All notable changes to the EthSystems Map are documented here.

Unreleased

• feat(vendor): Gateway Open Privacy Suite — governed JSON-RPC access, selective disclosure, and compliance controls for private EVM networks and Gateway L2/validium deployments (#189)
• docs: add Espalier preprint reference to ZK Proof Systems, Post-Quantum Threats, and Safe Proof Delegation ## See also sections
• feat(jurisdiction): Indonesia / OJK (Digital Financial Assets) and Singapore / MAS -- adds ASEAN coverage, including the POJK 27/2024 listing criterion that bars assets whose features conceal ownership or transaction information (#182)
• feat(jurisdiction): EU / EUDR (Deforestation Regulation) -- Article 9 plot-level geolocation and the DDS reference-number model, ahead of the 30 December 2026 application date (#181)
• fix(vendor): Zama -- mainnet maturity, symbolic-execution architecture, TFHE-rs, ERC-7984; sync fhEVM status and docs link in Private Shared State (FHE) (#180)

[0.4.0] - 2026-07-02

23 commits, 166 files changed since v0.3.0 (Apr 2026). Major additions: resilience use cases (civic participation, disbursement rails, identity continuity), I2U protection patterns, pattern/approach schema v2 (strict flip) with CROPS and post-quantum analysis, domain reframing beyond FIs, and a Q2 2026 content QA audit.

• chore: Q2 2026 content audit pass across all patterns, use cases, approaches, domains, jurisdictions, and vendors; corrections tracked in QA-AUDIT.md (#130)
• chore: remove the dormant weekly-updates/ directory and scripts/weekly-summary.sh (single entry, unused since 2026-01) (#130)
• docs(domains): reframe Domains index, Payments, Identity & Compliance, Funds & Assets, Trading, and Data & Oracles to cover public-sector, NGO, and resilience contexts alongside FIs; add Civic Coordination & Governance domain; add governance to the use-case schema enum (#170, closes #169)
• refactor(use-cases): rename ## 2) Additional Business Context to ## 2) Additional Context across _template and 23 use-case cards; strip reader-facing "Confidential context" placeholder line from 20 private-* cards (#170, closes #169)
• feat(use-case): Resilient Civic Participation -- credentialed petition protocol with per-signer forward-secure ratcheting, blob-anchored signature batches, and a chain-state-only resolution SNARK (ECI, repository governance, workplace organising); adds Approach: Civic Participation and generic patterns Forward-Secure Pseudorandom Tree and Blob-Anchored State With KZG Dispute (#165)
• chore(approach): I2U analysis pass across Private Payments, White-Label Deployment, and Private Broadcasting. Adds Self-Custodial Deployment (context: i2u) to White-Label. Relabels L1 Shielded Payments, Stateless Plasma, and Private Rollups from i2i to both where the underlying technology already serves end users. Closes #124 (#167)
• feat(pattern): Private Information Retrieval, plugs client-side query leakage in shielded-pool path retrieval and note discovery, and applies to any indexed lookup whose index is itself sensitive (#168, companion to ethsystems/pocs#68)
• feat(pattern): Immutable Guarantees, separating mutable operational parameters from immutable safety invariants, with a published invariant set that survives hostile operators (#166, closes #127)
• fix(domains): refresh Adjacent vendors across payments, custody, data-oracles, funds-assets, identity-compliance, and trading. Remove Chainlink ACE (weak CROPS fit on openness and censorship resistance) and backfill with CROPS-aligned vendors already documented in vendors/ (#164).
