Build from source

The workspace is Rust 2021 and pins Rust 1.96.0. Native dependencies are needed for MDBX, proof code and GUI packaging.

Host requirements

All platforms need:

the pinned Rust toolchain with rustfmt;
a native C/C++ compiler;
CMake;
libclang;
Git.

On Debian or Ubuntu:

sudo apt update
sudo apt install --no-install-recommends \
  build-essential clang libclang-dev cmake pkg-config

The Linux GUI package additionally needs appstreamcli and dpkg-deb. Windows release packaging uses Inno Setup 6. macOS packaging uses the standard codesign, iconutil and hdiutil tools.

The repository's rust-toolchain.toml selects the compiler automatically:

rustup show active-toolchain
rustc --version
cargo --version

Check the workspace

cargo fmt --all -- --check
cargo check --locked --workspace --all-targets

Build ordinary development binaries:

cargo build --locked \
  -p noid_node \
  -p noid-extminer \
  -p noid_gui \
  --bins

Development binaries exercise parsing, UI and non-production test paths. A block-producing release requires the authenticated HistoryStep matrix pack described below.

Production proof material

A production build authenticates the Small, Large and Native matrices against one pinned bank. Use the mainnet packs and independently checked pins for the source tree being built. Keep these generated artifacts outside target/.

Current matrix bank

The three-class pack has this layout and bank pin:

v21-runtime-metadata.bin
v21-small.field-r1cs.zst
v21-large.field-r1cs.zst
v21-native.field-r1cs.zst

NOID_V21_RELEASE_BANK=6c280ae869afc25e31d46d73b42870512991b78c9498bc7e5ef939bc07e5ed5e

The pin binds the matrices, interpreter, budgets and consensus schedule. An isolated test-network pack has a different identity. The build checks the metadata and every matrix before embedding the material.

Ancestry verification material

Synchronization also authenticates retained ancestry. Its inputs are supplied as separate history, matrix and preprocessing-key directories:

v1/history-step.runtime
v2-runtime-metadata.bin
v2-small.field-r1cs.zst
v2-large.field-r1cs.zst
class-0.key
class-1.key

NOID_V2_RELEASE_BANK=c2a6df736b0d0da22e285b6930b11cf44b520d65b52c7dfe78f44fe0cd48e76e
NOID_RETIREMENT_KEY_0_PIN=<authenticated-key-0-digest>
NOID_RETIREMENT_KEY_1_PIN=<authenticated-key-1-digest>

Use independently recomputed key digests. The pin file is parsed as data. The ancestry-bank record identifies its matrices and authentication procedure.

Ancestry resource calculation

This command evaluates the retained ancestry bank, its preprocessing keys and the corresponding recursive reductions:

cargo build --release --locked -p bench_prover --bin noid_v2_soundness
target/release/noid_v2_soundness \
  LEGACY_METADATA LEGACY_METADATA_PIN V2_METADATA V2_BANK_PIN \
  CLASS_0_KEY CLASS_0_KEY_PIN CLASS_1_KEY CLASS_1_KEY_PIN

The derivation states the exact inputs and premises for that calculation.

Native deliverables

Run source checks and qualification before packaging:

./scripts/build_release.sh \
  --pack ../parano1d-artifacts/history-step-pack-v1 \
  --v2-pack PATH_TO_FROZEN_V2_PACK \
  --v2-pins PATH_TO_REVIEWED_PIN_FILE \
  --v21-pack PATH_TO_FROZEN_V21_PACK \
  --v21-pins PATH_TO_REVIEWED_V21_PIN_FILE \
  --retirement-keys PATH_TO_AUTHENTICATED_KEYS \
  --retired-history

cat target/release-builds/LAST_RELEASE

The release script validates input layouts and pins, embeds authenticated material, rejects a mismatched schedule, builds Core and GUI, smoke-tests the executables and verifies package membership and SHA-256 sums. It does not run the entire protocol test suite. proof-pins.env records the embedded identities. Use --output PATH for a fresh output directory.

Use --retired-history for mainnet. The node obtains the selected origin's certificate over P2P and verifies it against independently pinned preprocessing keys. The executable embeds the three-class bank, the retained ancestry bank and their metadata. Its history input archive contains v1/history-step.runtime, pins.env and their SHA256SUMS.

The publisher selects this profile by default. --with-legacy-history embeds the full historical matrices for source reproduction. Synchronization selects the authenticated relation by the block's consensus schedule.

Portable binaries

x86-64 releases are compiled against a portable process baseline. After checking the host, runtime dispatch selects pclmul, avx2+vpclmul or avx512bw+vpclmul. ARM64 selects neon+pmull.

Do not compile official artifacts with target-cpu=native. That would make the binary depend on the build machine before runtime hardware checks can run.

Reproducible archive details

On GNU tar hosts, SOURCE_DATE_EPOCH controls member timestamps and defaults to zero. The Core archive has a fixed member set:

README.txt
CONTRACTS.md
LICENSE
NOTICE
parano1d
parano1d-cli
parano1d-miner

The GUI package contains only the application and its private node. It does not include operator CLI or external-mining tools.