davidherranandClaude Opus 4.8
8a1f779c32
Build + tests verde (exit 0, runtime 27 tests incl. sudo_pallet_index_12). Verificacion adversarial ultracode (5 skeptics): 4 confirmed + 1 partial. FIX-5 — governability (audit V2-CA1): - pallet-sudo 43.0.0 wired Index 12 (workspace + runtime Cargo.toml + std). - impl pallet_sudo::Config (RuntimeEvent/RuntimeCall/WeightInfo) en configs.rs. - genesis: sudo key en los 3 presets — dev/local=Alice, mainnet=foundation_treasury (NO una dev key; el verificador confirmo que no hay backdoor critico). - Da Root origin -> las dispatchables ensure_root de Governance (add/remove council, mark/unmark advisor, treasury_disbursement) dejan de ser no-invocables. Verificado extremo-a-extremo: sudo() despacha RawOrigin::Root, que es exactamente lo que ensure_root acepta. - Sunset documentado (codigo + doc): sudo -> governance real (pallet-collective/ referenda) ANTES de mainnet. Sudo key unica = riesgo de centralizacion aceptable solo como interim/testnet. FIX-2 — lifecycle (audit V1-H2/V2-CA2): - StorageVersion::new(0) + pallet::storage_version en los 4 pallets (provenance/fees/agent-identity/governance). Aditivo, in-code==on-chain==0, sin migracion forzada. Habilita migraciones futuras. CAVEAT honesto (hallazgo high del red-team, NO defecto de FIX-5/FIX-2): treasury_disbursement solo DECREMENTA un contador u128 (Treasury StorageValue), NO mueve OGC real via pallet_balances. FIX-5 restaura la GOBERNABILIDAD (la dispatchable es invocable), pero mover los 250M reales es FIX-6: anadir type Currency al Config + T::Currency::transfer desde una cuenta-tesoreria derivada (PalletId) + financiarla en genesis + test del free_balance. NO se afirma "tesoreria descongelada de verdad" — solo "gobernabilidad restaurada". PENDIENTE: - FIX-2 AGI key recovery (rotate/revoke/active en agent-identity): diferido — necesita un DC de semantica de recovery #41 (single-sig vs multisig threshold, DID estable vs rota, recovery de agent_chain vacio). No se construye contra spec no-ratificada. - pallet-sudo no en feature runtime-benchmarks (inerte hoy: el runtime no impl el Benchmark API). Follow-up con weights benchmarking. - mainnet Foundation sudo key (FNDT placeholder): David ratifica la key real (multisig) pre-launch Q1 2027 (documentado). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
154 lines
5.5 KiB
TOML
154 lines
5.5 KiB
TOML
[package]
|
|
name = "origin-chain-runtime"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
rust-version.workspace = true
|
|
license.workspace = true
|
|
authors.workspace = true
|
|
repository.workspace = true
|
|
homepage.workspace = true
|
|
description = "Origin Chain Substrate runtime canonical. Pilar 4: 7 pallets integrated (System+Timestamp+Balances+TransactionPayment+Aura+Grandpa+Session) + 11 Runtime APIs + 3 Genesis presets (dev+local+mainnet BM V2). Phase 1 COMPLETE canonical."
|
|
|
|
[dependencies]
