Category: Dev Updates

GajuMobile

• gm-java: Implemented protocol and cryptographic functions from Hakuzaru in Java for use in the Android version of GajuMobile
• GajuMobile-Android: Implemented the v0.1 MVP of the mobile Gajumaru app (sign, verify, generate, recover).
• Preparing for testing: Google Play/F-Droid submission.

GajuMobile is up for a community test in the coming weeks.

GajuMarket

• Updating gaju.market to have a more reactive and natural UX, particularly for GajuMobile users.
• Making cached state sync more reliable. Fleshing out admin roles and functionality.
• Refactoring page components and factoring out style elements.
• QHL: Refactoring and adding in defensive limit defaults and websockets. Adding (but unfinished) page template callbacks.

GajuMarket is also up for community testing in the next few weeks.

GajuPay

• Adding more reactivity and debugging time accounting (in progress). Assessing whether chain-following or node notifications is a better approach for identifying payment status.

GajuDesk

• Adding back the “Receive” button and QR display (in progress).

GajuMining

The biggest news is that the new miner dashboard is ready, deployed on test server and ready for feedback! This is the result of many hours of work and we’re really proud of the result. This, alongside the big refactoring to get to 33% flat rate, gets us on track to deliver all the new functionality in a big release. We also produced scripts to backfill existing miners with their appropriate outreach tiers and unique signups.

The shop got some polish:

• once in the payment screen, a user can see why certain payment options are not available to their specific order
• we allow users to change their email in the middle of their checkout
• we cleanup stale shopper details

We addressed a lot of technical debt:

• now BeaconCMS changes are tracked in git
• introduced a new cookie policy
• the Content Security Policy has been heavily reviewed and refined
• added support for data sanitation (GDPR requirement)
• added some admin features we would like to brag about but we shouldn’t
• enabled GRIDS QR code and limited the sessions to 24 hours
• quite a few bugfixes and polishes

We introduced support for multiple HiveMans contracts. This will allow us to support multiple smart contract constellations. The goal is to provide smooth transition from the existing smart contract to a tokenised one.

We integrated further with the HiveServer so we can receive some data regarding the miner’s daily progress. We expanded this further with collecting data for the miner’s connected state. We started working on another mining software dedicated dashboard with various graphs to help operators fine-tune their mining effort.

We did polish and improve the support for the third party upload, and fixed a few bugs.

DEX

The smart contracts got a lot of attention and are now mature and should be ready to use. Some more notable changes:

• Added a DEX factory in ct/dex.aes:
  • Creates and registers wrappers, AMMs, and order books.
  • Restricts AMMs to fixed fee tiers: 0.05%, 0.3%, and 1%.
  • Initializes new AMMs atomically to prevent pool-initialization front-running.
• Substantially hardened the AMM in ct/amm.aes:
  • Added deadlines, minimum outputs, validation, events, and reentrancy protection.
  • Locked minimum initial liquidity to prevent first-depositor inflation attacks.
  • Replaced Call.origin with Call.caller.
  • Rejects fee-on-transfer or incorrectly accounting tokens.
  • Improved one-sided liquidity and rebalancing calculations.
  • Changed several public entrypoint signatures, so integrations need updating.
• Reworked the order book in ct/clob.aes:
  • Added unique order IDs, owner-only cancellation, expiry cleanup, events, FIFO priority, and a 1,000-order limit per side.
  • Added reentrancy and exact-transfer checks.
  • Fixed ask insertion, price rounding, and token-unit accounting bugs.
  • Replaced the old broad abort/check APIs with explicit cancellation and expiry removal.
• Added 1:1 token wrapping in ct/wrapper.aes:
  • Metadata is derived from the underlying token.
  • Deposits mint wrapped tokens; withdrawals burn them.
  • Exact backing and reentrancy checks prevent undercollateralization.
• Improved ct/token.aes:
  • Added two-step ownership transfer.
  • Added permanent minting disablement.
  • Removed the call_contract AEX-9 extension and entrypoint.

The next step is really exciting: building the DEX interface!

