- [ ] Security audit
- [ ] Code audit
- [ ] PQC specification frozen
  - [x] `docs/POST_QUANTUM_CRYPTOGRAPHY.md` matches implementation
  - [x] canonical transaction/signature serialization documented
  - [x] signed payload definition documented
  - [x] V4 PQC Privacy Roadmap published
- [ ] PQC crypto review
  - [ ] hybrid sign/verify implementation reviewed (external audit pending)
  - [ ] FFI ownership / zeroization reviewed (external audit pending)
  - [x] test vectors generated and archived (4 vectors: 1 positive, 3 negative)
- [ ] PQC interoperability verification
  - [ ] wallet sign/daemon verify path tested
  - [x] malformed hybrid signature rejection tested (3 negative vector integration tests)
  - [x] encoded transaction size impact measured (~5,385 bytes per user tx)
  - [x] payload limit guidance documented in V3_ROLLOUT.md
- [ ] Ledger integration
  - [ ] Implemented in Shekyl codebase (if needed)
  - [ ] Ledger app integration coded by Ledger
  - [ ] Ledger Shekyl app (or Monero-compatible app) update available
- [ ] Trezor integration
  - [ ] Implemented in Shekyl codebase (if needed)
  - [ ] Trezor app integration coded by Trezor
  - [ ] Trezor firmware update available (if needed)
- [x] Fork height set (rebooted chain: all features at HF 1 from genesis)
  - [ ] Shekyl announcement mailer / notice
  - [ ] Twitter announcement
  - [ ] Reddit announcement
  - [ ] Project website announcement
- [ ] Notify wallets
  - [ ] (Update with Shekyl-compatible or compatible third-party wallets)
  - [ ] Cake Wallet
  - [ ] Monerujo
  - [ ] Other compatible wallets as applicable
- [ ] Notify exchanges
  - [ ] Project website / community merchant list (exchanges)
- [ ] Notify 3rd party payment processors
  - [ ] Project website / community merchant list (payment gateways)
- [ ] Notify mining pools
  - [ ] Mining pool listing / pool operators
- [ ] Release tagged
  - [ ] Update src/version.cpp.in with new version AND new name (if necessary)
  - [ ] Update Gitian YML files in contrib/gitian/ to the new version number
  - [ ] Update README.md with new fork table entry (or recommended Shekyl version)
  - [ ] Update contrib/gitian/README.md so that the instructions reflect the current version
  - [ ] Update src/checkpoints/checkpoints.cpp with a recent hardcoded checkpoint
  - [ ] Update src/blocks/checkpoints.dat with ./shekyl-blockchain-export (or equivalent) --output-file checkpoints.dat --block-stop <recent block height> --blocksdat
  - [ ] Update expected_block_hashes_hash in src/cryptonote_core/blockchain.cpp with checkpoints.dat sha256 hash
- [ ] Testnet forked
- [ ] Testnet testing/verification
  - [ ] Run deterministic tuple check across seed nodes:
    - `python3 scripts/check_testnet_genesis_consensus.py --rpc http://SEED_EAST:12029 --rpc http://SEED_WEST:12029 --rpc http://SEED_EU:12029 --check-economy`
  - [ ] Follow rehearsal runbook: `shekyl-dev/docs/TESTNET_MINER.md`
  - [ ] Follow rehearsal gates: `shekyl-dev/docs/TESTNET_REHEARSAL_CHECKLIST.md`
  - [ ] Ledger
  - [ ] Trezor
  - [ ] Release-specific testing
  - [ ] RPC testing/update RPC documentation
  - [ ] PQC transaction validation testing
  - [ ] PQC wallet send/receive testing
  - [ ] PQC multisig group creation (2-of-3, 3-of-5)
  - [ ] PQC multisig signing flow (export request, partial sign, import, broadcast)
  - [ ] PQC multisig scheme downgrade rejection verified
  - [ ] PQC multisig fuzz targets run (4 harnesses, 10M iterations each)
  - [ ] PQC multisig test vectors validated against docs/PQC_TEST_VECTOR_002_MULTISIG.json
  - [ ] ZMQ/RPC consumer regression testing for larger transactions
- [ ] CLI reproducible builds validated
- [ ] Rust/PQC reproducible build inputs documented
- [ ] CLI released
  - [ ] Project downloads page updated
  - [ ] Update hashes.txt on website
  - [ ] Update downloads.yml on website
  - [ ] Update auto-update DNS records on all 5 TLDs (see `shekyl-dev/docs/DNS_CONFIG.md`)
  - [ ] Update redirects on downloads box
  - [ ] Update seed nodes
- [ ] GUI released (if applicable)
  - [ ] Project downloads page updated
  - [ ] Update hashes.txt on website
  - [ ] Update hashes.txt.sig on website
  - [ ] Update downloads.yml on website
  - [ ] Update auto-update DNS records on all 5 TLDs (see `shekyl-dev/docs/DNS_CONFIG.md`)
  - [ ] Update redirects on downloads box
- [ ] Release Announcements
  - [ ] Shekyl announcement mailer notice
  - [ ] Twitter announcement
  - [ ] Reddit announcement
  - [ ] Project website announcement