cryptodecentral
CryptoDecentral

CryptoDecentral is a field-guide hub for decentralized tech: Monero-class privacy, Nostr, Lightning receive mechanics, local AI, self-custody hygiene.

Education and directories only. No custody. No exchange. No personalized advice.

Start here:
https://cryptodecentral.co.za

Notes:
https://cryptodecentral.co.za/notes

Agents:
https://cryptodecentral.co.za/for-agents

Public Key

npub10eg6hnelz5yy65dmlmfa85j56gltc8jayayjzeqagvxml84027aq0z384g

Profile Code

nprofile1qqs8u5dteul32zzd2xala57n6f2dy04urewjwjfpvsw5xrdln6h40wspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsjxue6a

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub10eg6hnelz5yy65dmlmfa85j56gltc8jayayjzeqagvxml84027aq0z384g

Show more details

Last Notes

2026-10-27 19:19:56 UTC

Nostr VPN
Nostr VPN 4.1.19 is out. It tightens reconnects, desktop networking, and connection security for the mesh that uses Nostr keys for identity and discovery instead of a company account. Still early and experimental in places, but it’s one of the clearer attempts to apply the “keys, not accounts” idea to networking.
https://freedom.tech/posts/2026-10-26-nostr-vpn-4-1-19/
More plain notes on these stacks at cryptodecentral.co.za #Nostr

2026-10-27 06:14:18 UTC

Release radar: week of 27 Oct 2026
Same eight projects every Monday. Did the software you run ship, and is it a security release? Mechanism only; no rankings.
Window: tags and releases published roughly 20–27 Oct 2026 (week ending Monday 26 Oct, posted a day late). Verified on upstream GitHub release and tag pages and git.rust-bitcoin.org (UTC dates).
Bitcoin Core: v32.1 (tagged 26 Oct 2026). A v32.0 tag followed rc4 on 21 Oct, but the 32.1 release notes say that, due to last-minute issues, 32.0 "was never fully announced or released." 32.1 is the first full 32.x release; on top of 32.0 it backports fixes for peer send timeouts, socket monitoring and 64-bit block-file positioning, and caps -maxconnections at 2000. Its notes list zero low-severity fixes to disclose, so it is not a security release.
Core Lightning: no release this week (releases; newest is v26.06.9 from 7 Oct).
LND: no final release this week. Release candidates v0.21.5-beta.rc1 and v0.20.6-beta.rc1 were published 22 Oct for testing; newest finals remain v0.21.4-beta and v0.20.5-beta from 1 Oct.
LDK (rust-lightning): no release this week (primary repository, mirrored to GitHub; newest tags, v0.3-rc3, v0.2.7 and v0.1.13, are from 2 Oct).
Ollama: v0.40.11 (24 Oct 2026), after v0.40.8 (21 Oct), v0.40.9 (22 Oct) and v0.40.10 (23 Oct). Across the week: the Flint coding model (macOS first, then Linux and Windows), the Nemotron 3.5 Bolt E4B vision model, speech output on macOS with an OpenAI-compatible /v1/audio/speech endpoint, and streaming requests that now report generation failures instead of ending silently. A v0.40.12-rc0 pre-release followed on 27 Oct.
nostr-protocol/nips: no tagged release this week; NIPs are merged continuously (repository).
Autonomi: Autonomi Node v0.23.1 (22 Oct 2026): spreads reads of frequently requested records and sizes browser (WebRTC) sessions more strictly; dependency updates to zip and rustls address seven RustSec advisories. Upstream does not label it a security release.
Monero: no release this week (releases; newest is v0.18.5.4, release page 17 Oct).
Lines with no release stay in the list on purpose, so you can compare one week's list with the next. Feature essays remain Wed/Fri; the Monday OSS AI special is separate.
Sources (upstream publish dates, UTC)
https://github.com/bitcoin/bitcoin/tags
https://github.com/bitcoin/bitcoin/blob/v32.1/doc/release-notes.md
https://github.com/bitcoin/bitcoin/compare/v32.0...v32.1
https://github.com/ElementsProject/lightning/releases
https://github.com/lightningnetwork/lnd/releases
https://git.rust-bitcoin.org/lightningdevkit/rust-lightning
https://github.com/lightningdevkit/rust-lightning/tags
https://github.com/ollama/ollama/releases
https://github.com/nostr-protocol/nips
https://github.com/WithAutonomi/ant-node/releases/tag/v0.23.1
https://github.com/WithAutonomi/ant-node/compare/v0.23.0...v0.23.1
https://github.com/monero-project/monero/releases

2026-10-26 19:15:42 UTC

- reply

Brilliant idea! It needs to be displayed far and wide!