Core

• Prototyped Account-Initiated Currencies (AIC) – a version of native tokens, where each on-chain account can mint its own ‘currency’ and spend it to other accounts.
• Also added an ‘exchange’ transaction, which allows for atomically trading multiple currencies (and native currency as well).
• Extended State Channels and Sophia Smart Contracts to support AICs.
• Implemented Hive Server redundancy and Hive Chain Node Cold Standby, including multi-homing support in the mining client, as well as end-to-end integration test suites.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.

Core

• Finished integrating to Beta status native Quantum Resistant Accounts, native ‘authorization group’ accounts, and Associate Chains. 
• Another feature is that an account can be flagged as ‘protected’, such that it can only receive payments if the owner co-signs the transaction. This can be done by wrapping the transaction in an authorization proposal, which is automatically forwarded to a proposal pool, where prospective co-signers can inspect and sign the transaction. An account can e.g. operate normally on an Associate Chain, while being protected on Groot. Quantum Resistant accounts work across Associate Chain connection points.
• Completed HTTP endpoints for waiting for transaction status, including finality, via push events. 
• Added a subscription endpoint for Sophia Contract Events. 
• Refined the State Channels benchmark suite to use agentive-style auto-signing and found some performance improvements.
• Prototyped ASN.1-driven serialization support for better portability. Improved CLI support for account status and configuration browsing. 
• Indexing Plugin is now prepared to go live serving the Gajumaru Explorer, with assistance from summer intern Alex Hinde. This also serves as a practical demonstration of how to write node plugins with custom OpenAPI-driven HTTP endpoints — a core part of our concept of Utility Nodes for business integration.

GajuMobile

• Android serialization libraries, test suites and platform security examination.

GajuMining

• New Rewards system is finalised and merged. It will be released as soon as the new dashboard is ready.
• New Dashboard: we prepared the following new widgets:
  update Outreach Tier Widget with Free License Tier Widget
  Create Progress Bar component
  We dropped the support for details for pre-mining era. At this point we are finalising the layout of the dashboard.
• Third party sellers dashboard is polished and finalised.
• Some refactoring of the shop UI to be released soon: we show resend countdowns for verification codes, added a remove promo code action to cart, mobile view of the cart. 
• Payment providers now come with logos for better UX. The cart has a feedback animation when adding items with quick-add feedback panel. We added steppers so users are aware what happens next and where there are in the checkout process.
• When users open the downloads page on different OS – we detect the OS to provide the appropriate links. Now we added a small page for mobile devices.
• Small polishes, bug fixes, introduced a few new audit and security tools in the pipeline

GajuAuth 

GajuAuth is a platform connecting OAuth 2.0 applications with GRIDS sovereign identities. Users and administrators authenticate through cryptographic public-key challenges—without passwords—while organizations gain centralized control over clients, identities, tokens, signing keys, auditing, and operational health.

So far, we have delivered authorization-code and refresh-token flows, PKCE, JWT and opaque tokens, revocation, introspection, UserInfo, JWKS publishing, and signing-key rotation. Recent work strengthened the platform with PAR, JAR, JARM, DPoP, resource indicators, rich authorization requests, step-up authentication, rate limiting, token diagnostics, security-focused defaults, polished administration tools, automated quality checks, and production release packaging.

Supporting applications are being built to seamlessly integrate with GajuAuth, outlined below. 

GajuRegistry

We’ve built a resource server that stores user registry profiles and provides scoped OAuth2-protected APIs for names, avatars, emails, phone numbers, and addresses. It integrates with GajuAuth through token introspection or JWT validation, with support for PAR, JAR, JARM, and DPoP. The application includes admin interfaces for registries, administrators, resource clients, JWT audiences, scopes, audit logs, token diagnostics, and metrics. We also added rate limiting, trusted-proxy handling, security validation, OpenAPI documentation, production releases, database migrations, and automated test coverage. We synchronized the application with newer GajuAuth capabilities and strengthened its OAuth and DPoP support. 