• fix(ci): stabilize full markdown link checks by ignoring bot-blocked external references and repairing stale internal links (#163)
• feat(schema): flip pattern.json and validate-patterns.js to strict v2. All v1 aliases (os, privacy, security CROPS keys; PoC/pilot/prod/experimental maturity values; privacy_goal, assumptions, dependencies, ## Ingredients, ## Guarantees section names) now fail validation instead of warning. (#156)
• feat(schema): approach template v2 -- replace _template.md with the v2 skeleton from #151 and update validate-patterns.js to check v2 sections (## Problem framing, ## Approaches, ## Comparison, ## Persona perspectives, ## Recommendation, ## Open questions), required frontmatter (title, status, last_reviewed, use_case, primary_patterns), and the ^Approach:\s title prefix. Lenient mode (warnings only) until a future strict-flip (#161)
• refactor(approach): port 9 approach cards in approaches/ to v2 schema (frontmatter, per-sub-approach YAML blocks, comparison table, persona perspectives, recommendation) (#160, #151)
• chore(approach): remove approaches/approach-privacy-standards-survey.md (does not fit v2 schema; relocation tracked in #159) (#160)
• feat(use-case): Resilient Disbursement Rails -- humanitarian disbursement to recipients in adversarial jurisdictions, with off-ramp unlinkability as the primary cryptographic requirement (#157)
• feat(pattern): Forward-Secure Signatures, Mesh Store-and-Forward Submission, Relay-Mediated Proving, and Recipient-Derived Receive Addresses -- generic patterns supporting constrained-signer participation in proof-gated systems (#157)
• feat(approach): Resilient Disbursement Rails section in Private Payments for humanitarian disbursement under adversarial-jurisdiction threat models (#157)
• feat(schema): pattern template v2 -- structured crops_context, post_quantum, context_differentiation, related_patterns, open_source_implementations, sub_patterns, and type: meta flag in _template.md, pattern.json, and validate-patterns.js. Validator stays permissive during migration; existing v1 patterns continue to pass with deprecation warnings. (#152, #150)
• feat(pattern): ZK Wrappers -- verify off-chain signatures (passport, DKIM, attestation) inside a ZK circuit for attribute proofs without credential disclosure (#153)
• feat(pattern): Social Recovery -- guardian-quorum rotation of account keys or identity anchors without issuer or custodian involvement (#153)
• feat(pattern): Onion Routing -- Tor-based multi-hop relay for sender IP anonymity (PSE tor-js, Flashbots .onion) (#146)
• feat(pattern): Mixnet Anonymity -- batching, reordering, and cover traffic for strongest network anonymity (Nym, HOPR) (#146)
• refactor(pattern): split Network-Level Anonymity into umbrella pattern linking onion routing, mixnet, and TEE sub-patterns (#146)
• feat(pattern): User-Controlled Viewing Keys -- user-held viewing key custody for I2U privacy sovereignty (#146)
• feat(pattern): enhance Network-Level Anonymity with I2U analysis (#146)
• feat(pattern): zk-promises -- stateful anonymous credentials with async callbacks for blind compliance enforcement (#132)
• feat(pattern): Proof of Innocence -- association set membership/exclusion proofs for compliance without surveillance (#132)
• feat(approach|use-case): Resilient Identity Continuity and added approach (#145)