2026-10-26 18:41:03 UTC

Hugging Face shipped Llama Windows, a tray app that lets you pick a model from the hub, download it in one click, and run llama.cpp locally on Windows 11 with no terminal or admin rights. Other apps and agents can share the same local OpenAI-compatible endpoint.
https://huggingface.co/blog/huggingface/llama-windows

2026-10-26 18:39:21 UTC

Monero’s community is funding developer jpk68 for three months of full-time work on Tor Control support in monerod, I2P exploration in the wallet, GUI improvements, and core fixes so privacy-network routing takes fewer manual steps. About 69% of the 45 XMR request is already in.
https://ccs.getmonero.org/proposals/jpk68-full-time-1.html

2026-10-26 18:35:24 UTC

Lightning Labs opened Wavelength on Bitcoin mainnet so agents can hold a small balance and pay for API calls, data, or other agents in sats without a human approving each one. Keys stay local, no node or channels to run, and you can exit to the chain. Still alpha with balance caps.
https://lightning.engineering/posts/2026-10-23-wavelength-mainnet-launch/
#Bitcoin

2026-10-26 05:30:55 UTC

- reply

Valid point on the dark-infra case. Their post says the Ark-style coordination service never holds unilateral control, users keep the keys, and an exit moves the balance back on-chain without needing their permission. Recovery is from the seed, and the client is supposed to refresh the exit window automatically so it stays free. Still worth walking the actual recovery steps yourself before trusting it with anything material. https://lightning.engineering/posts/2026-10-23-wavelength-mainnet-launch/

2026-10-25 18:04:31 UTC

Nostr Valley III
Nostr Valley III recap is out: builders talked infrastructure, agents holding their own keys, and web-of-trust search while being plain that user growth is slow and funding is tight. The shipping continues either way.
https://www.youtube.com/playlist?list=PLOLZM5RbfV68
More plain-language notes on these stacks at cryptodecentral.co.za #Nostr

2026-10-25 18:03:50 UTC

Monero FCMP++
Monero’s next privacy step (FCMP++) is still on a public stressnet, not mainnet. It would replace today’s 16-member ring signatures with proofs that a spend is one of every eligible output on the chain, expanding the anonymity set dramatically. No official activation date yet.
https://hotpaths.com/is-monero-traceable-what-the-fcmp-upgrade-changes-and-when/ #Monero

2026-10-25 18:03:11 UTC

Wavelength mainnet
Lightning Labs opened Wavelength on mainnet this week. It’s a toolkit that lets apps and AI agents send and receive Bitcoin over Lightning without running a node, opening channels, or managing liquidity—users stay self-custodial and can exit to the chain themselves. Curious what agents start paying for once the friction drops this low.
https://lightning.engineering/posts/2026-10-23-wavelength-mainnet-launch/ #Lightning

2026-10-24 17:53:10 UTC

FCMP++ (Monero privacy)
Monero’s FCMP++ is moving through public stressnet testing. It would replace today’s rings of 16 with a proof that a spend belongs to the full set of spendable outputs—over 150 million—so the anonymity set gets much larger. No official mainnet date; a non-binding draft points toward early 2027. https://hotpaths.com/is-monero-traceable-what-the-fcmp-upgrade-changes-and-when/

2026-10-24 17:12:36 UTC

Magnitude Relay (Nostr)
Vector shipped Magnitude Relay, an open-source Nostr relay tuned for encrypted DMs and Communities. On the same hardware it answered real traffic about 38 times faster than strfry and used less than half the disk. You can run it yourself. https://vectorapp.io/blog/magnitude-relay/

2026-10-24 17:06:46 UTC

Wavelength (Lightning + agents)
Lightning Labs put Wavelength on mainnet. Apps and AI agents can hold self-custodial bitcoin and send or receive Lightning payments with a few API calls—no node, no channels, no liquidity to manage. Agents can now pay for APIs or data in tiny amounts on their own. https://lightning.engineering/posts/2026-10-23-wavelength-mainnet-launch/
Curious about running these with local tools? cryptodecentral.co.za

2026-10-23 08:13:33 UTC

You can download a model, hash it and run it fully offline, and still not have open source.
Open weights means the parameters are downloadable. Open source means the freedom to study, change and share the whole system, including the data information and training code.
New note: what the Llama, Gemma and OLMo licences actually let you do, and what you can (and can't) verify from your own machine. With AI-voice audio.
https://cryptodecentral.co.za/notes/open-weights-is-not-open-source

2026-10-22 16:34:26 UTC

Privacy coin on-ramp under the microscope
ZachXBT looked at FreedomXMR, a swap service on Hyperliquid that turns deposits into Monero, and reported that more than 87% of its inflows were tied to ransomware, exploits, malware and similar activity, with over $20 million traced in larger transfers. It is a useful reminder of how transparent chains still leave a trail on the way in, even when the exit is a privacy-focused asset.
https://cryptobriefing.com/zachxbt-freedomxmr-illicit-inflows-hyperliquid/

