CN-CONS-06

CN release enforced

Cross-impl acceptance: blocks forged by Ade are accepted by cardano-node when delivered via N2N block-fetch / chain-sync. Evidence is operator-action: a sustained-window live_block_production_session against a private cardano-node capturing CE-N-C-LIVE_.log. Conditional on testnet stake / SPO registration; if unavailable at cluster close the live half is marked blocked_until_operator_stake_available, not deferred.

Source: docs/planning/phase4-n-c-invariants.md §1 (NC-LIVE-1); bounty acceptance test (validation + block-production both required)
Introduced in: PHASE4-N-C

Enforcement trace

Code

Tests 3

cross_impl_adapter_forged_block_decodes_through_ade_codec
cross_impl_adapter_forged_block_structurally_agrees_with_decoder
cross_impl_adapter_corpus_round_trips_byte_identical

CI 1

ci_check_producer_corpus_present.sh

Cross-references

Strengthened in

Attack rationale

Cardano-specific: cross-impl acceptance is the bounty's only proof that derived compatibility holds end-to-end.

Evidence notes

Release / interop evidence, not a universal law. CE-N-B-6 / CE-N-E-6 establish the operator-action live-evidence pattern this rule reuses. S7's mechanical half makes the structural cross-impl claim (decoder ⊕ encoder ≈ identity on captured forged bytes; body-hash binding through S4's authority). The crypto-level claim is operator-action only; the structural-vs-crypto split is documented in docs/clusters/PHASE4-N-C/N-C-S7.md §Notes on the structural-vs-crypto cross-impl split. PHASE4-N-AE.E (2026-06-07): the FIRST LIVE cross-impl acceptance via the --mode node AE recover->follow->forge->serve spine (NOT produce_mode) -- a real cardano-node 11.0.1 relay AddedToCurrentChain an Ade-forged block (block 17, slot 421, hash db3b5675, issuerHash a1ed4e04 == blake2b-224(pool1 cold VK); relay forging=0; Ade succeeded=1) after a DC-PROTO-10 chain-sync-server cursor fix. This proves CN-CONS-06's CORE semantic claim end-to-end. The produce_mode operator-pass + the sustained-window CE-N-C-LIVE capture remain the fuller bar (open_obligation unchanged). Evidence: docs/evidence/phase4-n-ae-ce-a5-relay-adoption.{md,jsonl}.

Open obligation

Live half: blocked_until_produce_mode_wiring_cluster + blocked_until_operator_stake_available + blocked_until_operator_pass_executed. The mechanical half (structural cross-impl agreement — decode round-trip + S4 body-hash binding + decoder/encoder field agreement) is fully enforced via the cross_impl_adapter tests + ci/ci_check_producer_corpus_present.sh, satisfying the bytes-shape claim against the synthetic S3 corpus. PHASE4-N-Q strengthens this entry by shipping the full producer-mode composition surface — GREEN coordinator + RED key-custody shell + RED tokio listener + ade_node Mode::Produce binary — and proves the slot loop + listener handshake + closed evidence vocabulary mechanically via S2..S5 tests. The crypto-level cross-impl claim (real KES/VRF signatures accepted by cardano-node over N2N) is no longer code-blocked: UPDATE 2026-05-29 (docs/planning/operator-pass-live-leg-c1-scoping.md) the real forge handler HAS LANDED — produce_mode::run_real_forge is the live path (no stub), composing N-R-A BLUE verify_and_evaluate_leader + N-S-A real KES signature over the real unsigned_header_pre_image (CN-KES-HEADER-01) + N-S-B typed OutboundCommand relay through MuxPump (CN-OUTBOUND-RELAY-01) + N-W producer Praos VRF (CN-FORGE-04) + N-X serve-side tag-24 wrap (CN-WIRE-08); per-peer block-fetch dispatch + served-chain push_atomic are wired. The remaining live-half blockers are: (1) a thin produce-mode wiring cluster — wire the dormant cardano-cli parsers opcert_envelope::parse_opcert_envelope / genesis_parser::parse_shelley_genesis into produce_mode (currently bypassed by parse_simple_* stand-ins, G1/G2), tip-seeded produce bootstrap (G6, reuse admission seed_to_snapshot), current-slot alignment (G7), live protocol-version/opcert-counter pinning (G4), and an eta0/stake/ASC pinning harness before any real KES signature; (2) operator-provisioned stake so Ade is an elected leader (preprod ~2-epoch / ~10-day snapshot gate, or a C1 private-genesis net where Ade holds ~all stake); (3) the operator-witnessed live pass capturing the peer's acceptance log. Reopen criteria: produce-mode wiring cluster closed + operator-pass evidence captured per docs/clusters/PHASE4-N-Q/CE-N-Q-OPERATOR_PROCEDURE.md (CN-OPERATOR-EVIDENCE-01).