flowchart TD
    subgraph KeyLifecycle["密钥生命周期"]
        Init["节点初始化 / 钱包恢复"] --> Seed["BIP39 Seed 或随机源"]
        Seed --> KeyGen["GenerateDilithiumKeyPair / GenerateDilithiumKeyPairFromSeed"]
        KeyGen --> Pub["公钥 2592B"]
        KeyGen --> Priv["私钥 4864B"]
        Pub --> KeyID["SHA3-256 生成 KeyID"]
        Priv --> Wallet["钱包 / 本地KMS / 远程签名配置"]
    end

    subgraph SignFlow["签名与验证闭环"]
        Tx["交易 / 区块 / 心跳消息"] --> Hash["SHA3-512 计算 Hash / SignData"]
        Hash --> Mode{"Signer Mode"}
        Mode -->|"local"| Local["LocalSigner -> 本地 Dilithium KMS"]
        Mode -->|"remote"| Remote["RemoteSigner -> AWSKMS / Remote Sign API"]
        Local --> Sig["Dilithium-5 签名 4595B"]
        Remote --> Sig
        Sig --> Attach["写入 Signature + PublicKey"]
        Attach --> Verify["Verify / VerifyWithPublicKey"]
        Verify --> Accept["交易池 / 区块校验通过"]
    end

    subgraph ChainUsage["链上使用位置"]
        Accept --> TxPoolUse["TxPool 验签"]
        Accept --> BlockUse["区块 proposer 签名验证"]
        Accept --> HeartbeatUse["节点心跳 / libp2p 信息签名"]
        Hash --> StateHash["StateRoot / AppHash / MerkleRoot 使用 SHA3-512"]
    end