[danielgorgonha]

What & why

Second step of the fee release (#847): each device tells the vault's server, when it registers, from which block height its build accepts the lower network fee (ZIP 2009), and the server keeps that per seat. Nothing changes in what a payment pays yet: the next step reads these reports to decide, per vault, whether every seat accepts the lower fee.

Why one piece: the field only works end to end. The height comes from the device's own fee table (konclave-seal), the browser sends it (the wasm export and ui/src/device-registration.ts), and the server stores and reads it (/api/vault/devicekey, orchestrator/src/helper.rs). Split, each half would ship code with no producer or no consumer, and the version tests below need both sides in one change.

• konclave-seal: Table::fee_from() answers the height from the fee table; no literal elsewhere (a source scan catches one in the UI too).
• The browser sends fee_from on the device registration; an old package or a failing export simply omits it.
• The server stores it on the seat's own record, under the write lock; only a request that names its seat writes; a registration without the field clears that seat's report (the safe side: the seat counts as the current fee). The report is a hint, not a proof: it is not part of any signed message.
• seat_fee_reports reads seats 1..=total and answers "do not decide" for a vault with no seat count.
• Version tests: version_matrix_a_v020_coordinator_ignores_fee_from_and_it_is_in_no_signed_payload, version_matrix_b_v021_coordinator_takes_a_registration_without_fee_from_as_no_report, version_matrix_c_a_v020_coordinator_reads_the_registry_a_v021_wrote.
• The browser package is rebuilt from source (reproducible with wasm-pack 0.13.1).

Verify-before-finishing checklist

• cargo fmt --check + cargo clippy -- -D warnings pass (konclave-seal, konclave-wasm, orchestrator, helper-server)
• cargo test passes (seal, wasm, orchestrator, helper-server); ui/: vitest, tsc, lint, build; Playwright 114
• No secret, key share, seed, or passphrase in code, logs, URLs, or query strings
• Every fund-moving path keeps preview + explicit confirmation (no fee change in this step)
• Reviewed: code, tester, security
• CHANGELOG: root, ui/ and helper-server/
• Docs/comments in English; commits are type(scope): description
• AI disclosure: written with Claude Code, reviewed by the author, who answers for every line. Commits carry Co-Authored-By: Claude <noreply@anthropic.com>. No session link.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
konclave-demo	Ready	Preview	Nov 13, 2026 3:18am UTC