Removed

• chore: Retire PRD-IPTF-PUBLIC-Q1-2026.md -- Q1 closed; remaining unfinished items tracked in #143 (#144)

0.3.0 - 2026-04-13

71 commits, 162 files changed since v0.2.0. Major additions: CROPS evaluation framework, 20+ new patterns, 12 new use cases, 4 new approaches, post-quantum threat analysis, CI quality guardrails.

Added

Patterns

• feat(pattern): Forced Withdrawal — L1 escape hatch for asset recovery without operator cooperation (#125)
• feat(pattern): TLS Payment Bridge — trust-minimized fiat-to-onchain swaps via zk-TLS proofs on instant payment rails (#88)
• feat(pattern): Native Account Abstraction — EIP-8141 modular verification logic for PQ auth agility (#121)
• feat(pattern): ZK Proof Systems — taxonomy of proving systems with PQ safety analysis (#121)
• feat(pattern): Private Set Intersection (DH-based) - Bilateral ECDH-PSI for private matching of identifier sets
• feat(pattern): Private Set Intersection (OPRF-based) - OT/OPRF-based PSI scaling to millions of elements
• feat(pattern): Private Set Intersection (Circuit-based) - Garbled circuit PSI for computing arbitrary functions over intersections
• feat(pattern): Private Set Intersection (FHE-based) - FHE-based PSI for asymmetric set sizes with post-quantum security
• feat(pattern): Permissionless Spend Auth - Outer/inner circuit split for permissionless, user-chosen spend authorization without fragmenting anonymity sets (EIP-8182)
• feat(pattern): Safe Proof Delegation - Intent-based delegation to non-custodial provers with revocable visibility (EIP-8182)
• feat(pattern): Network-Level Anonymity - Umbrella pattern for transport-layer sender anonymity (Tor, mixnets, private RPC, TEE-assisted, VPN)
• feat(pattern): TEE-Assisted Network Anonymity - TEE+secret-sharing approach for low-latency sender anonymity (Flashbots Flashnet)
• feat(pattern): Private Shared State split into co-SNARKs, FHE, TEE — each with distinct CROPS profile and trust model (#104)
• feat(pattern): Enhanced Hybrid TEE + ZK Settlement with trust framework, TEE API surface, stealth address design, anti-pattern table, and PoC learnings (#79)
• feat(pattern): Compliance Monitoring - Transaction screening with privacy-preserving audit trails (#73)
• feat(pattern): L2 Privacy Evaluation Framework - Methodology for institutions to compare privacy L2s (PR-011)
• feat(pattern): Cross-chain Privacy Bridge - Bridge assets between chains while preserving privacy
• feat(pattern): Stateless Plasma Privacy - Client-side proving with minimal on-chain footprint (Intmax-style)
• feat(pattern): vOPRF Nullifiers - Threshold vOPRF-based nullifier generation for credentials/signals (#61)
• feat(pattern): Modular Privacy Stack - Four-layer privacy architecture (#54)
• feat(pattern): Hybrid public-private modes
• feat(pattern): Private transaction broadcasting (#43)
• feat(pattern): TEE-based privacy (#44)
• feat(pattern): Threshold encrypted mempool (#45)

Approaches

• feat(approach): Private Money Market Funds - Privacy-preserving MMF operations with ZK NAV proofs
• feat(approach): Restructured Private Trade Settlement — separated single-chain and cross-chain approaches, added TEE+ZK, MPC, and intent-based settlement with trade-off matrices (#77)
• feat(approach): Enhanced Private Bonds with PoC learnings, coprocessor model analysis (co-SNARKs vs FHE), comparison matrix, and implementation guidance
• feat(approach): Privacy Standards Survey - Standards catalog, gap analysis, and decision guidance (#64)
• feat(approach): White-label infrastructure deployment (#55)
• feat(approach): Atomic DvP Settlement (#56)
• feat(approach): Expanded Private Payments with Plasma and TEE approaches

Use Cases

• feat(use-case): Private Supply Chain, Private Procurement, Private Registry, Private Read, Private Corporate Bonds, Private Government Debt, Private FX, Private Stocks, Private Commodities, Private Repo, Private Money Market Funds, Private Treasuries, Private Payments, Private Oracles, Private Messaging

Domains & Vendors

• feat(domain): Post-Quantum Threats — PQ threat landscape, Ethereum layer analysis, and application-layer breakage index (#121)
• feat(vendor): Peer — P2P fiat-to-crypto onramp using TLSNotary proofs (#88)
• feat(vendor): EY Starlight - Solidity transpiler for private on-chain state
• feat(vendor): TACEO Merces - MPC + ZK approach for private stablecoin transfers
• feat(vendor): Fhenix - FHE privacy (#32)
• feat(vendor): Space and Time (#46)

CROPS Framework & Evaluation

• feat(template): crops_profile frontmatter block added to pattern template for CROPS dimension indexing (#101)
• feat(template): crops_profile frontmatter block and CROPS evaluation criteria added to vendor template and README (#102)
• docs(glossary): CROPS, I2I, I2U evaluation framework definitions (#100)
• docs(readme): Evaluation Framework section with CROPS alignment statement (#100)
• feat(patterns): CROPS-aligned 18 patterns with crops_profile frontmatter and deployment-context Trade-offs notes (#104)
• feat(patterns): Add context and crops_profile CROPS frontmatter to additional patterns

CI & Quality

• feat(ci): Enhanced AI content quality guardrails (#58)
  • Vale prose linter with custom EthSystems styles for marketing language, hedging, and terminology
  • GLOSSARY.md term consistency checker (scripts/check-terminology.js)
  • Extended validation to all content types (vendors, use-cases, approaches, jurisdictions)
  • JSON Schema validation for frontmatter
  • Husky pre-commit hooks with lint-staged
  • LLM-based content review tool (scripts/llm-review.js)
• feat(ci): Pattern validation workflow (#40)

