This file is the canonical LEP-5 specification for the
lumeraimplementation. It incorporates implementation-stage drift from the original proposal, including BLAKE3 hashing, client-providedchallenge_indices, and per-level odd-node duplication in the Merkle tree.
The current Cascade protocol has a critical vulnerability: a malicious SuperNode can finalize actions and claim fees without ever receiving or storing the actual file data.
This attack is possible because:
rq_ids_ids is available on-chain (creator's signature + counter)Impact:
Introduce an Availability Commitment system that requires the finalizing SuperNode to prove possession of actual file data: