulet 测试网上发行的资产。余额要先对照链本身验证过才会显示;发送前会列出完整计划,确认之前什么都不证明。
里面全是测试币。QIA 的花费还没有经过验证,所以 QIA 余额可能偏高,App 里会明确提示;
发送 P 形状的 QIA 需要 34 GiB 内存的 Mac。运行前先验证:对 DMG 运行 shasum -a 256,输出必须是
7bec829279ca233632e118408a70da52f7a5378b3d4a7047d686c8c14043a8f0(与发布页的校验文件一致),spctl -a -vv 必须显示 Apple 团队 CMV44JGUS3
的已公证 Developer ID。(2026-10-04 新增。)
T2 is a testnet: coins have no value and will not survive a future re-genesis — T1's did not, exactly as promised. Block production is permissionless, but the finality committee's 21 keys are still operator-held; opening it to outside signers is its own milestone, with a weak-subjectivity checkpoint design already ruled and waiting. The development tree (design docs, node source, deployment) stays private during T2 and opens on its own schedule; the public docs mirror it at publication. The stratum pool path is documented but held until it genuinely serves — a pool issuing jobs against a fake template would burn miners' hashpower. T2 是测试网:币没有价值,也不会在未来的重新创世后存续 —— T1 的币就没有,一如当初承诺。 出块无需许可,但终局委员会的 21 把钥匙仍由运营方持有;向外部签名者开放是独立的里程碑, 弱主观性检查点设计已裁定、在等待。开发树(设计文档、节点源码、部署)在 T2 期间保持私有,将按自己的节奏开放; 公开文档在发布时与其同步。stratum 矿池路径已写进文档,但在真正可用之前保持关闭 —— 对着假模板发任务的矿池只会白白烧掉矿工的算力。
The authoritative public record is the T2 announcement and the live chain-health page — the T1 announcement is kept as the record, not deleted. Found something broken, open an issue. The project's full roadmap lives in the development tree, private during T2. 权威的公开记录是 T2 公告 与实时链健康页 —— T1 公告作为记录保留,不删除。 发现问题请提 issue。 完整路线图在开发树中,T2 期间保持私有。
The development tree — design docs, node source, deployment — is private during T2 and opens on its own schedule. What follows is public today, and the public docs mirror the tree at publication. 开发树 —— 设计文档、节点源码、部署 —— 在 T2 期间保持私有,将按自己的节奏开放。 以下是今天已公开的部分;公开文档在发布时与开发树同步。
The public front door: the T2 announcement, the join-and-mine guide, prebuilt release binaries, and the spec mirror — whitepaper, protocol specification, frozen consensus parameters. Issues are open to anyone. MIT OR Apache-2.0. 公开正门:T2 公告、加入并挖矿指南、预编译发布二进制、规范镜像 —— 白皮书、协议规范、 已冻结的共识参数。issue 对所有人开放。MIT OR Apache-2.0 双许可。
The transaction circuit — the fixed-shape STARK AIR — plus the consensus verifier. The point of publishing it: verify a real consensus proof from that repo alone, no private code required. 交易电路 —— 固定形状的 STARK AIR —— 外加共识验证器。公开它的意义: 仅凭该仓库即可验证一个真实的共识证明,不依赖任何私有代码。
explorer.qumbra.org — chain health, no build, no framework, deliberately not a
transaction explorer (a single shielded pool leaves nothing to look up, and that exclusion is binding) ·
seed.qumbra.org — the wallet/discovery edge and the genesis download ·
faucet.qumbra.org — 10 QMB of T2 testnet coin per request, open in a browser (it sits behind a
Cloudflare challenge, so it is not a curl target). Testnet coin: no value, by construction.
explorer.qumbra.org —— 链健康页,零构建、零框架,刻意不是交易浏览器
(单一屏蔽池没有任何可查询的东西,这条排除是硬性的)· seed.qumbra.org —— 钱包/发现边缘及 genesis 下载 ·
faucet.qumbra.org —— 每次申领 10 QMB 的 T2 测试币,请在浏览器中打开(它在 Cloudflare 挑战之后,
不是 curl 的目标)。测试币:按构造即无价值。