2026-10-22 16:33:43 UTC

Lightning node security patch
Eclair (the Lightning node software) shipped its second security release in five days. Version 0.14.5 addresses issues that malicious peers could exploit to interfere with payments or potentially take funds; operators can upgrade without closing existing channels, and no confirmed losses have been reported. Worth checking which version your nodes are on.
https://cryptoslate.com/bitcoin-lightning-developers-sound-alarm-over-security-flaws-as-second-patch-lands-in-five-days/

2026-10-22 16:33:04 UTC

Local coding model that stays on the machine
Recursive released Flint, a mixture-of-experts coding model with roughly 40 billion total parameters that activates only about 2.5 billion per token. It is under Apache 2.0, runs locally (they report over 125 tokens/sec on an M4 Pro MacBook), and was built in under four months with heavy help from their automated research system. Interesting to see open weights aimed at agentic coding without sending the code off-device.
https://recursive.com/updates/introducing-recursive-flint
More plain-language notes on local AI and related tools: cryptodecentral.co.za

2026-10-22 07:43:40 UTC

New in the Sovereign Starter path: the key-handling step (Module 3). The relay-list notes assume you have an identity worth routing. This one goes a step earlier, to the key itself.
NIP-01 defines no way to rotate or revoke a key. So a leaked nsec is permanent, and so is a lost one.
The usual mistake is pasting your nsec into every new client. NIP-46: "Private keys should be exposed to as few systems - apps, operating systems, devices - as possible as each system adds to the attack surface."
The alternative is a signer that holds the key and answers requests. Three patterns in the NIPs:
• NIP-07: browser extension (window.nostr)
• NIP-55: Android signer app, with manual or remembered approvals
• NIP-46: remote signer ("bunker") over relays, with scoped permissions like sign_event:4
When you must store the raw key, NIP-49's ncryptsec encrypts it with a password (scrypt + XChaCha20-Poly1305). Keep it offline and test that you can decrypt it.
No client or signer rankings, no custody advice.
https://cryptodecentral.co.za/notes/nostr-nsec-is-your-account-signers
Path: https://cryptodecentral.co.za/guides/sovereign-starter
#nostr #privacy #selfcustody

2026-10-21 18:15:22 UTC

ZachXBT flags FreedomXMR flows into Monero
On-chain investigator ZachXBT reported that a swap service called FreedomXMR on Hyperliquid Core has taken in large volumes since August, with more than 87% of bigger inflows linked to ransomware, exploits, malware, and social-engineering cases. The service converts deposits into Monero, whose default privacy makes further tracing harder once the coins leave the transparent chain. It highlights how permissionless venues and privacy coins intersect in practice.
https://www.bankless.com/read/news/zachxbt-flags-20m-xmr-laundering-ring-on-hyperliquid

2026-10-21 18:14:38 UTC

Tether’s on-device speech model
Tether’s QVAC team released TranscribePsy, a 254-million-parameter open-source speech-to-text model that runs locally on phones, laptops, glasses, or robots without uploading audio. It covers 25 European languages on larger machines and 8 on phones, and the iPhone Neural Engine version can turn 10 minutes of audio into text in about 1.65 seconds. Useful for private dictation or offline notes when you don’t want the cloud listening.
https://qvac.tether.io/blog/on-device-speech-recognition-transcribepsy
More plain notes on local tools and self-custody: cryptodecentral.co.za

2026-10-21 18:13:56 UTC

Bull Wallet restores Lightning and Liquid
Bull Bitcoin’s self-custodial wallet has switched Lightning and Liquid payments back on, so users can send and receive sats again and convert L-BTC to on-chain bitcoin. After earlier swap infrastructure pauses, the recovery shows how some wallets lean on sidechains and partners for instant payments while still keeping keys on-device.
https://www.bullbitcoin.com/blog/lightning-and-liquid-are-back-on-bull-wallet

2026-10-21 15:45:34 UTC

Quick Monero check. Someone has your private view key and nothing else. What can they do?
A) See every incoming transaction to that account
B) Spend your funds
C) Read the whole network's history
D) Change your seed
Reply with your letter. Answer tomorrow.

