Files
arkhe-origin-chain/contracts
davidherranandClaude Fable 5 db4c8a37d3 fix(ink/staking): slash() sin guard de estado → insolvencia (CRITICAL audit ultra)
Audit ultra 2026-07-04 (dimensión ink-contracts): slash() checaba solo
caller==slashing_authority, existencia y amount<=stake.amount — NUNCA el
stake.state. Y withdraw() ponía state=Withdrawable pero NO ceroaba stake.amount.
⇒ tras un withdraw, el slashing_authority podía slashear el stake retirado
(amount<=stake.amount pasaba con el principal ya devuelto), pagando el
treasury_share desde el pool de OTROS stakers (insolvencia + doble decremento
de total_staked). Alcanzable por el Tribunal (autoridad confiable), no cubierto
por FIX-1 (CEI) ni FIX-6 (fake APR).

Fix: (a) guard de estado en slash() — solo Active|Unbonding; Withdrawable/Slashed
→ InvalidState. (b) withdraw() cero stake.amount + rewards_accumulated tras
computar to_return. +test E2E (ink v6, set_contract_balance). Contrato 5 tests
verde. (No desplegado — fase futura; endurecido antes de que sea dinero real.)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-04 14:55:31 -05:00
..

Origin Chain Contracts Library

Sub-workspace canonical: ink! v6 smart contracts deployable via pallet-revive (Phase 3 Slice 3.1 SCAFFOLD COMPLETE v0.0.41).

Scope

Templates contracts foundational del Origin Metaverse ecosystem, deployable on Origin Chain. Each contract es policy-first (BM V2 + Inmutables compliant), composable, governance-aware, y diseñado para integración con el Origin Contract Atelier propuesto (Capacidad #10 del Origin Command Center).

Workspace separation rationale

Esta carpeta es un workspace separate del runtime workspace (arkhe-origin-chain/) por las siguientes razones:

  1. Toolchain divergence: ink! v6 contracts requieren wasm32-unknown-unknown target + cargo-contract v6 + linker config específica. Runtime workspace usa wasm32v1-none para WASM_BINARY producción.
  2. Profile isolation: contracts release profile usa panic="abort" + size-optimized canonical para minimizar bytecode shipping. Runtime profile prioriza speed.
  3. Dep tree boundary: ink! crate ecosystem (ink!, ink_storage, ink_lang_macro) son separate de FRAME pallets. Mixing causa version resolver chaos.
  4. CI parallelism: contracts build en parallel a runtime build (different toolchains, different caches).

Pre-requisites (deployment infrastructure)

# ink! v6 toolchain canonical (pending David autorización system install)
cargo install cargo-contract --version "^6.0" --force
rustup target add wasm32-unknown-unknown  # ya instalado vía Slice 2e

# Verify install
cargo contract --version
# expected: cargo-contract-contract 6.x.x

Templates shipped

Template Slice roadmap Ship Status
origin-nft-mint 3.2 (BM V2 91/9 split) v0.0.42 🚧 SCAFFOLD (source-only, awaiting cargo-contract v6 install)
origin-escrow 3.3 (multi-party + time-locked) v0.0.43 🔵 NOT_STARTED
origin-credential-mint 3.4 (Ed25519+BLAKE3) v0.0.44 🔵 NOT_STARTED
origin-staking 3.5 (validator+beacon+reputation) v0.0.45 🔵 NOT_STARTED
origin-mdk-reconciliation 3.6 (ink! vs MDK WASM boundary) v0.0.46 🔵 NOT_STARTED

Contract Atelier integration roadmap (Future)

Estos templates son la base library del Origin Contract Atelier (Capacidad #10 OCC propuesta a David 2026-05-27). El Atelier consumirá esta carpeta vía:

  • Templates registry: cada subcarpeta = un template visible en Atelier Templates Library
  • Visual policy designer: parametros editables vía UI (mint_fee, splits, royalty, lockup) → backend regenerates Cargo.toml + lib.rs values
  • Charon copilot: chat sidebar con LLM + RAG sobre estos sources para sugerir templates + validar Inmutables compliance
  • Compile pipeline cloud-side: firecracker microVM por job + cargo-contract v6 + verify bytecode

Filosofía contracts canonical Origin

  1. Inmutables compliance: cada contract honors #16 (anti-clasista fees) + #25 (Seeds Hosting) + #26 (Content-Addressed Immutability) + #37 (Free perpetua) + #41 (AGI sovereignty).
  2. Policy-first, NOT code-first: contracts diseñados para ser configurables via parameters sin tocar Rust. El Atelier abstracts el code layer.
  3. Composable: NFT Mint + Royalty Distributor + Treasury Burn = componentes reusable. NO monolithic contracts.
  4. Governance-aware: contracts canonical (Foundation Treasury impact) require DAO vote via Phase 5 Governance pallet (origin-chain-governance Index 10).
  5. Charon co-authored: cada contract documenta intent + Inmutables honored + decisions log similar a SKILL.md Marihan pattern.

— Charon ⚓ (Pilar 4 Origin Chain, Phase 3 Slice 3.2 scaffold 2026-05-27)