Security Fixes:
- Remove blinding factor from Commitment struct (was leaking secrets)
- Add per-installation unique salt for key derivation (was hardcoded)
- Add prominent security warnings to zkproofs.rs (demo-only crypto)
- Document that ZK implementation is for API demonstration only
Performance Fixes:
- Fix memory leak: category_embeddings now uses HashMap instead of Vec
- Add LRU-style eviction at 10k embeddings capacity
- Prevents unbounded memory growth that would crash browser
Code Quality:
- Add max_embeddings configuration option
- Better documentation for data structures
- Add security audit report and optimization guides
⚠️ IMPORTANT: The ZK proof cryptography is simplified for demonstration.
For production use, replace with bulletproofs, curve25519-dalek, merlin crates.
- Implement comprehensive tests for adaptive learning mechanisms including MicroLoRA and SONA in learning_tests.rs.
- Introduce tests for bio-inspired neural components such as HDC, BTSP, and Spiking Neural Networks in nervous_system_tests.rs.
- Create common utilities for random vector generation, vector assertions, and softmax calculations in mod.rs.
- Ensure all tests validate expected behaviors and maintain numerical stability.