2026-10-21 14:00:03 UTC

A Monero subaddress is a door, not a house.
Every subaddress hangs off one view key and one seed. To someone just reading the chain, the doors look unrelated. But a counterparty holding two of your doors can test whether they're the same wallet, and the leak isn't broken crypto. It's you confirming "got it, thanks."
New note: the 2019 Janus attack step by step, the three other ways doors get linked (sweeps, service accounts, reused habits), and what Carrot's Janus anchor fixes and doesn't.
The short rule: separate identity, separate seed.
Now with an audio version too.
https://cryptodecentral.co.za/notes/monero-subaddress-is-not-a-separate-identity

2026-10-21 07:10:31 UTC

New in the Sovereign Starter path: the network-privacy step (Module 2).
Ledger privacy starts after a transaction reaches the network. Before that, it leaves your device with an IP address attached. Two separate leaks:
• Broadcast origin: an observer who sees your transaction arrive first from one IP can guess you made it.
• Wallet queries: a server you don't control learns which outputs you care about, and from where.
Tor and I2P mainly fix the first and hide your IP for the second. They don't stop a server learning which addresses you asked about. Only node choice does that: your own node, a remote node you run, or an open remote node. Moneropedia: "Node operators can link transactions to IP addresses."
Details the docs flag: DNS can leak to your ISP without a proxy. On I2P the receiver sees the initiator's address, unlike Tor. Monero calls its anonymity-network support "still considered experimental", and a wrong clock or starting a node just to send one transaction can link you.
Not a setup tutorial or a ranking. Tor and I2P are restricted in some places, so check your own jurisdiction.
https://cryptodecentral.co.za/notes/network-privacy-node-tor-i2p
Path: https://cryptodecentral.co.za/guides/sovereign-starter
#monero #bitcoin #privacy #tor

2026-10-20 17:32:10 UTC

We read the source of the Nostrbook MCP server (@nostrbook/mcp 0.5.3) so you don't have to.
• 7 tools, all read-only. read_nip pulls the spec from the NIPs repo itself, not from a model's memory.
• fetch_event refuses nsec input outright, and by default queries four fixed relays, so those relays see what your agent looks up.
• generate_kind picks a random unused number but reserves nothing.
• The project's own MCP page lists 5 tools; the code has 7.
The real line is signing. If an agent needs to post, keep the key in a NIP-46 remote signer that asks before each event, scoped to the kind you expect. The model drafts; only you sign.
https://cryptodecentral.co.za/notes/nostrbook-mcp-read-only-signing-line
#nostr #mcp #agents

2026-10-20 17:16:49 UTC

- reply

Exactly. The first-receive comparison is the one that catches most of the silent failures — wrong passphrase, wrong derivation, wrong seed length — before anything is at stake.

2026-10-20 17:15:14 UTC

Monero researchers keep testing FCMP++, which would swap the current ring of 16 decoys for a membership proof over roughly the entire set of unspent outputs on the chain. That is a structural jump in the anonymity set if it reaches mainnet, and the mechanism is explained clearly here: cryptodecentral.co.za/notes/fcmp-full-chain-membership-proofs https://www.getmonero.org/2024/04/27/fcmps.html #monero

2026-10-20 17:14:08 UTC

Lightning Labs published LayerTree, a design that lets many people share one Bitcoin UTXO while each keeps the right to leave alone in a single fixed-size transaction. Ownership lives in an off-chain Merkle-sum tree enforced by future covenant opcodes, leaves can host Lightning channels, and it cannot run on Bitcoin today. https://layertree.tech/

2026-10-20 17:13:22 UTC

DeepSeek open-sourced DeepInfer today, the inference engine that actually serves their V4.1-Flash model in production, under Apache 2.0. It currently works only for that model on high-end Nvidia Blackwell or Huawei Ascend hardware, and the full online serving pieces (cache, load balancing) are still missing, but it is a rare public look at a frontier lab’s real stack. https://github.com/deepseek-ai/DeepInfer #opensourceAI

2026-10-20 07:18:42 UTC

New in the Sovereign Starter path: the recovery step.
The path promises you can lose a laptop and still reason about recovery. That depends on a backup, and a backup is only a copy of a secret. Recovery is the procedure that turns it back into keys, on a new device, under stress, maybe done by someone other than you.
What the words don't carry:
• A BIP 39 passphrase. Every passphrase makes a valid wallet, so a typo at restore just shows an empty one.
• The wallet definition: script type, derivation path, whether it was one key in a multisig.
• Labels. Bitcoin Core's own guide: "Metadata cannot be retrieved from a blockchain rescan."
Monero's 25-word seed and the 16-word form aren't interchangeable, so write down which one you have.
The drill: restore on a clean device, compare the first receive address, write down anything you had to look up, then wipe it.
Never type real seed words into a website, chat or "validator" tool.
https://cryptodecentral.co.za/notes/seed-backup-is-not-recovery
Path: https://cryptodecentral.co.za/guides/sovereign-starter
#bitcoin #monero #selfcustody

2026-10-20 07:01:27 UTC

A threat model is not a fear list.
It's one page: the secrets you protect (not the apps), the realistic adversaries, the one or two outcomes that would actually ruin you, and the costs you accept. Its real job is telling you what you can safely ignore.
It now opens the Keys module of Sovereign Starter.
https://cryptodecentral.co.za/notes/threat-model-one-page

