ade_ledger

The functional core (ledger half): stateless ledger rules for every era; B1 block-validity verdict; B2 tx-validity + mempool admission; the single BLUE wire-ingress chokepoint mempool::ingress::mempool_ingress; the BLUE producer authority; the single body-hash authority; the receive/rollback authorities; the canonical UTxO state + the owned-lookup seam / bounded overlay / versioned v2 fingerprint machinery; the snapshot/bootstrap-anchor/genesis/seed-epoch authorities; the reduced-view core (stake_ref/pointer_resolve/reduced_*/reduced_epoch_view/bootstrap_manifest); the native Mithril V2 decoders (ledgerdb_state/ledgerdb_tables/mithril_utxo_materialize); the value/param types (value, pparams::MinUtxoRule). NEW this refresh — the self-sustaining-ledger BLUE core (LIVE-LEDGER-EPOCH-TRANSITION + REDUCED-VALIDATION-BOUNDARY-PLANE + CE3D + Conway governance): epoch_accumulator (the small durable non-UTxO authority + the apply_selected_block transition contract — LedgerState MINUS full UTxO PLUS the two-buffer nesBprev/nesBcur model; DC-EPOCH-19/21/24); frozen_leadership (the self-contained FrozenLeadershipPoolDistr = cardano's nesPd; DC-EPOCH-25); reduced_boundary (the typed ReducedBoundaryProjection a track_utxo=false follower produces at a Conway boundary); rollback/admission (the BLUE admit_rollback recovery rail — LIVE-LEDGER-EPOCH-TRANSITION S5); bootstrap_bridge (the ONE-TIME seed→seed+1 BootstrapNextEpochAuthority; DC-EPOCH-15); bootstrap_reward_update (the seed→seed+1 reward update carrying the certified snapshot's feeSS/deltaF; DC-EPOCH-18/23); cred (the single stake-credential CBOR-discriminant authority, functions only); the Conway ratification/enactment growth in governance.rs. ade_ledger is 220 → 275 (+55) — all pure.

275 public types. Load-bearing carried: BlockValidityError, BlockVerdict, LedgerState, UTxOState, TxOut, WalEntry (closed — AdmitBlock \| SeedEpochConsensusInputsImported \| RollBack \| EpochConsensusViewActivated), LedgerFingerprint, MempoolState, ProducerTick, ForgedBlock, SeedEpochConsensusInputs (+security_param: u64 this refresh — S2 sidecar v6, SEED_CINPUT_SCHEMA_VERSION = 6, FIELDS_OUTER 14), BootstrapAnchor, RecoveredAnchorPoint, the reduced-view / native-Mithril families, value::{MultiAsset, AssetName, Value}, pparams::MinUtxoRule. NEW this refresh: epoch_accumulator::{EpochAccumulator, SeedError, SelectedBlockCtx, LedgerTransitionError, EpochBoundaryEffect, BoundaryFreezeInputs, BoundaryBaseStake, PostRupdRewards<'a>, EpochAccumulatorCodecError}; frozen_leadership::{LeadershipPoolEntry, FrozenLeadershipPoolDistr, FrozenLeadershipError}; reduced_boundary::{ReducedBlockWindow, ReducedEpochProgress, ReducedCertProjection, ReducedGovernanceProjection, ReducedBoundaryProjection, FullEpochBoundaryResult, LedgerBoundaryVerdict, LedgerValidityCapability}; rollback::admission::{RollbackPoint, RollbackAdmissionError, RecoveryAction}; bootstrap_bridge::{BridgeSourceKind, BootstrapNextEpochAuthority, BridgeCodecError}; bootstrap_reward_update::{BootstrapRewardUpdate, BootstrapRupdError}; the Conway-governance governance::{RatificationResult, RatificationObservation, RemovalCause, RemovedProposal, DepositReturn, PParamsDelta, PrevPParamActionDelta, ConwayGovernanceEpochPlan, MalformedGovDetail, UnsupportedActionKind, GovernanceTerminal, ConwayGovernanceEpochInput<'a>, ExecUnitsParamUpdate, ExecUnitsUpdateError, EnactmentEffects, …}.