Documentation

• docs(glossary): Add PQ cryptography terms (CRQC, HNDL, ML-KEM, ML-DSA, SLH-DSA, Poseidon) (#121)
• docs: Q1 2026 PRD with sprint planning (#39)
• docs: CHANGELOG.md and weekly summary script (#49)
• docs: weekly-updates directory (#59)

Changed

• chore(approach|use-case): Updated Private Payments approach and use case with PoC validation data
• refactor(use-case): Renamed Private Authentication → Private Identity — authentication reframed as one application of private identity (also renamed approach)
• feat(use-case): Enriched Private Payments with conditional & programmable payment privacy (grant disbursement, milestone-based releases)
• feat(use-case): Enriched Private Government Debt with fiscal transparency vs operational privacy tension
• feat(use-case): Enriched Private Identity with credential portability & reuse problem, government credential sources
• feat(use-case): Enriched Private Oracles with data provenance & consent angle
• feat(use-case): Broadened Private Identity beyond institutional KYC to cover governance and national identity use cases
• feat(approach): Restructured Private Identity Approach with credential-source taxonomy and validated deployment references
• fix(patterns): Add PQ exposure notes to Trade-offs of 16 affected patterns and cross-refs to 4 PQ-aware patterns (#121)
• fix(pattern): Refreshed TEE-Based Privacy — added CPU-encrypted vs hypervisor-isolated platform classification and threat model comparison

Removed

• refactor(patterns): Deleted 4 redundant patterns (#104): pattern-zk-derivative-delta.md (covered by shielding + co-SNARKs), pattern-zk-htlc.md (covered by cross-chain privacy bridge + shielding), pattern-zk-shielded-balances.md (merged into Shielding), pattern-zk-spv.md (removed from map)
• refactor(patterns): Deleted original pattern-private-shared-state.md, replaced by 3 trust-model-specific cards (#104)

Fixed

• fix(pattern): include tradeoff around handling of stock splits in ERC-3643 (#81)
• fix(refs): Updated Private Bonds PoC links to ethsystems/pocs
• fix(pattern): Required frontmatter fields across all patterns (#42)

0.2.0 - 2025-12-19 (End of Year)

Added

• feat(pattern): TEE key manager (#33)
• feat(pattern): EIL - Encrypted Inline Ledger (#26)
• feat(pattern): FOCIL-EIP7805 (#26)
• feat(pattern): Lean Ethereum (#26)
• feat(pattern): OIF - Optimized Integrity Framework (#26)
• feat(pattern): Noir private contracts (#21)
• feat(vendor): Paladin (#19)
• feat(vendor): State Labs - Tx Shield, OpenTMP LLM, Collab-Key (#7)
• feat(vendor): Soda Labs
• feat(vendor): Miden docs (#18)
• feat(approach): Private broadcasting (#6)
• feat(approach): Private bonds
• feat(jurisdiction): EU Data Protection (#8)
• docs: GLOSSARY.md - privacy terminology (#5)

Changed

• refactor: Split patterns directory into patterns + approaches (#2)

Fixed

• fix(pattern): DvP ERC-7573 updates (#31)
• fix(use-case): Private Identity - revocation, zk-TLS mechanism
• fix(docs): Glossary - clarified core privacy concepts (#29)
• fix(docs): ZKsync naming standardization (#20)

0.1.0 - 2025-10-06 (MVP)

Added

• feat: Initial repository import with 62 files
• feat(pattern): 20+ privacy patterns (ZK, MPC, TEE, stealth addresses, etc.)
• feat(use-case): private-identity
• feat(use-case): private-bonds
• feat(use-case): private-derivatives
• feat(use-case): private-rwa-tokenization
• feat(use-case): private-stablecoins
• feat(domain): custody
• feat(domain): data-oracles
• feat(domain): funds-assets
• feat(domain): identity-compliance
• feat(domain): payments
• feat(domain): trading
• feat(jurisdiction): DE eWpG
• feat(jurisdiction): EU MiCA
• feat(jurisdiction): Banking Secrecy
• feat(jurisdiction): US SEC
• feat(vendor): Aztec
• feat(vendor): Chainlink ACE
• feat(vendor): Curvy
• feat(vendor): Fireblocks
• feat(vendor): Miden
• feat(vendor): PrivacyPools
• feat(vendor): Railgun
• feat(vendor): Renegade
• docs: GLOSSARY.md with standardized terminology
• docs: CC0 public domain license