The qID timeline
Every major step since day one: the library, the paper, qID Connect, the live integrations, the wallet's road to the app stores, the research, and the security rounds that hardened all of it.
Dates come from the commit history and the release changelog, not from memory.
May 2026
qID begins as a spike: one 32-byte seed becomes a complete post-quantum identity for BTX. Keys, address, login, recovery, encryption. MIT-licensed from the first commit.
Multi-input P2MR signing, post-quantum fee sizing, coin selection and sweep. Verified against a real node from the very first version.
The BTX desktop wallet ships passkey unlock built on the qID WebAuthn seal, one day after day one. The library is already inside a product.
June 2026
NIST KAT vectors pinned offline, key-derivation buffers zeroized, fuzz tests on address round-trips, and a CI gate that rebuilds the bundle from source and fails on any byte of drift.
CI actions SHA-pinned, Dependabot enabled, and the attestation envelope hardened in a seven-question audit round.
Attestation limits enforced and each login key pinned to its serial, closing a rotation-replay class.
July 2026
easybtx.com publishes its first study, Can BTX Be Faked?, an authenticity deep-dive with FAQ. The research section is born.
Three studies in two days: Hard-Money Asymmetry, BTX mining economics, and The Occupancy Gap on why the same GPU mines BTX faster.
Audit source-hardening lands and the standard track begins. From here, releases carry a build-provenance record.
PQ Wallet for BTX v0.20.2 ships in-wallet qID Sign-In. Four days later it gains the signing-wallet picker: sign with exactly the wallet you choose.
FIPS-205 recovery spending retested and confirmed live against the BTX chain.
This site launches together with the technical paper: a post-quantum identity construction from NIST FIPS 203, 204 and 205. Read the paper.
Sign in with qID, both sides in one day: the server SDK that verifies proofs and mints sessions, and the widget that renders the dialog. The address is the account. No email, no password.
A private lab and a curated public surface: everything public arrives through a scripted export, so what ships always equals a lab commit.
Every article becomes a clean print PDF with an in-page reader. The same week brings Who Holds BTX? (an on-chain holder census), Why Run a BTX Node? with measured costs, a study on whether the matrix proof-of-work does anything useful, and the reusable-hardware paper on BTX's compute base and the EVX finance layer.
Poll CSRF closed, replay consume made async-safe, widget timer fixed. Six days old and already patching itself honestly.
The full integrator guide ships at /connect/integrate, and QR plus deep-link transports arrive the same day. One link is now enough to add wallet login to a BTX app.
The first real site ships Sign in with qID: real wallets, real sessions, a durable backend. The 1.4 line makes the copy-paste flow survive QR rotation the same day.
Origin canonicalization, secret-bound nonce retire so a bystander cannot grief a sign-in, the poll-claim grace window for flaky mobile hops, and session-guard hardening. Eleven releases in six days.
qID Dashboard ships with a dogfooded qID login, a project registry and outside-in health checks. Quantum Reflex ships too: sign in with your address, play, make the leaderboard.
Builder onboarding with a real qID sign-in, and a showcase listing every live integration in one place.
The pack now ships an Agent Skill that teaches an AI coding assistant to wire sign-in correctly, plus a zero-dependency checker that verifies a live integration end to end. Docs pinned to reality.
PQ Wallet for BTX, carrying qID inside, is submitted to the Microsoft Store as a Store-signed MSIX, with the Snap Store submission a day earlier. The first store shelf for a qID wallet.
August 2026
easybtx.com publishes BTX Changes Its Proof-of-Work at Block 185,000, the day before the MatMul activation reached mainnet.
TOCTOU, silent key reuse and challenge-downgrade classes closed in the core. The paper gets an errata pass. The Sign-In v3 envelope is drafted for external review.
The fix for a QR session-fixation class: a bystander who could read the QR off the screen could complete a sign-in as themselves in the victim's browser. Now the user confirms the address before any session exists. Breaking for hand-rolled poll loops, on purpose. Full details in the changelog.
A second core hardening round merges, and all five regtest suites pass against a live BTX node, closing the node-acceptance gap. 1.7.0 reaches every surface: the pack, the hosted widget, btc2btx.com, dashboard, build and play, each verified with a real confirm-flow sign-in over production HTTP. That discipline also caught and fixed a silent three-day sign-in outage on one production proxy.
PQ Wallet for BTX v1.1.0, carrying the hardened qID core, is submitted to the Mac App Store. Microsoft Store, Snap Store, direct download, and now Cupertino.
The Agent Skill now teaches the confirm contract so an assistant wires the new flow correctly, and troubleshooting learns the one new symptom. The Sign-In v3 envelope specification merges as a draft, open for co-authorship. Nothing in v3 has shipped.
The network wedged for half a day on a chain-selection bug and recovered the same evening. easybtx.com published the story while it was still warm: The Day BTX Halted, a MacBook Kept the Chain's Memory.
This timeline goes live, llms.txt is rebuilt to carry the whole current estate including the 1.7.0 confirm contract, and qid.dev/ai opens: one bootstrap prompt, the open-source skill and the checker, so any AI coding agent can build a BTX app with post-quantum login and prove it works.