MVP lifecycle
Release target: every success and rejection must replay through model → UPLC → emulatorEvidence-gated delivery, not document-driven completion.
The source-stable model evidence records 71 passing tests, 1,083,082 assertions, direct register/delegate/delegated-deposit/queue coverage, a 15-vector pinned EigenLayer v1.12.0 vault arithmetic differential, and a finite depth-five one-owner/two-operator explorer with 11,550 attempted edges across 2,894 unique state/slot nodes. Its 8,174 expected rejections include 3,375 action-specific single-fault transaction-fact mutations paired with every planned-success non-create edge; each rejects exactly without state interference and the report explicitly declares that these rejected fact edges never create nodes. The accepted graph still covers 764 registrations, 288 delegations, delegation to either operator, delegated deposit, partial/full queue, and attributed completion paths. A deterministic source-inventory corpus binds ten pinned AllocationManager files, 7 interfaces, 21 errors, 11 structs, 15 events, 51 functions, 28 selected test families with 165 named tests, and 31 named but unexecuted Certora declarations. A separate 27-vector exact-bigint TypeScript oracle plus 821 bounded magnitude/rounding and tail checks now executes selected source-derived AllocationManager rules. It explicitly does not execute the pinned Solidity or select Cardano behavior. Ten unresolved local service/set/allocation/exit actions remain absent from the accepted action union and reject with V016_INVALID_STATE at derivation and execution without state interference. The operator-aware 10,000-attempt campaign adds 8,506 accepted transitions, 1,494 expected rejections, and 920 transaction-fact mutations. A strict offline audit binds the canonical manifests, current source hashes, run options, logs, fact/scenario partitions, and counters. A fresh same-host checkout reproduced exact source revision fcdfd2d782ce90fb1919522453df436c3ac73262; all five deterministic model/formal projections matched in 212,769 ms. The source-bound release report passes PPA-10 only, fails 12 gates, and records NOT_RELEASED. Independent reproduction, validator implementation, UPLC evaluation, Blaze emulation, implementation refinement, and public-testnet execution remain open.
| Phase | State | Exit evidence | Primary source |
|---|
Progress discipline
- Resolve value-bearing choices in
docs/DECISION_LOG.mdbefore implementing their paths. - Keep every incomplete validator and policy fail-closed.
- Advance status only with source-bound, reproducible evidence using the repository vocabulary.
- Update this explorer in the same change as architecture, transition, phase, or evidence changes.
Claims stop exactly where the evidence stops.
The project uses a deliberately strict vocabulary so pure models, transaction construction, evaluator execution, emulator acceptance, public-ledger inclusion, formal proofs, and release decisions cannot be conflated.
Release tiers
- Pre-production alpha: generated UPLC and Blaze emulator evidence, explicitly not public-chain execution.
- Testnet-executed alpha: named public-testnet transactions, reconstructed state, and exercised operational recovery.
- Production: additional soak, independent review, deployed governance controls, monitoring, and budget headroom.