- Sep 2, 2026The 87-byte certificate
I minted a real Merkle Tree Certificate with one of the draft authors' own tooling and measured 87 bytes, then 727 bytes in a batch of a million. The more useful finding is that the failure I captured, a verifier refusing a certificate because it had fallen behind, was designed out of the specification fourteen months before I ran it.
- Aug 22, 2026The SCTs outweigh the certificates
Swap each embedded SCT signature for SLH-DSA-128s, the conservative hash-based choice for a long-lived log key, and leaf-only ML-DSA migration projects past the initial congestion window for 99.7% of 8,151 measured sites. The overflow is a corollary of 2022 arithmetic. The per-site distribution is what's new.
- Aug 15, 2026The 20% that passed for free
A build guard reported a secret present in a bundle that did not contain it, and it was not flaky. IBM measured this failure at 20% of formulas on first runs, formal methods calls it vacuity, working programmers call it a tautological assertion, and it arrives in five distinct shapes.