[BernardLowe]

The public tools use malt.authentication/5, but the previous SDK and bundled WASM still targeted Core rc.4 and rejected current proofs. This completes the positional migration by pinning SDK commit 735c894cb7dd4bbdfa7032c75f48f5f23820fd14, bound to published Core v0.0.10, and copying its verified browser assets unchanged.

• Replace the v2 corpus with the exact Core v3 corpus and update asset provenance and digests.
• Align query, candidate, batch and receipt profiles; document root-only metadata, element-index ranges and CID-bound UnixFS geometry.
• Accept metadata entries in imported proof JSON and run tests/builds for pull requests. Pages publication remains limited to main.

Validation:

• Clean npm ci, npm run sync:verifier, and full npm test: content checks, browser-query/import state checks, 20 real WASM conformance vectors and hostile input checks passed.
• BASE_PATH=/malt-web/ npm run build passed.
• Chromium production preview: all 20 Core vectors verified with their expected outcomes through the real Worker; local metadata/range JSON import and KZG/IPA Resolve requests using Core fixtures passed.
• SDK assets and Core corpus matched their exact source revisions byte-for-byte; git diff --check passed.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.