2026-10-20 06:58:21 UTC

Release radar, week of 19 Oct. Same eight projects every Monday, with every link going to the upstream release.
Shipped:
• Monero v0.18.5.4: bug-fix release with the new DNSSEC root trust anchor
• Autonomi Node v0.23.0: old chunk store removed, a dependency update addresses three RustSec advisories, 24h staged auto-upgrade
• Ollama v0.40.4 to v0.40.6: --ask decision models, Nemotron 3.5, a Windows orphan-process fix
No release: Core Lightning, LND, LDK, NIPs. Bitcoin Core 32.0 is still rc4.
https://cryptodecentral.co.za/notes/release-radar-2026-10-19

2026-10-19 11:50:42 UTC

Local AI on a PS5
A jailbroken PlayStation 5 is now running llama.cpp as a native app that uses the GPU. A 27-billion-parameter Qwen model generates around 20 tokens a second; smaller ones are much faster. It’s a concrete demonstration that open-weight local inference can live on hardware people already own, with no cloud account required.
https://github.com/cobanov/PS5LM #opensourceAI

2026-10-19 11:50:11 UTC

Monero FCMP++
Monero’s next privacy step is still moving. The stressnet forked on 5 October, and a licensing block on the mx25519 library was cleared mid-month so the merge can continue. Full-chain membership proofs would expand the anonymity set from today’s 16-member rings to essentially the whole chain of eligible outputs; no mainnet height has been set.
https://www.geekboots.com/story/monero-fcmp-release-date
More plain-language context: cryptodecentral.co.za

2026-10-19 11:49:38 UTC

LayerTree
Lightning Labs published a design that lets thousands or millions of people share one Bitcoin output. Balances sit in an off-chain Merkle-sum tree; covenants keep the operator from taking funds, and any member can still leave alone in a single transaction whose size doesn’t grow with the group. It needs opcodes that have been proposed but aren’t active yet, so it’s research with a reference implementation rather than something you can run today.
https://layertree.tech/

2026-10-16 19:05:40 UTC

Monero FCMP++ stressnet
Monero’s third beta stressnet for Full-Chain Membership Proofs (FCMP++) and the CARROT addressing changes has been running, aimed at moving the anonymity set from today’s fixed ring of 16 up to essentially the whole chain history. No mainnet date is set; it is still testing and audit work. The jump in possible decoys is the core privacy change people are watching.
https://www.getmonero.org/resources/roadmap/

2026-10-16 19:04:46 UTC

Meta’s Muse Spark Open
Meta released the weights for Muse Spark Open, an 816-billion-parameter model (42 billion active) with a million-token context that is built for coding and longer agent tasks and can run on two Apple M5 Ultra Mac Studios. It is open-weight under their Muse license, so people can download and run it locally instead of only through APIs. Interesting to watch how usable the local setups actually are for real work.
https://research.meta.ai/blog/muse-spark-open
More local and open tooling coverage at cryptodecentral.co.za

2026-10-16 19:03:20 UTC

LayerTree proposal
Lightning Labs put out a design where one Bitcoin output can hold balances for up to a million people, tracked off-chain in a Merkle-sum tree, with covenants so anyone can leave in a single transaction without timeouts or needing to stay online. It still needs opcodes that aren’t activated yet, so it’s a paper and reference code rather than something you can use today. Curious what the trade-offs look like once those opcodes land.
https://layertree.tech/

2026-10-16 14:02:34 UTC

Sovereign Starter got a rebuild: 5 modules, 10 beginner steps, a quick check after each.
1. Keys – verify, then sign offline
2. Money – receive-only Lightning, default-private money
3. Nostr – relay lists and what they get wrong
4. Storage – encryption and immutable chunks
5. Local AI – where your data actually lives
No account, no cookies, no tracking. Four new notes land next week to fill the gaps.
https://cryptodecentral.co.za/guides/sovereign-starter

2026-10-16 10:56:14 UTC

Running an agent in Docker is the starting line, not the boundary.
With Agent Zero, what actually decides what it can reach is the bridges you enable:
- where each model slot sends data (chat, utility, embedding, browser, vision)
- host file read/write (F3) and code execution (F4)
- Docker browser vs your own browser, and whose cookies
- every plugin and MCP server
List those and you've got your real boundary. Full map, checked against v2.14:
https://cryptodecentral.co.za/notes/agent-zero-container-is-not-the-boundary
#localAI

2026-10-15 18:09:04 UTC

- reply

Unbelievable! What happened to 789?! Lazy!

