---
title: "One xe command, XE Benchmark, mandatory attestations"
update: 5
week: 2026-w14
week_of: 2026-03-30
published: 2026-04-02
network: testnet
releases: ["core v0.4.1", "core v0.4.2", "cli v0.4.1"]
url: https://xe.marketized.io/changelog/2026-w14
---

# #005: One xe command, XE Benchmark, mandatory attestations

_30 Mar – 5 Apr 2026_

Four tools became one command, every provider now proves what it can do before it takes a lease, and no lease can start or settle without the timekeepers.

## One command, node included

**New** · CLI & API

A single `xe` binary replaces four tools, with fifteen commands from `xe node` to `xe ssh`. Run a node, fund a wallet, lease a machine and log into it, all from one place.

[Run a node](https://xe.marketized.io/node)

## Machines prove what they can do

**New** · XE Machines

**XE Benchmark** runs for a minute when a provider starts, with a memory-hard phase that can’t be handed to another machine. Its certificate is shared with every node and checked on every lease.

[How the benchmark works](https://xe.marketized.io/research)

## No lease without the timekeepers

**Security** · XE Machines

A lease can no longer be accepted or settled on a machine’s own word: both need attestations from the **XE Timekeepers**, and providers won’t start without them.

Upgrading a node is one binary now. Replace the old tools and start it the same way:

```bash
xe node --data ~/.xe
xe wallet new
xe fund
```

## Breaking changes

- **CLI & API:** `xe-node`, `cli`, `xe-tool` and `xe-lease-tool` replaced by `xe`; the interactive shell is gone

## New

- **Protocol:** A network ID sealed into every block, so blocks can’t be replayed from one network on another
- **XE Machines:** SSH straight through the gateway to your VM, end to end, with no one in the middle

## Improved

- **XE Machines:** Providers check their free vCPUs, memory and disk before they accept a lease
- **XE Machines:** A VM is ready before its lease is accepted, and torn down when it settles
- **Network:** No sync traffic at all when nothing has changed

## Security

- **Wallet:** Each wallet gets its own SSH key, so one wallet can’t reach another’s VMs