Canonical decoded blocks/txs/certs/snapshots; block_validity produces the per-block verdict + post-state; mempool_ingress is the sole BLUE chokepoint; the reduced-view + native-Mithril decode points (ledgerdb_state::decode_native_nonutxo_state, ledgerdb_tables::read_txout, mithril_utxo_materialize::materialize_tables_to_utxo, bootstrap_manifest::verify_and_import_cert_state, EpochConsensusView::{bind, verify_canonical_hash, matches}). NEW: epoch_accumulator::apply_selected_block(prior, block_bytes, ctx) — the total/deterministic/replay-equivalent non-UTxO transition (boundary effects in cardano NEWEPOCH order FIRST, then within-epoch cert/withdrawal/issuer/fee effects), reusing rules::apply_epoch_boundary_with_registrations + process_block_certificates + delegation::apply_bootstrap_reward_deltas; build_boundary_mark_snapshot (the boundary mark = registered+delegated credential IFF combined active stake NON-ZERO — DC-EPOCH-24); frozen_leadership::to_pool_distr_view (leadership PoolDistr read DIRECTLY from the frozen distr); reduced_boundary (the typed reduced projection); rollback::admission::admit_rollback (pure/total/fail-closed target admissibility); bootstrap_bridge (seed+1 view from the imported MARK snapshot ALONE); bootstrap_reward_update (the seed-boundary reward update + deltaF fee-pot reduction).

All carry-forward ledger prohibitions (no I/O, no clock, closed cert/governance enums, single body-hash recipe; producer::* fences; rollback::materialize the SOLE rolled-back-state authority; block_validity the single block verdict authority; the MEM DC-MEM-05..10 fences; the reduced-view DC-EVIEW-02..07/09 fences; the native-Mithril DC-MITHRIL-01/06 fences; DC-LEDGER-VALUE-01 non-negative Word64 output-quantity domain; DC-LEDGER-PARAMS-01 era-faithful MinUtxoRule). NEW this refresh: (epoch_accumulator, DC-EPOCH-19/21) apply_selected_block MUST derive EVERY future epoch transition WITHOUT another Mithril import / CLI oracle / injected authority; it carries ONLY non-UTxO facts (the stake-bearing UTxO stays in the disk-backed reduced checkpoint) — it MUST NOT hold a full UTxO map, and the boundary MUST reuse the single canonical apply_epoch_boundary_with_registrations POOLREAP block (future-pool adoption, reap, deposit refund, delegation-clear) in the cardano NEWEPOCH order, never a parallel reimplementation; the two-buffer model MUST feed prev_* (nesBprev) to the boundary, not the just-finished nesBcur. (frozen_leadership, DC-EPOCH-25) the leadership PoolDistr (nesPd) MUST be answered by the self-contained FrozenLeadershipPoolDistr and by NOTHING else — to_pool_distr_view reads stake AND VRF DIRECTLY from it, NEVER from active cert_state.pool.pools / the go snapshot / future_pools / the retiring map; it MUST include zero-stake registered pools AND retired/POOLREAP'd pools whose VRF is absent from active state (deriving leadership from go + active params is a DISPROVEN hypothesis). (reduced_boundary, I-RVB-1) a ReducedBoundaryProjection and a FullEpochBoundaryResult are DISTINCT, non-interchangeable types — the projection is NOT a LedgerState, cannot be widened into one, cannot be serialized as an accumulator snapshot, and cannot be fingerprinted as full authority; a track_utxo=false boundary MUST NOT emit a reward-only stub mark (proven to leak into recovery persistence + WAL fingerprints). (rollback::admission, LIVE-LEDGER-EPOCH-TRANSITION S5) admit_rollback MUST fail closed (typed RollbackAdmissionError, never a silent rematerialization) on an inadmissible target — a split lineage, a rollback deeper than the immutable point (k-BLOCK-bound = tip − k), or below the sealed anchor; it is NOT fork-choice (admits/rejects one target, never selects among competing forks). (bootstrap_bridge, DC-EPOCH-15) the seed→seed+1 bridge view MUST come from the imported snapshot's MARK stake snapshot ALONE (source_kind = ImportedMarkSnapshot), never nesPd / a window replay / an oracle; the selector reads target_epoch == seed+1 ⇒ bridge, ≥ seed+2 ⇒ replay. (bootstrap_reward_update, DC-EPOCH-18/23) the one-shot seed-boundary reward update MUST carry the certified snapshot's feeSS (deltaF) and reduce the accumulated fee pot by it EXACTLY ONCE. (governance, DC-GOV-01 / DC-CINPUT-07 — declared) a removed governance proposal's deposit is refunded to its recorded return address ONLY when Ade can PROVE from canonical state + Conway rules that it could NOT have ratified or enacted, else fail closed (terminal); the Conway deposit params (gov_action_deposit/drep_deposit/drep_activity) are DECODED from the certified snapshot's Conway curPParams at the verified positions, never defaulted.

