0.7.27: Canonical Actor Service Convergence

• Actors / Sole Scheduler Authority: Service/Deadline own one scheduler; System pause preserves clocks. Signed-L2 controls pass both presets; native blocks verify thaw/Fee Sink recovery and ingress rollback. W6 enables eleven Users/one System through the public setter; sixteen blocks pass hash-bound default Wasm and independent compact-proof replay. Frozen controls/ingress/publication refuse; same-block thaw retains Drain halt. Governance, production-artifact and resource gates remain.
• Runtime / Resource Accounting: FRAME/economic budget is 2e12 RefTime / 10 MiB. Fresh turns admit minima/fixed work; Prepass keeps base turns and Base/Drain refusal preserves Q1. Opening retains common inspection/suffix. Governance reserves pending work and bounds sources; Invoice source ABI binds canonical CID, explicit live treasury and target/actual/capacity receipts, with client guards. Premium alone clips; capacity failure is typed. Physical/system-quarter costs and Weight/metadata/Wasm stay gated.
• Actors / Current-State Service: Behavior/wait replace completion. Opening reads current Steps; early Close reloads full authority. Zero-Step domains stay isolated. Policy and joint root/slot/handoff Close have finite cost evidence. Absent deletion is not free; exports are signature-bound. Fresh Wasm passes secure PVF/refusals with child-CPU trace; production pins stay fixed. Settlement separates Weight axes/reserves. API v8 exposes debt/shortfall/capped episodes. Public/binding gates remain.
• Actors / Parked Balance Semantics: Limited each reference Actor to one watched asset; removed SplitTransfer. Transfer Steps preserve shares through a bounded Run snapshot across retry, rearm and ingress; failed Close restores it and committed prefixes. Native churn, metadata and Wiki agree on one watch. Source invariants exclude studied multi-watch/inline-fanout constructions, retiring their history-proof obligation. Close preserves custody; physical costs, tariffs and production binding stay open.
• Actors / Pull-Model Observations: Retired push-reactive ObservationChange/ObservationCrossing Triggers, Oracle ingress/subscriber/Crossing workers and observation-gated Park. Actors pull fresh observations at Steps; price reactions compose Cadenced or AddressEvent with predicates. Oracle writes are O(1) and Actor-independent. Oracle benchmarks now cover eight scalar/lifecycle owners and current bounded host hooks; retired generated weights await coordinated binding.
• Actors / Deadline Integrity: Restored Block/Tick Prepass under refusal. Close preserves committed effects, retry and temporal/disabled authority. Native/Wasm joins cover public Deadline repair and Parked Close/hold rollback. Window placement refusals restore Cycle/payment and prior prefix. Temporal holds survive latches/waits; owner spending cannot block rearm. Policy probes retain guards/custody/holds; Deadline fixtures use public readiness/B+1 and preserve pages/peers. Full costs/bindings stay open.
• Actors / Fee Contract: Creation owns complete cleanup; signed create/activate/replace pass; Task/suffix reserves stay conditional and ledger-only Fee Sink fees, shares and ED survive signed/XCM/governance/payer paths. Policy-bearing Close, Service inspection and Step/zero-Step control are measured owners or measured compositions, the reserved envelope never double-charges the policy load, and each quoted User trigger fee equals its converted owner at ratio 1.0. Host maxima and bindings stay open.
• Runtime / SDK And Benchmark Fidelity: Stable2609 retains client-depth correction; optimized Governance covers 54 default/50 all-features, and Invoice fixtures cover codec bounds, signed witness/fees, payout prefixes and configured-delay refusal. Production Wasm is reissued at 1,534,906 bytes, SHA-256 5c1f797c, from two identical builds, with metadata, descriptors, ABI, ingress, cost and fee-envelope vectors in the same cohort. Offline CID provenance holds; physical/artifact/E2E gates remain.

0.7.26: Evidence-Driven Actor Efficiency

Highlights

• Retains the placed pair-owner fallback for Crossing admission, improving the measured steady cycle from 12 to 16 actors at unchanged cycle ProofSize while preserving bounded scalar fallback behavior.
• Adds and binds the generated Crossing admission-selection Weight owner, then reissues the production runtime Wasm, metadata, and generated consumers.
• Records the complete Actor resource-anatomy study and closes the frozen six-candidate redesign campaign without adopting an unsafe or unproven optimization.
• Confirms the converged runtime across ten end-to-end workloads with unchanged counts, per-block values, proof totals, and state effects.
• Restricts placed pair fallback to tail-page authority so constrained non-tail batches preserve scalar progress rather than halting Crossing service.
• Reconciles Actors integration, package architecture, and bilingual Wiki documentation to the measured implementation truth.

