the whole story, dated

The qID timeline

Every major step since day one: the library, the paper, qID Connect, the live integrations, the wallet's road to the app stores, the research, and the security rounds that hardened all of it.

Dates come from the commit history and the release changelog, not from memory.

May 2026

Day one v0.1.0

qID begins as a spike: one 32-byte seed becomes a complete post-quantum identity for BTX. Keys, address, login, recovery, encryption. MIT-licensed from the first commit.

The spend core, node-verified

Multi-input P2MR signing, post-quantum fee sizing, coin selection and sweep. Verified against a real node from the very first version.

qID meets its first wallet

The BTX desktop wallet ships passkey unlock built on the qID WebAuthn seal, one day after day one. The library is already inside a product.

June 2026

First hardening round security

NIST KAT vectors pinned offline, key-derivation buffers zeroized, fuzz tests on address round-trips, and a CI gate that rebuilds the bundle from source and fails on any byte of drift.

Supply chain locked security

CI actions SHA-pinned, Dependabot enabled, and the attestation envelope hardened in a seven-question audit round.

Attestation caps and serial-pinned login keys security

Attestation limits enforced and each login key pinned to its serial, closing a rotation-replay class.

July 2026

The research desk opens research

easybtx.com publishes its first study, Can BTX Be Faked?, an authenticity deep-dive with FAQ. The research section is born.

The economics series research

Three studies in two days: Hard-Money Asymmetry, BTX mining economics, and The Occupancy Gap on why the same GPU mines BTX faster.

v0.3.0 and provenance-attested releases v0.3.0

Audit source-hardening lands and the standard track begins. From here, releases carry a build-provenance record.

The first wallet with qID Sign-In built in

PQ Wallet for BTX v0.20.2 ships in-wallet qID Sign-In. Four days later it gains the signing-wallet picker: sign with exactly the wallet you choose.

Recovery spends confirmed on mainnet

FIPS-205 recovery spending retested and confirmed live against the BTX chain.

qid.dev goes live, with the paper

This site launches together with the technical paper: a post-quantum identity construction from NIST FIPS 203, 204 and 205. Read the paper.

qID Connect is born

Sign in with qID, both sides in one day: the server SDK that verifies proofs and mints sessions, and the widget that renders the dialog. The address is the account. No email, no password.

Connect 1.0.0 and the two-repo pipeline 1.0.0

A private lab and a curated public surface: everything public arrives through a scripted export, so what ships always equals a lab commit.

Research goes academic research

Every article becomes a clean print PDF with an in-page reader. The same week brings Who Holds BTX? (an on-chain holder census), Why Run a BTX Node? with measured costs, a study on whether the matrix proof-of-work does anything useful, and the reusable-hardware paper on BTX's compute base and the EVX finance layer.

The first security-fix release 1.1.0

Poll CSRF closed, replay consume made async-safe, widget timer fixed. Six days old and already patching itself honestly.

The one-link milestone 1.2 to 1.3

The full integrator guide ships at /connect/integrate, and QR plus deep-link transports arrive the same day. One link is now enough to add wallet login to a BTX app.

First production sign-in: btc2btx.com 1.4.x

The first real site ships Sign in with qID: real wallets, real sessions, a durable backend. The 1.4 line makes the copy-paste flow survive QR rotation the same day.

The 1.5 hardening run begins 1.5.x

Origin canonicalization, secret-bound nonce retire so a bystander cannot grief a sign-in, the poll-claim grace window for flaky mobile hops, and session-guard hardening. Eleven releases in six days.

Dashboard and the game, same day

qID Dashboard ships with a dogfooded qID login, a project registry and outside-in health checks. Quantum Reflex ships too: sign in with your address, play, make the leaderboard.

build.qid.dev and the showcase

Builder onboarding with a real qID sign-in, and a showcase listing every live integration in one place.

Seven releases in one day 1.6.0 to 1.6.6

The pack now ships an Agent Skill that teaches an AI coding assistant to wire sign-in correctly, plus a zero-dependency checker that verifies a live integration end to end. Docs pinned to reality.

The wallet heads to the stores

PQ Wallet for BTX, carrying qID inside, is submitted to the Microsoft Store as a Store-signed MSIX, with the Snap Store submission a day earlier. The first store shelf for a qID wallet.

August 2026

The proof-of-work paper research

easybtx.com publishes BTX Changes Its Proof-of-Work at Block 185,000, the day before the MatMul activation reached mainnet.

Core hardening, round one security

TOCTOU, silent key reuse and challenge-downgrade classes closed in the core. The paper gets an errata pass. The Sign-In v3 envelope is drafted for external review.

1.7.0: QR address confirmation 1.7.0

The fix for a QR session-fixation class: a bystander who could read the QR off the screen could complete a sign-in as themselves in the victim's browser. Now the user confirms the address before any session exists. Breaking for hand-rolled poll loops, on purpose. Full details in the changelog.

The ship day 1.7.0 → live

A second core hardening round merges, and all five regtest suites pass against a live BTX node, closing the node-acceptance gap. 1.7.0 reaches every surface: the pack, the hosted widget, btc2btx.com, dashboard, build and play, each verified with a real confirm-flow sign-in over production HTTP. That discipline also caught and fixed a silent three-day sign-in outage on one production proxy.

The wallet reaches Apple

PQ Wallet for BTX v1.1.0, carrying the hardened qID core, is submitted to the Mac App Store. Microsoft Store, Snap Store, direct download, and now Cupertino.

1.7.1 and the v3 draft, same evening 1.7.1

The Agent Skill now teaches the confirm contract so an assistant wires the new flow correctly, and troubleshooting learns the one new symptom. The Sign-In v3 envelope specification merges as a draft, open for co-authorship. Nothing in v3 has shipped.

The halt, written up the same day research

The network wedged for half a day on a chain-selection bug and recovered the same evening. easybtx.com published the story while it was still warm: The Day BTX Halted, a MacBook Kept the Chain's Memory.

The site learns to talk to agents

This timeline goes live, llms.txt is rebuilt to carry the whole current estate including the 1.7.0 confirm contract, and qid.dev/ai opens: one bootstrap prompt, the open-source skill and the checker, so any AI coding agent can build a BTX app with post-quantum login and prove it works.

How this page is made. Curated by hand from the commit history and the release changelog. It records what shipped and when, in the same voice as everything else here: resistant to quantum attacks, built on NIST-standardized post-quantum cryptography, pending independent audit. Never "unhackable". For every Connect release in detail, see the changelog. For the research series, see easybtx.com/research.