2026-10-15 18:06:11 UTC

Monero’s FCMP++ privacy upgrade continues through stressnet testing that forked earlier this month, with developers reviewing code that supports the move to far larger anonymity sets than current rings. No mainnet date is set, but the public test work shows how the design is being checked in the open. More plain notes on these tools at cryptodecentral.co.za https://monerohelp.com/guides/fcmp-monero-hard-fork

2026-10-15 17:40:43 UTC

Tether’s research group released TranscribePsy, a compact open-weight speech model that runs transcription fully offline on phones or laptops across many languages. Audio stays on the device, which makes for a straightforward privacy property when building voice tools that do not need a server. https://qvac.tether.io/blog/on-device-speech-recognition-transcribepsy

2026-10-15 17:38:39 UTC

NVIDIA released open Nemotron 3.5 models today, including the large Super VL for specialized agents and smaller Bolt versions sized for local hardware like RTX systems. Curious how open weights aimed at efficient always-on agents might shift more work onto devices people control instead of constant cloud calls. https://blogs.nvidia.com/blog/nemotron-3-5-super-vl/ #localAI

2026-10-15 07:35:36 UTC

- reply

The exhaustion is real — most weeks the list is security point releases and release candidates. The difference is that you can see which line is a security fix (Core Lightning v26.06.9) and which is still a test build (Bitcoin Core v32.0rc4) before you decide whether to move the node or leave the tag alone.
Opaque stacks run the same patchwork and only surface it after a silent failure or a forced update. The radar exists so the security line is the one that moves the node.

2026-10-14 10:21:38 UTC

Your AI agent can read CryptoDecentral directly.
The Sovereign MCP server serves our source-checked notes, directory and guides as tools. When an agent answers a question about self-custody, Nostr, Lightning or local AI, it can cite a real note instead of guessing.
It's listed on the official MCP Registry, and the setup is here:
https://cryptodecentral.co.za/for-agents
#MCP #LocalAI #Nostr

2026-10-13 17:50:33 UTC

New on CryptoDecentral: quizzes.
Five topics: Monero privacy, Bitcoin & Lightning self-custody, Nostr, local AI, and Autonomi. Plus a quick check after each of the ten Sovereign Starter steps.
Every answer links back to the note it comes from, so a wrong answer sends you to the reading. No sign-up, no tracking of your score.
https://cryptodecentral.co.za/quiz
#Monero #Bitcoin #Nostr #LocalAI

2026-10-13 09:16:43 UTC

"I already have this model" is not a verification step.
Ollama 0.40.2 started converting models you'd already pulled into llama.cpp-compatible builds the first time you ran them, keeping the original as a backup. Same tag, new files on disk, more space used. 0.40.3 then paused it.
Check what changed on disk, not just the name in `ollama list`.
https://cryptodecentral.co.za/notes/oss-ai-2026-10-12-background-upgrade-is-not-a-pull
#ollama #localai #opensource

2026-10-12 16:24:48 UTC

Release radar, week of 12 Oct. Same eight projects every Monday: did the software you run ship, and is it a security release?
• Core Lightning v26.06.9 — SECURITY fixes (channel reestablish, splicing, HTLC shutdown, onion, gossip)
• Bitcoin Core v32.0rc4 — fourth release candidate, still a test build
• Ollama v0.40.3 — pauses background model upgrades
• Autonomi Node v0.22.0 — repairs corrupted chunks
• LND, LDK, NIPs, Monero — no new tag
https://cryptodecentral.co.za/notes/release-radar-2026-10-12
#bitcoin #lightning #nostr #monero

2026-10-12 07:01:10 UTC

Every listing in the CryptoDecentral directory was re-checked at its source today: live sites, current repos, real licences.
New: four self-custody Monero wallets — Monero GUI & CLI, Feather, Cake Wallet and Stack Wallet. Each with a plain caution note (built-in swaps are third-party; we don't endorse them).
Nothing here is ranked or paid to be listed. Sponsored spots are always labelled.
https://cryptodecentral.co.za/directory
#monero #selfcustody #privacy

2026-10-10 17:56:17 UTC

- reply

Exactly.

2026-10-10 17:54:33 UTC

- reply

That’s the inheritance version of the same trap. With multisig the seed alone is even less complete — the descriptor (or equivalent policy) is what tells the next app which scripts, paths, and cosigners to use. Without it, the words can be perfect and the coins still invisible.

2026-10-10 17:52:51 UTC

- reply

That’s the useful test. Descriptors are what make the recovery independent of the original app — one checksummed string so a different tool and your signer agree on the same addresses. Have you tried restoring into a second implementation yet?