GajuPassport

GajuPassport has evolved into a polished identity and consent portal that allows users to securely sign in with GajuAuth, view and manage identity information stored in GajuRegistry, and choose which profile fields may be shared with connected services. The project now includes clear handling of authorized and restricted information, avatar support, transparent protocol activity logs, reliable login and error flows, and a refined, responsive interface. Behind the scenes, the authentication integration has been strengthened with modern OAuth 2.0 security features, comprehensive automated testing, flexible production configuration, database migration support, and a streamlined release process that packages the application for deployment as a production-ready archive.

GajuOAuth2 Demo Portal

We’ve created a responsive technical guide to the Gaju OAuth2 ecosystem. It explains how the resource owner, GajuPassport, GajuAuth, and GajuRegistry work together—from authentication and consent through token issuance, validation, and scoped data access. Dedicated participant pages clarify responsibilities, trust boundaries, security guarantees, and the principle that private keys remain under the owner’s control. The application is also packaged for configurable production deployment.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.

Core

Finishing touches made to the “demochain” tool, which would allow others to quickly create different chain configurations for testing;

Helper application for managing complex state interactions in test suites created.

HTTP endpoint for tracking a transaction’s progress towards finality added.

Documentation of Sophia, FATE, the relationship between them, and where the gaps are.

Work on a step debugger to be able to troubleshoot failed contract calls that occurred on testnet/mainnet.

Applications & Utilities

Test harness for GajuMobile Java libraries created.

Work started on the core libraries themselves.

GajuMining

New database structures to reflect upcoming rewards system, promo code and commission interfaces for paid licenses.

Updated sales rewards: free licenses for high-performing sellers, validated and verified accounts, rewards for unique sign-ups and new miners introduced. 

Dashboard refinements and overall redesign with better UX and reusable widgets:

• commission rate widget;
• daily cap widget;
• accumulated rewards widget;
• quick-generate promo code component;
• outstanding actions widget;
• miner rewards graph widget; 
• recent commissions widget.

Preparations for onboarding third-party sellers and bulk sales.

Database structure and support for accounts with administrator roles.

Nearing completion of bulk upload CSV validation rules implementation.

Several UI and UX refinements across the shop and layouts, improved form validation, a few bug fixes and general dependencies maintenance.

Now collecting HiveServer daily miner progress so they can be visualised in the new dashboard.

Deprecated Google Analytics in favour of self-hosted analytics.

Redesign to be released soon.

Product Development

We identified emerging market opportunities that Gajumaru technology is uniquely positioned to dominate, considering the fact that no existing project other than Gajumaru can currently satisfy these needs on a technical level.

As a result of these assessments, entirely new products have been formulated and started. The following have been added to production in preparation for these emergent markets.

GajuAuth

GajuAuth is a Phoenix application that provides OAuth2 authorization for GRIDS sovereign identities. Resource owners authenticate by signing GRIDS challenges with their account public key. Admins manage OAuth clients, resource owners, token state, signing keys, and audit/event views from the admin dashboard. The authentication services market was valued at $18.5 billion in 2025, and is projected to hit $52.8 billion in 2033.

GajuExpress

GajuExpress allows people to exchange confidential data in a fully end-to-end encrypted way. Payment for the service is integrated directly into the application, so payment is not an extra step. Secure and convenient.

Capillary

Sub-cent micro-payments for pay-per-query services, such as AI agents, Capillary is a peer payment systems for ultra-fast micropayments over Gajumaru state channels.

FATEweaver

FATEweaver is a Sophia development environment, contract deployment interface, and blockchain call utility all in one. Although not a client-facing product, FATEweaver is worth mentioning as it would allow developers to ease into blockchain development, facilitating the growth of a development community and consequently, the creation of more products and tools that would help strengthen the Gajumaru ecosystem, and the Gaju as a currency.

More details on these will be published individually in the future. Additionally, work on GajuMobile, GajuPay, GajuMarket, GajuDEX, Associate Chains continue. Updates will be published as they roll out.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.

Core

State Channel Markets: improvements to the structure of the HTTP API subsystem and schema validation for dynamic management of OpenAPI endpoints in service plugins.

