DC-EPOCH-19
DC derived declaredSelf-sustaining live ledger epoch evolution. After every durable selected-chain block, the node holds enough durable, replayable state to derive EVERY future epoch transition -- rewards, stake snapshots, pool/cert lifecycle, and leadership authority -- WITHOUT another Mithril import, an external CLI oracle, or a manually injected authority. The mechanism is ONE total, deterministic, replay-equivalent transition apply_selected_block(prior EpochAccumulator, canonical block, selected ctx) -> next | structured error, applied per durable admitted block, that evolves the non-UTxO ledger facts (cert state + delegations + pool/future-pool/retirement maps + per-epoch block_production + epoch_fees + reserves/treasury pots + mark/set/go snapshots + the consensus-relevant protocol/governance state + the pending reward update) in cardano-ledger NEWEPOCH order at each crossed boundary (apply the completed RUPD over the just-finished epoch's accumulated counts/fees AFTER that epoch's withdrawals -> SNAP rotate mark/set/go -> POOLREAP -> enactment/reset) and the within-epoch tx/cert effects per block. (a) BOUNDED MEMORY: the large UTxO/stake set stays in the disk-backed reduced checkpoint (no permanent full UTxO map in RAM, no full-chain replay per block, no full-accumulator clone per block); the accumulator is the small non-UTxO state machine, persisted incrementally with a boundary checkpoint + at-most-one-epoch within-epoch replay. (b) REPLAY-EQUIVALENT: restart + rollback re-materialize the IDENTICAL accumulator + authority from the durable selected chain via the same fold. (c) FAIL-CLOSED: a malformed block, unknown authority-path cert/governance variant, pot/reward/count overflow, missing input, or boundary gap is terminal. (d) BOOTSTRAP-TRANSITION: seed+1 (MARK bridge, DC-EPOCH-15) and seed+2 (snapshot nesRu, DC-EPOCH-18) remain the bootstrap-transient seeds; the native RUPD takes over at the first boundary whose entire input epoch was followed. LIVE GROUND TRUTH: a fresh native bootstrap at N crosses N+1->N+2->N+3 with self-derived rewards + snapshots (byte-exact vs the live cardano-node at >=2 self-derived boundaries), restarts in each phase, survives a controlled rollback -- no Mithril re-import / oracle / injection -- and bounded memory holds across the run.
- Source
docs/clusters/LIVE-LEDGER-EPOCH-TRANSITION/cluster.md + SLICE-S1-authority-transition-contract.md. The authority-surface trace (2026-06-27) confirmed the live follow validates headers + stores blocks + advances the reduced checkpoint + the Praos nonce, but does NOT evolve rewards/block-production/fees/snapshot-rotation -- so post-bootstrap future authority runs out. Preserves MEM-OPT (no full live UTxO). Operational venue detail in the untracked competition-secret runbook.
- Introduced in
- LIVE-LEDGER-EPOCH-TRANSITION-S1
Enforcement trace
Code
no enforcing code — gap
Tests 2
- ade_ledger::epoch_accumulator::tests (codec round-trip byte-identical + non-canonical/unknown-version/pre-Conway-era/trailing-bytes fail-closed; boundary_rotates_block_production_two_buffer; within_epoch_withdrawal_then_boundary_pays_fresh_reward; pending_reward_update_applied_once_then_cleared; missing_boundary_stake + boundary_gap fail-closed; apply_selected_block_on_real_conway_block_is_deterministic; replay_equivalence_via_durable_checkpoint_across_a_boundary)
- ade_node::node_lifecycle::ce4a_continuous_self_sufficiency PRODUCTION-LOOP EVIDENCE (#[ignore] slow runs, NOT CI gates): CE-4B ce4b_three_boundary_continuous_self_sufficiency -- LITERAL three-boundary 1340->1341->1342->1343 (seed+2 -> seed+5) in one continuous run, self-sufficient (promotion-certified frozen leadership through 1344; no re-import / CLI oracle / seed-window replay / materialize_bootstrap_into; no fail-closed halt; c5bdc064); CE-4A.1 drive (1340->1342, 9c6fc3c4); #12 ce4a_3_restart_only_equivalence + #13 ce4a_3_r2_rollback_refold_equivalence (warm restart + controlled rollback + production ResetAndRefold == uninterrupted byte-identical; fd3826fd); CE-4A.2 drive_capture_at (POST-1341/1342 byte-exact vs cardano, af3dc9c7). See docs/clusters/LIVE-LEDGER-EPOCH-TRANSITION/CE-4-MILESTONE-DECLARATION.md