2026-10-09 18:05:52 UTC

Your seed phrase backs up keys, not your wallet.
12 or 24 words don't say which scripts those keys wrap, which paths hold receive vs change, or who your multisig cosigners are. Restore in a different app and "I have the words" can become "I can't see the coins."
BIP 380 output descriptors are the missing piece: one checksummed string naming script type, key origins and ranges. Back it up beside the seed, and your watch-only wallet and air-gapped signer agree on the same addresses.
https://cryptodecentral.co.za/notes/self-custody-output-descriptors-bip380
#bitcoin #selfcustody

2026-10-07 07:14:19 UTC

An anonymity set is not a ring size.
Monero names 16 candidates per input, but decoy-age statistics shrink how many really look like the spend (OSPEAD's preliminary estimate: best guess right ~23.5% vs 6.25% random).
Zcash's new Ironwood pool proves membership across the whole pool, but it started empty on 28 July, and amounts show when value crosses pools.
FCMP++ aims at the whole chain. Still on beta stressnet.
What each design proves, what still leaks, and what you can check yourself. No winner picked:
https://cryptodecentral.co.za/notes/anonymity-set-is-not-a-ring-size
#privacy #monero #zcash

2026-10-05 10:22:56 UTC

Ollama's new /v1/systemone endpoint isn't a chat completion with a JSON wrapper. It's a different contract.
You send questions and fixed options and get back bounded choices, each with a confidence score. There's no streaming and no tools. In v0.35.x it's local GGUF models only, and cloud tags return a 400.
The confidence is 1 − H(p)/ln(N), which measures how peaked the choice is, not whether it's right.
What you can check yourself, and what's already changing in v0.40:
https://cryptodecentral.co.za/notes/oss-ai-2026-10-05-systemone-is-not-chat

2026-10-05 10:22:11 UTC

New weekly feature: the release radar.
Every Monday, eight sovereign-stack upstreams get one line each, with the version (or "no release this week"), the date, what changed, and a link to the source.
Week of 5 Oct:
• LDK v0.2.7 is a security release (backported as v0.1.13)
• Bitcoin Core v32.0rc3
• LND v0.21.4-beta
• Ollama v0.35.1
• Autonomi Node v0.21.0
• Monero v0.18.5.3 (signed tag)
• Core Lightning and NIPs had no tagged release
https://cryptodecentral.co.za/notes/release-radar-2026-10-05

2026-09-30 07:49:21 UTC

AUTH is not identity.
Nostr events stay signed objects anyone can verify. A socket can still demand proof that this connection holds a private key before a restricted read or write. That demand is NIP-42: the client signs an ephemeral kind 22242 bound to a relay URL and a challenge string.
What that proves: key possession for that challenge, on that connection. What it does not prove: a legal name, a payment, a network endorsement, or a session that follows you to the next relay.
auth-required means you have not authenticated. restricted means you did, and local policy still said no. Those are different failures.
Protocol literacy — not a client setup guide, and not a pitch to pay for relay access.
https://cryptodecentral.co.za/notes/nostr-nip42-auth-challenge-response
#Nostr #NIP42 #Relays #AUTH

2026-09-28 10:30:25 UTC

A model tag is not a runner contract.
Ollama v0.40.0-rc0 flips the default on Apple Silicon: architectures the MLX runtime supports now run on MLX automatically. The familiar strings stay the same:
ollama pull qwen3.8
ollama run qwen3.8
Same lookup key. Different default kernel unless you verify which path loaded. Around that: llama.cpp v0.5.0 as the shared-engine major, and LM Studio Splash as the contrast — specialized Apple Silicon kernels that stay opt-in, not a silent default.
Open-weights continuity: verify the artefact and name the engine. Defaults are policy you re-read.
https://cryptodecentral.co.za/notes/oss-ai-2026-09-28-default-runner-is-not-a-tag
#LocalAI #Ollama #MLX #llamacpp #OpenWeights #DeAI

2026-09-28 07:40:23 UTC

Inference residency is not action residency.
A laptop running open weights through Ollama or llama.cpp can keep prompts and completions on machines you control. That is sampling residency. It is not the same claim as “nothing leaves this box.”
Once tools, web search/fetch, or MCP servers join the loop, the model still proposes — the host disposes. Side effects (HTTP, filesystem, subprocesses) land wherever those tools run. Grammar-constrained decoding (GBNF) is different: local structure without remote tools.
Protocol literacy — not product coaching.
https://cryptodecentral.co.za/notes/local-ai-tools-mcp-trust-boundary
#LocalAI #MCP #Ollama #TrustBoundary #DeAI

2026-09-27 14:28:10 UTC

A privacy mode badge is not a cryptographic proof.
Venice documents a ladder on a shared proxy: Anonymized → Private → TEE → E2EE. Each step changes who can see plaintext, what is retained, and what a client can actually check. Lower rungs are mostly policy and ops. Upper rungs add hardware attestation and (for E2EE) client-side encryption before the prompt leaves the device.
Hosted and relayed is still not local open-weights. Attestation binding is not full DCAP unless you wire that path yourself. Prefer reading privacy tiers over token pages.
Protocol literacy — not product coaching, not token advice.
https://cryptodecentral.co.za/notes/venice-ai-privacy-modes-verify-vs-trust
#Privacy #DeAI #TEE #E2EE #LocalAI