ade_testkit, ade_core_interop, ade_runtime (reduced-window driver + the epoch-accumulator durable advance + native-Mithril assembly + the durable reduced checkpoint), ade_node (epoch-activation orchestration + frozen-leadership promotion + native FirstRun + the S2 seed-sidecar codec via SeedEpochConsensusInputs).

ade_types (incl. mary::value::OutputAssetQuantity), ade_crypto (utxo_set_commitment + blake2b_256), ade_codec (address::pointer::*, the cbor::* primitives, wrap_tag24), ade_plutus, ade_core (consensus::{SecurityParam, events::Point, vrf_cert::ActiveSlotsCoeff, era_schedule::*}), minicbor, num-bigint, num-integer, num-traits. Dev-dep: ade_testkit.

ade_ledger::block_validity::*, ade_ledger::state::LedgerState, ade_ledger::utxo::{TxOut, UTxOState}, ade_ledger::{fingerprint, utxo_overlay, pre_resolve, tx_validity, mempool, producer, receive, rollback, snapshot, wal, seed_consensus_inputs, bootstrap_anchor, recovered_anchor_point}::*, the reduced-view + native-Mithril families, NEW: ade_ledger::epoch_accumulator::{EpochAccumulator, apply_selected_block, build_boundary_mark_snapshot, EpochBoundaryEffect, LedgerTransitionError}, ade_ledger::frozen_leadership::{FrozenLeadershipPoolDistr, LeadershipPoolEntry, to_pool_distr_view, from_seed_epoch_consensus_inputs, encode_frozen_leadership, decode_frozen_leadership}, ade_ledger::reduced_boundary::{ReducedBoundaryProjection, LedgerBoundaryVerdict, LedgerValidityCapability}, ade_ledger::rollback::admission::{admit_rollback, RollbackAdmissionError, RecoveryAction}, ade_ledger::bootstrap_bridge::{BootstrapNextEpochAuthority, BridgeSourceKind}, ade_ledger::bootstrap_reward_update::BootstrapRewardUpdate, ade_ledger::governance::*.

block_validity/, tx_validity/, mempool/, cert_classify/, consensus_view.rs, delegation.rs (DelegationState/CertState + apply_bootstrap_reward_deltas), governance.rs (Conway ratify/enact authority — grew this refresh), producer/, block_body_hash.rs, receive/, rollback/ (incl. admission.rs — the S5 recovery rail), snapshot/ (incl. cert_state.rs, chain_dep.rs), epoch.rs, rules.rs (apply_epoch_boundary_with_registrations — the single canonical POOLREAP block), wal/ (event.rs — the 4-variant closed WalEntry), utxo.rs + utxo_overlay.rs + pre_resolve.rs + fingerprint.rs (MEM), value.rs, pparams.rs, the reduced-view stake_ref.rs/pointer_resolve.rs/reduced_utxo.rs/reduced_advance.rs/reduced_aggregate.rs/reduced_snapshot.rs/reduced_epoch_view.rs/bootstrap_manifest.rs, the native-Mithril mithril_utxo_materialize.rs/ledgerdb_state.rs/ledgerdb_tables.rs, seed_consensus_inputs.rs (the GREEN v6 sidecar codec), NEW: epoch_accumulator.rs, frozen_leadership.rs, reduced_boundary.rs, bootstrap_bridge.rs, bootstrap_reward_update.rs, cred.rs, state.rs, plutus_eval.rs.