Added support for event push in transaction endpoints, so that clients don’t have to poll to see when a transaction makes it onto the chain.

Applications & Utilities

A large update to the Hakuzaru library has been merged.

Hakuzaru documentation is finally complete and will be published with the release of update v0.9.2.

Large updates and additions to Hakuzaru, contract property testing framework, and DEX contracts.

Contract property testing framework updates, moving it from an independent mockup to an in-node plugin, and building out the tools necessary for a fully integrated code stepper.

GajuDesk

The smart contract development and call interface utility, FateWeaver, has been deployed within GajuDesk.

Several tweaks and bug fixes to GajuDesk were pushed in update v0.9.0.

Development on GajuExpress (secure file transfers verified by Gajumaru IDs) has been started.

A technique for secure network endpoint lookups and verification using on-chain techniques instead of DNS + CA governed certificates has been developed.

GajuMining

Introducing free shopping items in the shop and limiting them up to one per account. 

Non-commission earning free license miners can participate in perks. 

Updates to promo code controls.

UI support for re-assigning miners to new hives in preparation for load balancing miners in the existence of multi-hives.

Third party initial steps: database schemas, admin support for toggling users as third party sellers.

Bundle perks are refactored to support all D0 and up levels.

Tracking gifts as unique sign up perks for new miners.

Google analytics has been disabled in favour of self-hosted analytics.

Hive server now can report mining process for connected miners. This will allow visualization of the mining power being provided by a miner vs the mining power and mining duration required for them to reach their daily cap.

Registration form improvements: GRIDS form now persists instructions on refresh. Footer component improvements; shop and checkout polishes. A lot of bugfixes.

Business Development

Identified market opportunities where Gajumaru technology is uniquely positioned to provide technological solutions. Conceptualized new products: GajuExpress, GajuAuth, Capillary.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.

Core

• Completed the first version of a tool for quickly orchestrating experimental chains.
• Added support for registering verifiable (OpenAPI) HTTP endpoints for Gajumaru node plugins.
• Core node support for Hive-style mining pools has now been merged into the Gajumaru master.
• TUI (Terminal User Interface) step debugger for sophia smart contracts, to work as a plugin for a Gajumaru node; enables tracking paths taken during contract execution for debugging, etc.
• Standard for regulator-friendly token-defined assets in the works.

GajuDesk

• Adding compression to Sophia contract source code in Hakuzaru.
• Unifying the Hakuzaru call interface.
• Fixing the contract deploy/call interface in GajuDesk.

GajuMining

• Polished emails, pages added for new user terms and data deletion. 
• WhatsApp one-time-password support for validating phone numbers, and validation for promotion codes.
• Multi-hive support with the ability to spawn new hives. Miners are assigned at random to hives that had reported their address.
• Payments: SumUp integration for card payments now working for mining license purchases.
• Payments: Some Tilt webhook improvements.
• Payments: dynamic changing of payment provider options implemented.
• Introduced a webhook for the HiveServer to report on when a miner connects for the first time.
• Improved tracking of unique sign ups for affiliate links.
• License bundle creation implemented.
• Admin UI: the miner page now shows connection status, Hive DI, and more.
• SumUp integration for card payments now working for mining license purchases.
• Some bug fixes.

GajuDEX

Smart contract written for central limit order book, order matching, expiration of orders, etc.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.

Core

• Indexing plugin ‘beta’ state completed;
• Demonstrator of Associate Chain connection points in the works;
• Orchestration tool for quickly setting up experimental chains has been created with some docs and examples;
• State Channel benchmark test suite updated, and verified that a single Gajumaru node can handle at least 10,000 concurrent channels (in the context of the benchmark suite, that actually means 20,000 State Channel endpoints on the same node). Throughput scales linearly up to the point where CPU cores become saturated, then remains stable at that level even as load increases.

QHL

QHLWebsocket integration is about halfway complete.

