AdeAtlas
Invariants / CN-LEDGER-09

CN-LEDGER-09

CN derived partial

Witnesses must bind exactly to the intended body, certificates, withdrawals, governance actions, and scripts for the era

Source

classification_table.md §B

Enforcement trace

Code

Tests 6

  • all_required_covered_is_valid
  • extra_irrelevant_witness_does_not_substitute
  • missing_certificate_witness_rejected
  • missing_withdrawal_witness_rejected
  • missing_governance_voter_witness_rejected
  • witness_correct_key_wrong_body_rejected

CI 1

Cross-references

DC-TXV-02DC-TXV-05

Strengthened in

PHASE4-B2

Attack rationale

Prevents witness reuse and substitution.

Evidence notes

Cardano-specific: era-specific binding rules vary by era (Byron, Shelley, Alonzo, Conway each have different witness requirements).