Invariants / CN-EPOCH-01

CN-EPOCH-01

CN derived partial

Stake, rewards, parameter changes, and governance effects may activate only at protocol-defined epoch boundaries

Source: classification_table.md §C

Enforcement trace

Code

crates/ade_core/src/consensus/leader_schedule.rs
crates/ade_core/src/consensus/ledger_view.rs
crates/ade_ledger/src/consensus_view.rs

Tests 7

consensus::leader_schedule::tests::query_uses_state_epoch_nonce_for_vrf_input
corpus_returns_canonical_answer_for_known_pools
corpus_rejects_unknown_pool
corpus_is_deterministic_across_runs
view_returns_corpus_pool_stake_and_vrf_keyhash
view_unknown_epoch_returns_none
view_is_pure

CI 0

no CI script — gap

Strengthened in

Attack rationale

Prevents early or delayed activation errors.

Evidence notes

Cardano-specific: epoch boundary semantics defined by Ouroboros Praos. Evidence: Conway/Rules/Epoch.hs, NewEpoch.hs show epoch-boundary-only enactment.