gabriel / muse public
feat patch crypto task/hd-path-domain-first #1 / 1
gabriel · 62 days ago · Apr 15, 2026 · Diff

feat(crypto): Phase 0 HD wallet — domain-first 6-level Ed25519 key derivation

Implements BIP39 + SLIP-0010 HD key derivation with a Muse-specific path structure designed from first principles.

Path: m / 1075233755' / domain' / entity_type' / entity_id' / role' / index'

Purpose 1075233755 = sha256(b'muse')[:4] & 0x7FFFFFFF — reproducible, not arbitrary.

Domains are first-class: identity(0), payments(1), code(2), music(3), midi(4), prose(5), blockchain(6). New domains plug in without schema changes.

Domain-scoped agent delegation: derive_agent_sub_seed(seed, domain, agent_id) gives an agent cryptographically bounded capability — a music agent physically cannot derive identity or code keys. Principle of least privilege enforced by SLIP-0010 hardened derivation, not policy.

All 5 BIP39 strengths (128/160/192/224/256 bits) and all 10 functional BIP39 languages supported. Official test vectors verified against both the Trezor BIP39 suite and the SLIP-0010 spec.

275 tests: unit, integration, end-to-end, stress, data integrity, security, performance, and docstring coverage across all three modules.

sha256:8866c5358e96038ac854071ad5ae40d7bdab3026b18a7f33234f3e9afe6d8e98 sha
sha256:acc0edd4ba0815fa915fbe9c91a32a6a1205f60ed3352646d56ce892d92d03f1 snapshot
← Older Oldest on task/hd-path-domain-first
All commits
Newer → Latest on task/hd-path-domain-first

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:8866c5358e96038ac854071ad5ae40d7bdab3026b18a7f33234f3e9afe6d8e98 --body "your comment"