Cardano Modular Restaking

Evidence-gated delivery, not document-driven completion.

The source-stable model evidence records 105 passing tests across 20 files, 1,085,613 assertions, seven accepted vault/operator actions, and a finite depth-five explorer with 11,550 attempted edges across 2,894 unique state/slot nodes. A canonical one-million profile and a separately invoked, separately seeded two-million profile pass 3,000,000 reconciled attempts through the same TypeScript planner, candidate-fact validator, and full invariant machinery; they remain modeled only. Selected-source inventories and negative readiness boundaries keep 60 unresolved or prohibited later seams absent and fail closed. The pinned Catalyst stack and project guards/codecs provide 106 preserved non-protocol UPLC evaluations; F-001 remains open and Forestry scope is maintenance-only until an immediate consumer exists. The source-bound vault and operator/delegation reports provide 78 evaluator-only protocol-transition relations, the v1 protocol codec provides 44 evaluator-only UPLC cases plus 22 exact Haskell/TypeScript CBOR matches, the strict V3 context envelope provides 12 validator-context evaluations with zero terminal acceptances under D-030, and the child identity-name kernel provides 17 evaluations with nine exact TypeScript/Plutarch name matches and zero policy acceptances under D-031. Six exact abstract vault/operator skeletons stop before build because public script artifacts are unavailable. Pinned Blaze builds/tests pass and one generic non-protocol transfer is constructed, signed, and emulated. No protocol transition has been constructed, Blaze-emulated, or testnet-executed. The strict release report remains NOT_RELEASED: PPA-08 and PPA-10 pass, while eleven gates fail.

The middleware corpus closes the reachable Solidity graph from 78 source files, 97 test files, and two scripts at 310 files and 1,402 import edges with zero unresolved, while recording 121 normalized source declarations, 618 named source functions, 116 test families, and 800 named tests. Its 921 exact review records still accept zero Cardano behavior. Hash-pinned Foundry v1.3.6 and Solidity 0.8.27 compile all 310 files; a fixed-seed non-fork EVM run records 839 passing and six skipped. A deterministic overlay reproduces the upstream assertion mismatch and confirms the transparent proxy's expected admin rejection before the call reaches Allowlist. The 43-path semantic triage resolves 20 paths as source-compatible, including the bounded 31-importer IStrategy consumer surface, classifies three paths as source-incompatible, and queues 20 for manual semantic review. The queue-slash review binds a differing result (1 versus 0) under exact WAD arithmetic. The slasher review binds both manager/interface revisions, the 58-import/50-importer fanout, legacy slasher=avs conversion, separate slasher call, and three appointee-selector bindings. The exact source-bound strategy, hook, queue-slash, and allocation/slasher sources are hash-bound but unexecuted by these reviews. These findings are not storage-layout proofs, bytecode equivalence, Cardano translation, or approved divergence. This is partial upstream EVM evidence, not Cardano compatibility or execution.

The release-scale audit binds the one-million digest model-fnv1a64:315fda939f59125c and independent two-million digest model-fnv1a64:a08f28ac462fdcd0, exact profile options, eight rejection codes, all seven accepted actions, current source hashes, and zero stronger-evidence counts. The local and remote contracts compare fourteen semantic projections, including the v1 codec, context envelope, and child identity-name kernel. Clean clones install the exact offchain/bun.lock before importing Blaze-backed codec code; the next exact source checkpoint requires twelve local command records and thirteen remote command records. No remote report is accepted until an updated run, download, and strict import checks complete; even then, the bounded subset cannot close PPA-13 alone. D-017/D-019 define only the v1 vault/operator topology and codec; D-030 and D-031 isolate the timing and policy-symbol blockers. Public validator/policy artifacts, protocol construction, positive validator UPLC, Blaze lifecycle execution, official V4 support, and testnet evidence remain absent. Release status remains NOT_RELEASED. Independent rebuild contract ↗

Claims stop exactly where the evidence stops.

The project uses a deliberately strict vocabulary so pure models, transaction construction, evaluator execution, emulator acceptance, public-ledger inclusion, formal proofs, and release decisions cannot be conflated.