|
|
# Origin Chain canonical traits + types
|
|
origin-chain-types.workspace = true
|
|
|
|
# Substrate Primitives canonical (SBS-1 polkadot-stable2512-3)
|
|
sp-core.workspace = true
|
|
sp-runtime.workspace = true
|
|
sp-std.workspace = true
|
|
sp-version.workspace = true
|
|
sp-api.workspace = true
|
|
sp-block-builder.workspace = true
|
|
sp-inherents.workspace = true
|
|
|
|
# Consensus primitives canonical (Phase 1.4 per CHN-1 Aura+GRANDPA)
|
|
sp-consensus-aura.workspace = true
|
|
sp-consensus-grandpa.workspace = true
|
|
|
|
# FRAME canonical
|
|
frame-system.workspace = true
|
|
frame-support.workspace = true
|
|
frame-executive.workspace = true
|
|
frame-metadata-hash-extension.workspace = true
|
|
|
|
# FRAME pallets Phase 1.3-1.5 (per SBS-4 ratified)
|
|
pallet-balances.workspace = true
|
|
pallet-timestamp.workspace = true
|
|
pallet-transaction-payment.workspace = true
|
|
pallet-aura.workspace = true
|
|
pallet-grandpa.workspace = true
|
|
pallet-session.workspace = true
|
|
|
|
# FIX-5 governability v0.0.5x: pallet-sudo wired runtime composition Index 12
|
|
# (Root origin para dispatchables admin — sunset → governance real pre-mainnet)
|
|
pallet-sudo.workspace = true
|
|
|
|
# Charon custom pallets Phase 2.x (per DCs)
|
|
# Phase 2.1 v0.0.15: pallet-origin-provenance scaffold canonical wired
|
|
origin-chain-provenance.workspace = true
|
|
|
|
# Phase 2.4 v0.0.21: pallet-origin-fees wired runtime composition Index 8 canonical
|
|
# (OCAFB-1..6 consumer Mathi OitFeeSchedule via vendor copy interim Option B)
|
|
origin-chain-fees.workspace = true
|
|
|
|
# Phase 2.7 v0.0.25: pallet-agent-identity wired runtime composition Index 9 canonical
|
|
# (Inmutable #41 AGI DIDs Cross-Species Co-authorship)
|
|
origin-chain-agent-identity.workspace = true
|
|
|
|
# Slice 2e v0.0.36 — Direct getrandom deps (both 0.2 + 0.3 transitive):
|
|
# 0.2 via const-random-macro → frame-support-procedural
|
|
# 0.3 via ahash → schnellru → sp-trie → frame-support
|
|
getrandom_02 = { workspace = true }
|
|
getrandom_03 = { workspace = true }
|
|
|
|
# Phase 5.1 v0.0.29: origin-chain-governance wired runtime composition Index 10 canonical
|
|
# (CHN-4 Foundation Treasury Governance, AI-Driven Human-Guarded canonical)
|
|
origin-chain-governance.workspace = true
|
|
|
|
# Phase 3 Slice 3.1 v0.0.39: pallet-revive wired runtime composition Index 11
|
|
# (SBS-5 ratificado supersedes CHN-6 v1.0 → PolkaVM RISC-V + ink! v6 + Solidity).
|
|
# Smart contracts deployable canonical post Slice 3.1 SCAFFOLD COMPLETE (v0.0.41).
|
|
# Workspace bump stable2509-3 v0.0.38 desbloqueó esta integración.
|
|
pallet-revive.workspace = true
|
|
|
|
# RuntimeAPI canonical (sp_api::impl_runtime_apis! consumers)
|
|
sp-offchain.workspace = true
|
|
sp-genesis-builder.workspace = true
|
|
sp-transaction-pool.workspace = true
|
|
sp-session.workspace = true
|
|
frame-system-rpc-runtime-api.workspace = true
|
|
pallet-transaction-payment-rpc-runtime-api.workspace = true
|
|
|
|
# SCALE codec canonical
|
|
parity-scale-codec.workspace = true
|
|
scale-info.workspace = true
|
|
|
|
# Logging
|
|
log.workspace = true
|
|
|
|
# Serialization canonical — Slice 2b finding: solochain-template upstream NO
|
|
# declara serde directly canonical. Solo serde_json. Serde viene transitive
|
|
# from FRAME pallets canonical (frame-support + frame-system). Direct serde
|
|
# dep rompía isolated WASM build canonical.
|
|
serde_json.workspace = true
|
|
|
|
[build-dependencies]
|
|
# Slice 2e v0.0.35 — Re-enabled substrate-wasm-builder for active investigation.
|
|
# Slice 2c+2d findings: WASM_BUILD_STD=0 resuelve alloc/exchange_malloc pero
|
|
# descubre serde/std leak via types/std transitive activation. Slice 2e attempt:
|
|
# patch.crates-io serde override + types/std isolation.
|
|
substrate-wasm-builder = { version = "26.0.1", optional = true }
|
|
|
|
[features]
|
|
default = ["std"]
|
|
# Slice 2e v0.0.35 — WASM build feature gate canonical.
|
|
# Enable with `--features wasm-build` para build real WASM_BINARY canonical.
|
|
wasm-build = ["substrate-wasm-builder"]
|
|
std = [
|
|
"origin-chain-types/std",
|
|
"sp-core/std",
|
|
"sp-runtime/std",
|
|
"sp-std/std",
|
|
"sp-version/std",
|
|
"sp-api/std",
|
|
"sp-block-builder/std",
|
|
"sp-inherents/std",
|
|
"sp-consensus-aura/std",
|
|
"sp-consensus-grandpa/std",
|
|
"frame-system/std",
|
|
"frame-support/std",
|
|
"frame-executive/std",
|
|
"frame-metadata-hash-extension/std",
|
|
"pallet-balances/std",
|
|
"pallet-timestamp/std",
|
|
"pallet-transaction-payment/std",
|
|
"pallet-aura/std",
|
|
"pallet-grandpa/std",
|
|
"pallet-session/std",
|
|
"pallet-sudo/std",
|
|
"origin-chain-provenance/std",
|
|
"origin-chain-fees/std",
|
|
"origin-chain-agent-identity/std",
|
|
"origin-chain-governance/std",
|
|
"pallet-revive/std",
|
|
"sp-offchain/std",
|
|
"sp-genesis-builder/std",
|
|
"sp-transaction-pool/std",
|
|
"sp-session/std",
|
|
"serde_json/std",
|
|
"frame-system-rpc-runtime-api/std",
|
|
"pallet-transaction-payment-rpc-runtime-api/std",
|
|
"parity-scale-codec/std",
|
|
"scale-info/std",
|
|
# Slice 2c canonical deferred — substrate-wasm-builder bloqueado WASM build
|
|
]
|
|
runtime-benchmarks = [
|
|
"frame-system/runtime-benchmarks",
|
|
"frame-support/runtime-benchmarks",
|
|
"pallet-balances/runtime-benchmarks",
|
|
"pallet-timestamp/runtime-benchmarks",
|
|
"pallet-transaction-payment/runtime-benchmarks",
|
|
"pallet-grandpa/try-runtime",
|
|
]
|