GajuDesk

Big update coming; new features:

• Contract call interfaces are changing to a process-based lifecycle system;
• A configuration interface is being introduced so that users can select Gaju display style, language, and so on;
• We aren’t quite to the point of translating the interface, but the preparatory work for that is mostly complete;
• A QR interface for communication with GajuMobile is being introduced (GajuDesk can then be used for public-key-only wallets);
• Enhancement: network fallback is being implemented for mainnet and testnet (if the middleware is overloaded, automatically shift.

GajuMobile

• Further work on Kotlin libraries underlying the system (serialization, crypto functions, etc.);
• Early interface prototyping;
• Hardware key storage prototypes on Android 13+.

GajuAuth

• Early architecture work on a GRIDS-backed (S3O) OAuth2 service.

GajuDEX

• Code written to complement the Sophia term parser, allowing tools like GajuDesk to accept Sophia input, send it to the chain, receive results back from the chain, and display the results as readable Sophia terms; to be integrated with GajuDesk;
• Better internal documentations for some some DEX smart contract functionalities.

GajuMarket

Test site is running, should be ready for testing once work on new faucet and explorer are finished.

GajuMining

Vaults

• Multisig contract expanded with new utility functions; revisited how hashes for signatures are being produced;
• Add & remove signatories via smart contract calls;
• Set Multisig threshold via a contract call;
• Set Vault threshold via a contract call;
• Show Actions functionality;
• A lot of visual polishing;
• Track and visualize transaction hash for all posted Actions.

Shop

• Currency visualization refinements;
• Integration with a service provider of information to determine the country of origin of the client depending on their IP address;
• Visual refinements;
• Enforce country phone number correctness: determine the country of origin of the client based on the phone number country prefix;
• WhatsApp initial integration;
• Downloads’ section refinements;
• Double licenses for Corps and Army tranches, introduce Bundles licenses;
• Tilt API integration.

Miner dashboard

• Split commissions functionality allows one user to create a new promotion code that shares their commission with another miner.
  

GajuMining tests

• introduced Wallaby based authentication helper;
• admin route check;
• packages tests;
• sale items tests;
• admin tests;
• pending order tests;
• miner route check.

Other

A bunch of bugfixes.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.

Core

• First draft of Sophia extensions for Quantum-resistant signatures (ML-DSA) created; see link for more details
• demonstrated use of them in Generalized Accounts;
• Worked on configurable block indexing.
• Updated middleware dependencies. 
• Generalized Sophia Term Notation/parser, allowing arbitrary Sophia types using arbitrarily complex namespaces to be input into tools like GajuDesk, including work to test that error messages have accurate and informative row/col positions.

GajuDEX

Development of a simplified, general-audience version of the GajuDEX business plan that requires no prior knowledge of crypto or blockchain. Sections include:

• What is a CEX vs a DEX
• The problem with DEXs and our solution
• Why use a decentralised exchange over a centralised one
• The market opportunity
• The benefits of a DEX on Groot vs on Associate Chains

GajuMobile

Building out a testing harness for Kotlin encoding and support libraries for GajuMobile.

GajuDesk

• Sophia developer and deploy/call interface in GajuDesk is being completed;
• Bug fixes;
• Preparatory work for further hardening of GajuDesk wallet file encryption.

GajuMining

• Improved GajuMining website admin section (accounting entries section, exporting received payments, revisited the pending orders section, allowed admins to create multiple promotion codes, promotion code limits in admin UI);
• The user dashboard now shows unconfirmed gifts;
• Smart contract ACI is cached in the website’s memory for much faster access; 
• Onboarding email file attachments refined;
• Improvements to Vault UX underway; 
• New vault smart contract constellation from UI can now be deployed; added visibility of pending actions across various vaults; 
• Filtering out duplicate signatures and signatures made by invalid signatories; 
• Consent collection for sending additional information to users with regards to GajuMining or Gajumaru blockchain;
• Bug fixes.

GajuPay

• PinePhone demo in progress;
• Independent testnet infrastructure set up for improved demo performance when running testnet nodes in North America.

GajuMarket

Testnet up and running; pending middleware updates and some refinements before opening to the community for testing.

Interested in building early on Gajumaru? Learn more about Gajumaru blockchain.

Want to mine Gajus? Early miners only have until 2027 before protected mining ends.