Invariants / CN-CRYPTO-01

CN-CRYPTO-01

CN true declared

Verification belongs to the authoritative core; signing belongs outside it

Source

classification_table.md §J

Enforcement trace

Code

no enforcing code — gap

Tests 0

no tests named — gap

CI 0

no CI script — gap

Cross-references

Attack rationale

Keeps private-key operations and shell effects out of core consensus logic.

Evidence notes

Universal: private key operations must be outside pure core. Evidence: cardano-node loads keys at startup, signing in shell only.