Release 4.5.6

SN34's earlier identity: Filed under SN34 from a source its on-chain identity named before. The identity has changed and no longer names this source, so the item is not listed as news of the subnet on SN34 now.

C2PA trust anchor validation for c2pa-python >= 0.29.0 Background c2pa-python==0.29.0 (released March 17 2026) changed c2pa-rs so that trust anchor checking is always enforced by default. Any certificate not chaining to a root CA in c2pa-rs's built-in store fires signingCredential.untrusted and hard-fails validation. We had pinned c2pa-python>=0.25.0,<0.29.0 as a short-term workaround. This restores previous behavior but leaves a cert-forgery gap: our code only string-matched on the issuer field, which an attacker could fake with a self-signed cert set to "Stability AI Ltd". What this PR does 1. Extracts and saves trust anchor PEM files Scanned miner-submitted media in /workspace/.cache/sn34 (88k entries, source_type = 'miner') to find one sample file per AI provider. Extracted the full DER certificate chains embedded in each file's C2PA JUMBF box and saved them to gas/verification/trust_anchors/. All major providers turned out to use private or non-CAI root CAs that are not in c2pa-rs's built-in store: Provider Cert chain root File Stability AI GlobalSign Root CA - R6 (via GlobalSign GCC R6 SMIME CA 2023) stability_ai.pem Runway (pre-Gen4) GlobalSign Root CA - R6 (same intermediate) runway.pem Runway Gen4 CN=Stability AI, O=Stability AI, C=US (private self-signed) runway_gen4.pem Black Forest Labs GlobalSign Root CA - R6 (same intermediate) black_forest_labs.pem Microsoft CN=Microsoft Supply Chain RSA Root CA 2022 (private self-signed) microsoft.pem OpenAI (via Truepic) CN=Truepic WebClaimSigningCA chain openai_truepic.pem Adobe CN=Adobe Product Services G4 chain adobe.pem Google CN=Google C2PA Root CA G3 (fetched from pki.goog/c2pa/root-g3.crt) google_c2pa.pem GlobalSign Root CA - R6 was sourced from the certifi bundle. Google's C2PA Root CA G3 was fetched directly from Google's PKI at http://pki.goog/c2pa/root-g3.crt. 2. Updates c2pa_verification.py Three additions at the top of the file, zero changes to existing verification logic: _load_trust_anchors() — concat

Read the release notes on GitHub ↗

Taosis indexes announcements, articles, posts and releases about Bittensor subnets from their own channels and keeps a record of each. The text above is the source’s; the figures are read from the chain by Taosis.