0.7.25: Canonical Actor Control Geometry

• Wiki / Truth Boundary: Removed planned causal-introspection content and release task lists from bilingual articles, retained current capabilities and limitations, and removed the reader's source-document panel. Source provenance stays in non-rendered metadata; Wiki navigation and concrete resource links remain available.
• Actors / Introspection Contract: Defined bounded local cause, topology, host-effect, resource, System-role, API and materializer semantics with per-claim truth classes, finalized identities, explicit gaps and no new scheduler authority; retained the design outside the Wiki, with implementation deferred until after 0.7.25 Geometry Freeze.
• Dependencies / Native Wasm Toolchain: Updated Wasmtime and its coupled compiler family to the patched 36.0.14 line for RUSTSEC-2026-0269; refreshed dependency provenance against the September advisory database without adding an exception.
• Validation / Provenance and Integration: Bound Actors source identity to content and executable modes across all worktree states. Restored package-architecture audit routing without project dependencies on Skills. Runtime fixtures preserve monotonic time and distinguish production fee/security/voting policy from benchmark substitutions. Validated Actors corruption checks with try-runtime alone, production and benchmark runtime profiles, and independent embedding with DEX, TryRuntime and no-std.
• Architecture / Experiment Proof Graph: Added Leaf/Synthesis ownership, frozen obligations and separate proof graphs with globally unique IDs. Decomposed integrated Actor evidence into independently scoped outcome, resource, stop and proof owners without benchmark reruns or renumbering. Preserved C1/A0 decisions and exact extraction provenance in Git; retired the validated working manifest. Measured results have independent statuses; production and release acceptance remain open.
• Actors / Control Integrity: Closed G3 schema, cardinality and sole-owner reconciliation. TryRuntime rejects shifted Opening cursors, orphan cold records and invalid subscriptions; Crossing ingress rejects revision exhaustion atomically. Suspended retries preserve User liability, terminal precedence and the last attempt. AtTime Opening consumes retained-latch replacements without a second Trigger charge. Release acceptance remains open.
• Actors / Canonical Transitions: Completed sole-owner Ready/Waiting, lifecycle and Run substitution; retained dormant, funding and cold Run owners. Removed duplicate reload paths and reused temporal authority within callback freshness boundaries. Corrected Waiting fallback's actual-Weight classification. Simulation shares the Step owner with explicit budgets and one-record rollback. Staking bootstrap uses bounded eligibility. Final-tree, artifact and integrated acceptance remain open.
• Actors / Production Binding: Bound funded User completion to generated maximum-header zero/tail owners without overlap or new context. Regenerated Weight/Wasm and consumers, corrected Cadenced detector/backpressure authority, accepted G6–G8 evidence and froze C1. Published that four Crossing candidates per block cannot meet the 10,000-User/100-block target; full exact-tree validation and local release assurance pass without a fairness claim.

