Repository navigation
0.7.20: Execution Hardening
Summary
This release hardens DEOS economic execution against overflow, partial mutation, stale identity, underpriced Weight, and adversarial scheduler behavior.
It also contracts every Actor to one trigger and one FIFO pipeline, adds deterministic 500 ms timestamp cadence, preserves ledger-only fee collection, and binds generated client evidence to the final runtime artifacts.
Why
The 0.7.19 implementation still admitted concrete boundary failures in arithmetic, custody atomicity, pool indexing, XCM identity, and production Weight coverage. This release closes those failure sequences without adding downstream policy or compatibility ceremony before the 1.0 storage boundary.
Behavior
- Actors use one scalar
Manual | AddressEvent | ObservationChange | Cadencedtrigger, one FIFO, and bounded block/tick wakeup heaps under one scheduler coordinator; genesis cadence anchors from the first consensus timestamp without first-block execution. - Fee Sink processes 10% of spendable Native every 120 timestamp ticks while fee collection remains ledger-only.
- Governance vote power is transactionally custodied and safely reused across concurrent proposals; staking and terminal transitions roll back atomically.
- Router and TMC arithmetic widens critical products to
U256; pool-index admission and asset-registry identity fail closed before retaining inconsistent state. - Native XCM identity is
Here; relayParentuses registered foreign ledgers, and teleport dispatch remains disabled. - Production weights, metadata, PAPI descriptors, Actors ABI/bounds, and fee-envelope evidence were regenerated from the final implementation.
- Wiki evidence now uses explicit lifecycle, provenance, locale, and graph signals instead of freshness dates or subjective confidence scores.
- Project-scoped local-network teardown uses portable Linux/macOS process inspection without widening ownership to unrelated processes.
Risk Notes
- This is a pre-1.0 fresh-genesis release: Actor ABI and storage contraction intentionally carry no production migration lineage.
- Scheduler, governance custody, XCM identity, and generated Weight paths are consensus-critical; package, embedding, runtime, benchmark, try-runtime, client, and artifact gates cover the retained tree.
Validation
./scripts/validate-local.sh full— passed on tree6b5e0f24b3ad4208b1cbcfa482d692cb838f1aecwith pinned Node 22.22.0 and Rust 1.93.1../.agents/skills/alignment/scripts/completion-gate.sh— passed.- Production Wasm SHA-256:
0fc16b90eeab48c69a61dc5b2c1a13629b49adb6504d44a3928b6a408640de91.