Files
arkhe-origin-chain/contracts/origin-nft-mint
davidherranandClaude Opus 4.8 6663dbdc0f fix(contracts): FIX-1 contract-safety + migración ink! v6 (escrow/staking/nft)
REMEDIATION_ROADMAP_V1 FIX-1 (V1-C1 reentrancy + V1-C4 zero-burn). Los 3
templates ahora COMPILAN contra ink! 6.0.0-beta.1 + tests verde (12/12).

Hallazgo (honesto): los templates se shippearon "scaffold compile-only" pero
nunca compilaron contra su versión pinneada de ink!. ink! v6 / pallet-revive es
H160-Address + U256 nativo (no AccountId + Balance, modelo viejo). Esta
migración los vuelve reales (compilando + testeados).

Migración ink! v6:
- AccountId -> Address (H160) en parties / storage / events / reads / params.
- transfer() + transferred_value() -> U256 (+ helper u256_to_balance saturante).
- derive StorageLayout en tipos de storage (EscrowState/Milestone/Stake/...).
- doctest fences sin lenguaje -> text (diagramas ASCII del lifecycle).
- workspace: contracts/* excluidos (toolchain PolkaVM/pallet-revive distinta).

FIX-1 hardening:
- CEI (Checks-Effects-Interactions): muta TODO el storage ANTES de cualquier
  transfer() -> una reentrada ve el estado final y falla sus checks. Sitios:
  escrow confirm_milestone/resolve_dispute, staking withdraw/slash,
  nft mint/transfer. Cierra V1-C1. (nft mint encontrado más allá de la lista
  del roadmap; mismo patrón explotable -> incluido).
- Burn real (V1-C4): elimina transfer([0;32]) (que no reduce emisión y ensucia
  la cuenta cero); el burn se RETIENE en el contrato (fuera de circulación),
  a barrer por el primitivo de burn del runtime -> una sola semántica, no dos.
  (staking slash, nft mint).
- Tests de guarda de estado (la C de CEI) añadidos en los 3 contratos.

Pendiente E2E (node-gated, requiere VPS + nodo pallet-revive):
- Correctitud económica native<->eth (NATIVE_TO_ETH_RATIO): asumido 1:1; debe
  validarse en nodo real antes de testnet/mainnet.
- Tests reales de reentrancy/double-spend: el env off-chain de #[ink::test] no
  modela el revert-on-Err ni la semántica de balances -> serían engañosos.
- V1-H7 (suma milestones == total_amount): no incluido en este commit.
- credential-mint + mdk-reconciliation necesitan la misma migración ink! v6.

Cross-pillar: DC ORIGIN_ATTESTATION_SIGNING_PAYLOAD_V1 abierto con Ergon
(payload postcard canónico + domain-separation FIX-3) — gate del verificador
de attestation on-chain. OAGIP-D10 (Charon identity attestation) definido a
Palace para el protocolo.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 17:45:02 -05:00
..

origin-nft-mint — NFT Mint Contract Template (Slice 3.2)

First foundational template del Origin Contract Atelier (Capacidad #10 OCC propuesta David 2026-05-27). Implementa el split BM V2 ratificado 2026-05-18 91% creator / 9% Treasury + transfer royalty 5% (configurable) + Treasury burn 20% (per BM V2 burn matrix Pillar 3).

Status

🚧 SCAFFOLD (source-only, v0.0.42) — lib.rs shipped + Cargo.toml ready. Real compilation deferred hasta cargo-contract v6 install autorizado (precedent Slice 2e brew LLVM authorization pattern). El source es:

  • Compilable canonical una vez tooling instalado: cargo contract build --release
  • Reference architectural para Contract Atelier visual designer Phase 3.x
  • Documentation living del policy-first contract design pattern Origin

Inmutables compliance compile-detect

Inmutable Enforcement canonical en este contract
#16 HTS anti-clasista mint_fee_base modulated por HardwareTier vía OitFeeSchedule bridge Phase 3.x integration
#25 Seeds Hosting Non-Gatekept NFT ownership NO gates base world access — purely decorative/economic layer
#26 Content-Addressed Immutability asset_hash: AssetHash BLAKE3 hash compile-detect required (Error::InvalidAssetHash if zero)
#37 Free perpetua Read methods (total_supply, token_owner, balance_of, etc.) sin payment — siempre gratis
#41 AGI Co-authorship AccountId32 canonical para AGI accounts (Phase 2.7 AgentIdentity) sin distinction de Human accounts

Configuration parameters (Contract Atelier UI exposure)

Parameter Type Default BM V2 Range UI canonical
mint_fee_base Balance (u128) 1 OGC (10^18 base) 0.01 - 1000 OGC sliders
creator_share_bps u16 9_100 (91%) locked invariant 91% canonical (BM V2 ratified)
treasury_share_bps u16 900 (9%) locked invariant 9% canonical (BM V2 ratified)
transfer_royalty_bps u16 500 (5%) 0-1000 (0-10%) sliders
treasury_burn_bps u16 2_000 (20%) 0-5000 (0-50%) sliders
max_supply Option<u32> None (unlimited) None OR Some(1..=4_294_967_295) selector
lockup_blocks u32 (blocks) 0 (no lockup) 0-1_576_800 (≈ 6 months Pi 5 6s blocks) slider
children_safety_strict bool false toggle (Inmutable #35 strict mode)