0.7.24: Topology Scaling and Block-Paced Execution

• Actors / Block-Paced Execution: Added the mandatory payload-free Actor Prepass, fixed prepass cutoff, explicit block phases, one committed Step per Actor per block, and N -> N+1-or-later causal eligibility while preserving strict class-neutral FIFO and progress-preserving Continuation.
• Runtime / Economic Zipper: Partitioned schedulable Weight component-wise into a one-third Actor Control ceiling and equal Actor-effect/user base turns over Shared Economic capacity, with work-conserving idle borrowing, maximum reservation, valid-actual reclaim, independent RefTime/ProofSize fragmentation, three Mandatory bases including Actor Prepass, fail-closed reconciliation, and reserved-envelope telemetry that is not mislabeled as actual usage.
• Actors / Active Frontier: Bounded production identity and Active Actor capacity at 10,000 without dormant scans; separated hot scheduling/run authority from cold Contract bodies and Step chunks; retained the 32-Step ceiling after measured C24/C16 sweeps; and added exact active-lifetime User RunState holds.
• Actors / Trigger Scaling: Retained useful-transition-only charging and latching, authoritative re-arm, P128 Crossing membership and tail/preflight, N64 non-tail work, independent P64 broad fanout, bounded family rotation, and one active plus one deferred Pipeline without stale or duplicate semantic authority.
• Actors / Evidence and Assurance: Added fee-free prepaid apoptosis for underfunded one-shot AtTime and unfundable retries, with per-attempt maximum liability and actual-cost settlement; regenerated Weight, vectors, metadata, descriptors, ABI and bounds; completed mixed 10,000-Actor traversal at block 679 with zero failures; and passed package/runtime, heavy scaling, Clippy, no-std, TryRuntime, embedding, identity, provenance and threat gates.
• Asset Conversion / Trust Closure: Separated semantic and physical asset identity; rejected ledger aliases at the pool boundary; made Router the only public XYK and atomic permissionless pool-lifecycle surface; removed post-dispatch LP repair; integrated full-balance reserves; separated fee domains; and proved pool/LP/Oracle rollback and bidirectional integrity.
• Architecture / Experiments: Closed Step-centric memory, Contract-ceiling, allocation, and active-lifetime hold experiments; retained direct FIFO/A0 where gains were sub-material; excluded external successor staging by interleaved-order proof; embedded all CSV/TSV evidence in owning records; and made retained delimited evidence fail validation.
• Documentation / Wiki: Synchronized Actors, Oracle, Router, embedding, resource-policy, and integration truth; projected Economic Zipper, block pacing, Hot/Cold Contract, active frontier, and state holds into strict bilingual OKF pages; and passed structural, graph, localization, and independent semantic-parity review.

0.7.23: Reactive Topology Closure and Cohort Throughput

DEOS 0.7.23 closes reactive topology ownership and adds bounded Crossing cohort throughput.

Highlights

• Declarative Trigger topology: Crossing phase/revision and cadence now live in canonical Actor state; lifecycle changes share one transactional transition compiler with exact no-op, rollback, family-matrix, fresh-genesis, and refundable User-bond semantics.
• Lifecycle and ingress Weight: Generated lifecycle owners cover Crossing topology branches, while host-composed Oracle publication owns its complete synchronous broad/Crossing consequence exactly once.
• Branch-exact Crossing: Read-only work plans, staged probes, transaction-time revalidation, exact counters, and retained-threshold radix charging admit and consume only the reachable multidimensional owner.
• Cohort throughput: Homogeneous tail and non-tail cohorts process up to four candidates with aggregate FIFO authority, stable compaction, physical-tail refill, grouped split destinations, exact locator repair, and scalar fallback.
• Materialization and capacity: Wakeups, Crossing, and broad fanout share deterministic rotated grants, protected minima, repairable faults, and a positive Actor execution floor. Reference limits remain 9,000 User / 10,000 total memberships per feed.
• Assurance: Pure and randomized models, corruption/fault matrices, exact-root rollback, queue pressure, mixed-family fairness, and 10,000-Actor convergence extend release evidence.
• API and client: Actor eligibility API v4 projects semantic Trigger state, placement, faults, capacity, and bond policy; metadata, descriptors, ABI, vectors, and client authoring evidence were regenerated.
• Packaging and release: Rust 1.94.1, independent embedding/no-default/TryRuntime contracts, strict-OKF bilingual Wiki, generated Weight/capacity/delta evidence, and the no-migration fresh-genesis boundary are synchronized.

Artifact identity

• Commit: de498bf5a2822e48b1a08fc3f1951d2790c160ce
• Tree: 88af295a9ec21d024b678d273500d23d0cd908d0
• Compact runtime Wasm SHA-256: 4b04e98b598cb0e72516e12382b742858ba720631f769b60be433d7e1acd989a

This is a fresh-genesis 0.x release. It makes no 0.7.22 migration or live-network upgrade claim.