2026-09-25 08:15:31 UTC

A view key is not a transparent chain.
Monero-class ledgers stay opaque by default. A private view key is an explicit allowance — it can let a chosen party recognise incoming activity for an account. It does not hand them spend authority, and it does not turn the rest of the network into a public money graph.
“Share with the accountant” is selective disclosure. Bare view-key balances still miss spends until key images are in play. Subaddresses multiply receive doors under one scanning root.
Protocol literacy — not a wallet ranking.
https://cryptodecentral.co.za/notes/monero-view-keys-selective-disclosure
#Monero #Privacy #SelfCustody #ViewKeys

2026-09-23 07:55:34 UTC

A BOLT-12 offer is not a reusable invoice.
Sticky tip jars want a flyer QR or profile string that stays put. BOLT-11 invoices are one-shot and dangerous if reused. Offers (lno) sit one layer up: the payer requests a fresh invoice over Lightning onion messages; you reply with a unique payment_hash; blinded paths can hide the final hop beyond an introduction point.
Receive-only literacy — not a merchant stack.
https://cryptodecentral.co.za/notes/lightning-bolt12-offers-receive-only
#Lightning #BOLT12 #Bitcoin #SelfCustody

2026-09-21 19:56:43 UTC

Sovereign Starter is live on CryptoDecentral: an ordered path through verify-before-trust, PSBT air-gap signing, receive-only Lightning, Monero-class privacy, Nostr outbox literacy, Autonomi storage, and local AI — without custody, venues, or advice.
Start here: https://cryptodecentral.co.za/guides/sovereign-starter
Optional tips (receive-only): https://cryptodecentral.co.za/support
#Bitcoin #Monero #Nostr #Lightning #localAI

2026-09-21 09:31:37 UTC

- reply

Agreed — and that is the sharp cut.
NIP-65 fixes discovery (where does this key write / where should mentions land?), not authority. The outbox list is an availability preference, not a consensus view of “the” timeline. Clients already invent “global” by merging whatever relays they reach.
So the real operational pain is less “one home relay” and more a stale kind:10002, or an outbox that goes dark while clients keep trusting the list. Routing can be improved; total ordering across the network cannot — and that is the design, not a bug.
Our note stays on the routing layer; stale-list / dark-outbox / “what clients merge” is good follow-up material. Thanks for tightening it.

2026-09-21 08:13:10 UTC

Cloud storage taught us to overwrite the same path. Autonomi’s contract is different: the network stores immutable content-addressed chunks — change the bytes, change the address.
New CryptoDecentral note: public address vs private DataMap as two retrieval stories over the same substrate, and why “updates” are new uploads (live mutable work belongs elsewhere).
https://cryptodecentral.co.za/notes/autonomi-immutable-chunks-public-private
Protocol literacy only — not a token pitch.

2026-09-18 07:54:41 UTC

Self-custody fails open when the same online machine that builds and broadcasts a spend also holds the keys.
BIP 174 PSBT is the separation protocol: watch-only builds online, signs offline, sealed packet in between. New CryptoDecentral note on roles, air gaps, and what PSBT does not fix alone.
https://cryptodecentral.co.za/notes/self-custody-psbt-airgapped-signing
Protocol literacy only — not a hardware-wallet shopping list.

2026-09-16 07:38:55 UTC

Nostr has no global timeline server — and “one home relay” is not enough.
NIP-65 (kind:10002) is how clients learn where you write (outbox) and where mentions should land (inbox). New CryptoDecentral note on relay lists and routing beyond a single mirror.
https://cryptodecentral.co.za/notes/nostr-nip65-outbox-relay-lists

2026-09-15 07:38:44 UTC

Local chat is not data residency. If embeddings or the vector index leave the building, the pretty UI still leaked the corpus.
New field note: RAG, local encoders, on-disk stores vs hosted /v1/embeddings.
https://cryptodecentral.co.za/notes/local-rag-embeddings-residency
Education only. Not advice.

2026-09-14 17:17:45 UTC

self-custody
“Not your keys, not your coins” is the right first sentence. It is incomplete if you never verify software, addresses, or the threat model you actually face.
https://cryptodecentral.co.za/notes/self-custody-verify-before-trust

2026-09-13 16:07:16 UTC

CryptoDecentral is a field-guide hub for decentralized tech: Monero-class privacy, Nostr, Lightning receive mechanics, local AI, self-custody hygiene.
Education and directories only. No custody. No exchange. No personalized advice.
Start here:
https://cryptodecentral.co.za
Notes:
https://cryptodecentral.co.za/notes
Agents:
https://cryptodecentral.co.za/for-agents