Repository navigation
0.7.21: Runtime Truth Closure
Runtime Truth Closure
DEOS 0.7.21 closes divergence between canonical runtime state, execution, scheduler behavior, authority, custody, arithmetic, XCM identity, client projections, and production Weight.
Highlights
- Actors / Canonical State: Added one five-partition loader for absence, dormancy, active state, Continuation ownership, and corruption; routed execution, simulation, reads, controls, scheduler placement, wakeups, fanout, and try-state through it.
- Actors / Scheduling and Ingress: Preserved strict FIFO through mixed clocks, stalls, retries, and terminal index exhaustion; invalidated cancelled Continuation wakeups before signal re-prime; certified movement protocols with explicit rollback and Weight ownership.
- Governance / Bounded Truth: Replaced unbounded epoch catch-up with one chronological persisted four-phase service path; made reward, tally, deadline, projection, and epoch arithmetic checked; reconciled concurrent vote power through aggregate custody.
- Runtime / Arithmetic and Atomicity: Widened authoritative calculations and added exact-root rollback evidence across task adapters, routing, pool indexing, mint distribution, staking, Governance terminal actions, and XCM deposits.
- Runtime / Identity and Authority: Closed foreign/native asset, XCM holding, teleport, arbitrary execution, custody aliasing, and privileged-origin boundaries.
- Security / Release Assurance: Added panic and iteration audits, exact bootstrap identity checks, production weights for all custom pallets, and independent dependency, Weight-delta, threat-boundary, artifact-identity, and attestation review.
- Client / Documentation: Regenerated metadata, descriptors, Actors ABI/bounds, ingress/observation evidence, and fee vectors; unknown runtime variants now fail closed before display.
- Validation / Release Evidence: Pull requests and
mainnow run heavy validation; tags run full validation. Clean client validation prepares SvelteKit state and generates PAPI descriptors once without recursive install hooks.
Validation and provenance
- Replacement-tag full workflow: https://github.com/atmo-network/deos/actions/runs/32554639010
- Final release commit:
997cb28d2a364c64e52dc394c366852d810431c5 - Production runtime Wasm SHA-256:
7117a599485125acf3e20095aea0d42a29900fe6f067dc24681103669108204e SHA256SUMScovers the runtime, metadata, descriptors, generated evidence, release-input archive, Weight delta ledger, and provenance record.
The first unpublished tag attempt failed clean validation before producing release artifacts and was replaced with explicit authorization after protected-PR corrections. PROVENANCE.txt records the complete recovery chain and attestation evidence.
DEOS 0.x remains fresh-genesis framework source: it provides no production storage migration lineage or Live genesis preset.