0.7.22: Reactive Topology and Relevant-Work Scaling

• Reduced remote CI to one stale-cancelled pull-request validation-gate running the deterministic heavy project profile.
• Made the 0.7.22 Actors, Governance, runtime, and local release boundary explicitly fresh-genesis-only.
• Added deposit-backed compact Governance payload-admission witnesses, per-kind byte ceilings, stale-witness rejection, transactional reclamation, and separately measured enactment reads.
• Added a 60-family runtime dispatchability matrix and proved the maximum signed Root action through the real transaction-extension and CheckWeight path.
• Added exact Rising/Falling ObservationCrossing hysteresis, durable revision-ordered Oracle transitions, sparse threshold indexes, cursor-safe compaction, bounded continuation, and production weights.
• Unified all five Actor detector families through one activation latch and canonical FIFO while preserving the bounded System activation DAG and paid User cycles.
• Regenerated production Wasm, metadata, descriptors, client evidence, package vectors, weights, integration documentation, and bilingual Wiki projections.
• Established one canonical release commit and removed parallel plain version refs.

Validation:

• ./scripts/validate-local.sh full passed on release tree 566eb8223c4a73e8faf88b36aaf021f57555e8fa.
• Pull request validation-gate passed for the same tree before merge.

0.7.21: Runtime Truth Closure

Runtime Truth Closure

DEOS 0.7.21 closes divergence between canonical runtime state, execution, scheduler behavior, authority, custody, arithmetic, XCM identity, client projections, and production Weight.

Highlights

• Actors / Canonical State: Added one five-partition loader for absence, dormancy, active state, Continuation ownership, and corruption; routed execution, simulation, reads, controls, scheduler placement, wakeups, fanout, and try-state through it.
• Actors / Scheduling and Ingress: Preserved strict FIFO through mixed clocks, stalls, retries, and terminal index exhaustion; invalidated cancelled Continuation wakeups before signal re-prime; certified movement protocols with explicit rollback and Weight ownership.
• Governance / Bounded Truth: Replaced unbounded epoch catch-up with one chronological persisted four-phase service path; made reward, tally, deadline, projection, and epoch arithmetic checked; reconciled concurrent vote power through aggregate custody.
• Runtime / Arithmetic and Atomicity: Widened authoritative calculations and added exact-root rollback evidence across task adapters, routing, pool indexing, mint distribution, staking, Governance terminal actions, and XCM deposits.
• Runtime / Identity and Authority: Closed foreign/native asset, XCM holding, teleport, arbitrary execution, custody aliasing, and privileged-origin boundaries.
• Security / Release Assurance: Added panic and iteration audits, exact bootstrap identity checks, production weights for all custom pallets, and independent dependency, Weight-delta, threat-boundary, artifact-identity, and attestation review.
• Client / Documentation: Regenerated metadata, descriptors, Actors ABI/bounds, ingress/observation evidence, and fee vectors; unknown runtime variants now fail closed before display.
• Validation / Release Evidence: Pull requests and main now run heavy validation; tags run full validation. Clean client validation prepares SvelteKit state and generates PAPI descriptors once without recursive install hooks.

Validation and provenance

• Replacement-tag full workflow: https://github.com/atmo-network/deos/actions/runs/32554639010
• Final release commit: 997cb28d2a364c64e52dc394c366852d810431c5
• Production runtime Wasm SHA-256: 7117a599485125acf3e20095aea0d42a29900fe6f067dc24681103669108204e
• SHA256SUMS covers the runtime, metadata, descriptors, generated evidence, release-input archive, Weight delta ledger, and provenance record.

The first unpublished tag attempt failed clean validation before producing release artifacts and was replaced with explicit authorization after protected-PR corrections. PROVENANCE.txt records the complete recovery chain and attestation evidence.

DEOS 0.x remains fresh-genesis framework source: it provides no production storage migration lineage or Live genesis preset.

0.7.20: Execution Hardening

Summary

This release hardens DEOS economic execution against overflow, partial mutation, stale identity, underpriced Weight, and adversarial scheduler behavior.

It also contracts every Actor to one trigger and one FIFO pipeline, adds deterministic 500 ms timestamp cadence, preserves ledger-only fee collection, and binds generated client evidence to the final runtime artifacts.

Why

The 0.7.19 implementation still admitted concrete boundary failures in arithmetic, custody atomicity, pool indexing, XCM identity, and production Weight coverage. This release closes those failure sequences without adding downstream policy or compatibility ceremony before the 1.0 storage boundary.