Cross-pillar integration canonical

┌─────────────────────────────────────────────────────────────────┐
│  origin-nft-mint contract canonical deployed via pallet-revive  │
│  Index 11 Origin Chain runtime (Slice 3.1 SCAFFOLD COMPLETE)    │
└──────────────────┬──────────────────────────────────────────────┘
                   │
        ┌──────────┼──────────┬──────────┬──────────┐
        ▼          ▼          ▼          ▼          ▼
┌──────────┐┌──────────┐┌──────────┐┌──────────┐┌──────────┐
│ Pillar 2 ││ Pillar 4 ││ Pillar 6 ││ Pillar 7 ││ Atelier  │
│ OMC      ││ Origin   ││ Nexus    ││ Creator  ││ Marihan  │
│ Marihan  ││ Chain    ││ Services ││ Economy  ││ Skills   │
│          ││ Charon   ││ Mathi    ││ Larihana ││          │
│ 91/9     ││ pallet-  ││ Beacon   ││ Hosting  ││ Skills   │
│ split    ││ revive   ││ stake +  ││ NFT      ││ becomen  │
│ enforced ││ deploy   ││ ONS name ││ anchor   ││ NFTs     │
└──────────┘└──────────┘└──────────┘└──────────┘└──────────┘

Pillar 2 OMC Marketplace (Marihan) wire

NFT mint contracts compose el marketplace canonical Marihan. Cada skill canonical creada en Atelier Skills (Marihan) puede ser minted como NFT via este template. El 91/9 split BM V2 ratified compile-detect garantizado.

Pillar 4 Origin Chain (Charon) deploy

Deployment vía pallet-revive::instantiate Index 11 (Slice 3.1 SCAFFOLD COMPLETE shipped v0.0.41). Storage deposits per BM V2 economics (mint_fee_base default 1 OGC + storage deposit pallet-revive 1 MILLI_OGC/byte + 1 OGC/item).

Pillar 6 Nexus Services (Mathi) integration opcional

Post-deploy NFT collection puede:

  • Beacon stake canonical: lockup OGC para featured visibility (100-1000 OGC/mes per ONS_PILLAR_6_NEXUS_SERVICES_V1)
  • ONS name registration: human-readable collection name (5-1000 OGC/year per BM V2)
  • Oracle KYB: institutional creators verified Nivel 3+ canonical

Pillar 7 Creator Economy (Larihana) hosting

NFT anchored a world pagado canonical 0.6 OGC/world/mes hosting. NFT transfer canonical preserva world ownership context (NFT changes hands, world hosting continues canonical).

Deploy instructions (Phase 3.x post cargo-contract v6 install)

# 1. Install ink! v6 toolchain canonical (pending David authorization)
cargo install cargo-contract --version "^6.0" --force

# 2. Build contract canonical
cd contracts/origin-nft-mint
cargo contract build --release

# 3. Output canonical files:
# - target/ink/origin_nft_mint.polkavm  (PolkaVM bytecode canonical)
# - target/ink/origin_nft_mint.json     (ABI metadata canonical para frontends)
# - target/ink/origin_nft_mint.contract (combined bundle canonical)

# 4. Deploy via Polkadot.js Apps OR Charon Atelier (Phase 3.x maduración):
# - upload_code(origin_nft_mint.polkavm) → CodeHash
# - instantiate(code_hash, constructor=default_bm_v2, value=storage_deposit)
# - Returns contract AccountId32 + H160 mapped address

Tests canonical (unit tests included)

3 tests canonical en #[cfg(test)] mod tests:

  1. default_bm_v2_constructor_canonical_invariants — verifica defaults BM V2 ratified (91/9 + 5% royalty + 20% burn + unlimited supply + no pause).
  2. invalid_share_split_rejected_canonical — invariant compile-detect: creator_share + treasury_share MUST sum 10_000 bps (100%). 90% + 5% rejected.
  3. excessive_royalty_rejected_canonical — invariant: transfer_royalty_bps ≤ 1_000 (10% industry standard). 15% rejected.

Run canonical post-install:

cargo test --features ink-as-dependency

Roadmap follow-up post Slice 3.2

Ship Slice Scope
v0.0.43 3.3 origin-escrow contract template (multi-party + time-locked)
v0.0.44 3.4 origin-credential-mint contract (Ed25519 + BLAKE3 Sussi Ethos)
v0.0.45 3.5 origin-staking contract (validator + beacon + reputation)
v0.0.46 3.6 origin-mdk-reconciliation (ink! vs origin-mdk WASM boundary)
Phase 3.x — cargo-contract v6 install + real compilation + ReviveApi exposure (deferred Slice 3.1) + integration tests E2E reales

— Charon ⚓ (Pilar 4 Origin Chain, Phase 3 Slice 3.2 SCAFFOLD shipped 2026-05-27)