DISHA 4.0 HCOS Release Notes

Comprehensive audit trail of kernel updates, ZK circuit optimizations, security advisories, and API enhancements.

Current Stable: v4.2.0-PROD
🔍

Subsystem Scope

Change Category

Showing 4 of 4 releases

v4.2.0-PRODLATESTLTS⚠️ Breaking Changes

Poseidon-BN254 Enclave Acceleration & Groth16 Pipeline

Released: 2026-07-15

  • Hardware-accelerated Poseidon BN254 hash sponge — 38% latency reduction in Stage 5 ZKPG
  • Groth16 proof pipeline refactored for parallel batch verification across enclave nodes
  • Stage 3 HSM enclave runtime upgraded to support multi-tenant payload isolation

Major kernel release introducing hardware-accelerated Poseidon BN254 hash sponge operations, optimized Groth16 proof generation pipeline, and Stage 3 enclave runtime improvements reducing average verification latency by 38%.

New Feature
Stage 5 ZKPG

Hardware-accelerated Poseidon BN254 hash sponge operations integrated into Stage 5 ZKPG verifier, reducing average proof generation time from 22ms to 14ms.

Stage 3 Enclave

Stage 3 HSM enclave runtime upgraded to support multi-tenant payload isolation with dedicated memory sandboxing per `.dhc` container session.

Developer APIs

New Developer SDK v4.2.0-LTS released with Rust and Go runtime bindings, native async proof submission, and CLI toolchain for local circuit testing.

Performance
Stage 5 ZKPG

Groth16 proof pipeline refactored for parallel batch verification. Throughput increased from 450 proofs/sec to 1,200 proofs/sec on standard enclave nodes.

🔒 Security Patch
HCOS Kernel#4821

Patched timing side-channel vulnerability in Ed25519 signature verification path within the PIL identity gate. CVE-2026-4821 resolved.

⚠️ Breaking Change
Stage 3 Enclave

`.dhc` container spec v2.1.0 introduces mandatory BN254 hash root enforcement. Legacy v1.x containers must be re-signed using the migration CLI tool.

⚠️ Migration Required

Run `disha-cli dhc migrate --from v1.x --to v2.1.0` on all existing container artifacts before upgrading enclave nodes to v4.2.0.

🐛 Bug Fix
Stage 2 CEL

Fixed race condition in Stage 2 CEL evidence block generation that could cause duplicate EvidenceBlock entries under high-concurrency write loads (>500 concurrent sessions).

🔐 Cryptographic Build Integrity
Git Commit Hash
git-sha-7a8f90b
SHA-256 Checksum
sha256:a4b8c2d6e0f4a8b2c6d0e4f8a2b6c0d4e8f2a6b0c4d8e2f6a0b4c8d2e6f0a4b8
Ed25519 Artifact Signature
ed25519:3a7f2c9d8e1b4f6a0c5d2e8f1a3b7c9d4e6f0a2b5c8d1e4f7a0b3c6d9e2f5a8b
v4.1.2-PROD

Stage 1 PIL Identity Gate Hardening & API Rate Limit Overhaul

Released: 2026-05-28

  • Argon2id KDF parameters upgraded: memory=256MB, iterations=4, parallelism=8
  • REST API rate limiting overhauled — adaptive token bucket with per-tenant quotas
  • Stage 1 PIL RBAC policy engine now supports attribute-based access control (ABAC)
v4.1.0-PRODLTS

Stage 2 CEL Immutable Evidence Ledger & ZK-SAD Circuit v4.0.2

Released: 2026-03-10

  • Stage 2 CEL evidence ledger redesigned with Merkle tree anchoring for tamper-proof audit trails
  • ZK-SAD Circom circuits v4.0.2 — 18% reduction in constraint count, faster proof generation
  • Multi-region enclave federation: Guwahati, New Delhi, and Bengaluru nodes now federated
v4.0.0-PROD

DISHA 4.0 HCOS — Initial Production Release

Released: 2026-01-01

  • Complete 5-stage HCOS runtime: PIL → CEL → Enclave → State → ZKPG
  • Zero-knowledge Groth16 proof attestation for all skill and identity claims
  • .dhc hyper-container format for sovereign encrypted data custody