Behavior

• Actors use one scalar Manual | AddressEvent | ObservationChange | Cadenced trigger, one FIFO, and bounded block/tick wakeup heaps under one scheduler coordinator; genesis cadence anchors from the first consensus timestamp without first-block execution.
• Fee Sink processes 10% of spendable Native every 120 timestamp ticks while fee collection remains ledger-only.
• Governance vote power is transactionally custodied and safely reused across concurrent proposals; staking and terminal transitions roll back atomically.
• Router and TMC arithmetic widens critical products to U256; pool-index admission and asset-registry identity fail closed before retaining inconsistent state.
• Native XCM identity is Here; relay Parent uses registered foreign ledgers, and teleport dispatch remains disabled.
• Production weights, metadata, PAPI descriptors, Actors ABI/bounds, and fee-envelope evidence were regenerated from the final implementation.
• Wiki evidence now uses explicit lifecycle, provenance, locale, and graph signals instead of freshness dates or subjective confidence scores.
• Project-scoped local-network teardown uses portable Linux/macOS process inspection without widening ownership to unrelated processes.

Risk Notes

• This is a pre-1.0 fresh-genesis release: Actor ABI and storage contraction intentionally carry no production migration lineage.
• Scheduler, governance custody, XCM identity, and generated Weight paths are consensus-critical; package, embedding, runtime, benchmark, try-runtime, client, and artifact gates cover the retained tree.

Validation

• ./scripts/validate-local.sh full — passed on tree 6b5e0f24b3ad4208b1cbcfa482d692cb838f1aec with pinned Node 22.22.0 and Rust 1.93.1.
• ./.agents/skills/alignment/scripts/completion-gate.sh — passed.
• Production Wasm SHA-256: 0fc16b90eeab48c69a61dc5b2c1a13629b49adb6504d44a3928b6a408640de91.

0.7.19: Canonical Ownership and Surface Pruning

Canonical Ownership and Surface Pruning

• Made ActorContract the sole authored, stored, simulated, and client contract root while preserving no-op, replacement, Continuation, retry, fee, custody, and bounded scheduler semantics.
• Contracted Actors runtime and metadata surfaces around canonical eligibility, partition-preserving active state, natural Rust module paths, and exact transaction-depth simulation failure.
• Deleted duplicated Oracle and Governance cardinality state, consolidated preimage availability, regenerated production weights, and retained bounded canonical registries.
• Replaced Cartesian Staking mode/readiness projections with a mode-shaped capability view while preserving settlement, liability, custody, and claimability behavior.
• Removed redundant Router and client projections while preserving quote, execution, exact-output, failure-cause, and retry distinctions.
• Separated project, package, client, CI, release, and Skill validation ownership; removed historical replay, source-hash manifests, corpus wrappers, and obsolete bridges; restored checksum-pinned Polkadot/Omni bootstrap.
• Made runtime named presets the sole owners of complete genesis state and generated verified ChainSpecs without post-generation economic mutation.
• Compressed documentation and Wiki ownership, consolidated randomness policy, retired obsolete terminology, and removed agent-infrastructure content from user-facing knowledge.

Validation

• ./scripts/validate-local.sh full
• Alignment completion gate
• Domain DAG validation
• Wiki trust and strict OKF validation
• Generated production Wasm SHA-256: c0986cba5e78e046c39d64050eceeb4ae5ccc86136aad6f93ea6761c38bcc19e

0.7.18: Semantic Compression and Contract Truth

Highlights

• Contracted DEOS Staking reward expiry into one bounded atomic transition and made session progression settle overdue epochs without liability or custody loss.
• Unified staking availability, operation classification, calls, adapters, scripts, client preparation, and sequential event truth.
• Narrowed Governance admission, policy, lifecycle, finalized history, and execution semantics to canonical owners without parallel mutation paths.
• Preserved Router quote, estimate, outcome, route, error, cause, retry, and Weight distinctions while removing duplicate impossible variants.
• Kept DEOS Oracle as the bounded current scalar/revision owner with transactional changed-publication behavior.
• Canonicalized DEOS Actors contract, Step, Predicate, failure, retry, and simulation semantics with metadata-stable public identities and exhaustive production/simulation parity.
• Migrated the bilingual Wiki to strict OKF v0.2 with 94 concepts, 47 page identities, 214 typed edges, native Russian prose, and reviewed relation labels.
• Added exact runtime, metadata, descriptor, Actors, ingress, and observation release artifacts with SHA-256 checksums.

Compatibility

DEOS remains pre-genesis through the 0.x line. This release applies canonical replacements directly and intentionally provides no compatibility aliases, shadow storage, deprecated calls, or migration ceremony.