LP-0178Proposedpqgovernanceupgrademl-dsa-87slh-dsa

LP-178: Governance / Upgrade Keys

Abstract

LP-178 mirrors HIP-0098 into Lux. Routine governance authorisations

(DAO proposals, parameter votes) are issued via Pulsar-87 threshold

ML-DSA-87 (FIPS 204, NIST PQ Cat 5). Cold-root upgrade authorisations

(genesis params, network upgrades, slashing-pause, emergency-stop) are

issued via SLH-DSA-256s (FIPS 205) under a k-of-n multi-signature

scheme with k ≥ ⌈2n/3⌉ + 1 and n ≥ 5 on Lux mainnet.

Mirrored profile


ProfileID:           0x01  (ProfileLuxStrictPQ)
ProfileName:         LUX_STRICT_PQ
HashSuiteID:         SHA3_NIST                (0x01)
IdentitySchemeID:    ML_DSA_65                (0x42)
GovernanceSchemeID:  ML_DSA_87                (0x43)
ColdRootSchemeID:    SLH_DSA_256S             (0x70)
FinalitySchemeID:    PULSAR_M_65              (0x52)
HighValueSchemeID:   PULSAR_M_87              (0x53)
MinSoundnessBits:    128
MinHashOutputBits:   384
RequireTransparent:  true
ForbidPairings:      true
ForbidKZG:           true
ForbidTrustedSetup:  true
ForbidClassicalSNARKs: true
ForbidFallbacks:     true

Lux-specific bindings

luxfi/consensus/protocol/auth/governance.go is the canonical

reference.

Warm governance MUST use Pulsar-87 threshold ML-DSA-87 (via

LP-171's high-value mode). Single-party ML-DSA-87 is permitted for

testnet only.

Cold-root upgrade cadence: rotate at least every 4 years (matches

SLH-DSA-256s long-lived key profile).

Lux mainnet activation REQUIRES cold roots already registered in

genesis; LP-085 / LP-086 classical governance is refused under

LUX_STRICT_PQ.

KAT vectors: luxfi/consensus/protocol/auth/testdata/governance_v1.json.

Compliance

A Lux validator on LUX_STRICT_PQ MUST refuse any governance action

not authorised under LP-178's warm-or-cold path. The LP-085 / LP-086

classical contracts are not deployed on LUX_STRICT_PQ.

References

HIP-0098 — canonical source of truth.
LP-070, LP-071, LP-073, LP-171 — primitive specs.
LP-085, LP-086 — classical baseline (refused under strict-PQ).
NIST FIPS 204, FIPS 205, FIPS 202, SP 800-185, SP 800-57.
luxfi/consensus/protocol/auth/governance.go.