Implement ADR-004 Phase 1 - the Ancora (Latin for "anchor") contract
provides Merkle root anchoring for off-chain data with proof verification:
Core Features:
- Data root management: Track Merkle roots per VitaID and DataType
(Medical, Education, Investment, Documents, Custom)
- Provider registry: Committee-managed authorization for data providers
with rate limiting and cooldown periods
- Proof verification: Verify Merkle proofs against anchored roots
supporting SHA256, Keccak256, and Poseidon algorithms
- GDPR erasure: Right-to-be-forgotten workflow with pending/confirmed/denied
status and configurable grace periods
- Data portability: Generate attestations for cross-system data transfer
Contract Methods:
- registerProvider/revokeProvider: Committee authorization for providers
- updateDataRoot: Anchor new Merkle root with version tracking
- verifyProof: Validate leaf inclusion against anchored root
- requestErasure/confirmErasure/denyErasure: GDPR erasure workflow
- generatePortabilityAttestation: Data portability support
Cross-Contract Integration:
- Vita: Identity verification via ExistsInternal/OwnerOfInternal
- Tutus: Committee authority for provider management
State Types (pkg/core/state/state_anchors.go):
- RootInfo: Merkle root metadata with version and algorithm
- ErasureInfo: GDPR erasure request tracking
- ProviderConfig: Authorized provider configuration
- StateAnchorsConfig: Global contract settings
- Enums: DataType, TreeAlgorithm, ErasureStatus
Contract ID: -27
Tests (15 test cases):
- Configuration and query tests
- Provider registration/revocation tests
- Authorization and error handling tests
- Data type and algorithm validation tests
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Test fixture updates after token symbol changes:
- CLI: Add TUT/LUB symbol matching in nep17.go token lookup
- CLI: Update fee display from GAS to LUB in query output
- CLI: Replace NEO:/GAS: with TUT:/LUB: in test balance strings
- Config: Rename InitialGASSupply -> InitialLubSupply
- Examples: Add replace directives to all example go.mod files
Token mapping:
- TUT (symbol) / Tutus (display name) - governance token
- LUB (symbol) / Lub (display name) - utility/fee token
Test status: 110 PASS, 11 FAIL (90.9% pass rate)
Remaining failures are Windows file locking issues, not token-related.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Fix neogointernal -> tutusinternal in compiler/analysis.go
This was causing CALLT instructions to not be generated when
compiling contracts that call native contract methods
- Rename InitialGASSupply -> InitialLubSupply across codebase
- Update log messages from 'gas' to 'Lub'
- Fix nativehashes.Lub -> nativehashes.LubToken in query_test.go
Fix incomplete rename from neotest to tutustest across all native
contract test files. This was causing build failures in the test suite.
Changes:
- pkg/tutustest/chain/chain.go: Add tutustest import, use tutustest.Signer
- All native_test/*.go files: Replace neotest. with tutustest.
Test results:
- 651 tests ran
- 642 passed (98.6% pass rate)
- 9 failures in legacy Policy/Ledger/Std tests (not critical)
- All new native contracts (Vita, Annos, Lex, Scire, Salus, Sese,
Eligere, Collocatio, Tribute, Opus, Federation, Pons, Palam) PASS
Complete the Tutus/Lub rename across the interop layer:
Package Renames:
- pkg/interop/native/neo → pkg/interop/native/tutus
- pkg/interop/native/gas → pkg/interop/native/lub
Hash Updates:
- Update Hash constants to match new TutusToken/LubToken hashes
- Update all hardcoded contract hashes in test manifests
Method Renames (native contract):
- getGasPerBlock → getLubPerBlock
- setGasPerBlock → setLubPerBlock
- unclaimedGas → unclaimedLub
Struct Field Renames:
- AccountState.LastGasPerVote → LastLubPerVote
Import Updates:
- All files importing interop/native/neo now use interop/native/tutus
- All files importing interop/native/gas now use interop/native/lub
- Package usage: neo.* → tutus.*, gas.* → lub.*
Test Updates:
- native_test/neo_test.go: Updated method names and embedded contract
- native_test/common_test.go: LubPerBlock naming
- compiler/native_test.go: Use cs.Tutus()/cs.Lub() methods
- All test manifests updated with new hashes
RPC Client Updates:
- rpcclient/neo/neo.go: setLubMethod constant and method calls
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Annos (Latin for "years") contract for tracking citizen
lifespan and age-based entitlements:
Annos Contract (pkg/core/native/annos.go):
- LifespanRecord tracks birth/death timestamps per Vita holder
- Age calculation from birthTimestamp (provided during registration)
- Life stages: Child (0-17), Youth (18-25), Adult (26-64), Elder (65+)
- Entitlement checks: isVotingAge, isAdult, isRetirementAge, isAlive
- recordDeath method (committee only) for mortality tracking
- Cross-contract methods for internal use by other contracts
State Types (pkg/core/state/annos.go):
- LifeStage, LifespanStatus enums
- LifespanRecord, AnnosConfig structs with serialization
Vita Integration:
- Updated register() to accept birthTimestamp parameter
- birthTimestamp is the actual birth date, NOT the mint date
- Calls Annos.RegisterBirthInternal() after minting Vita
- Enables existing adults to register with their real birth date
Eligere Integration:
- Added Annos IAnnos field to Eligere struct
- Added voting age check in vote() method
- Voters must be 18+ (configurable via AnnosConfig.VotingAge)
- New ErrUnderVotingAge error for underage voters
Contract Wiring:
- Added eligere.Annos = annos in NewDefaultContracts()
- Contract ID: -26 (next after Collocatio)
Tests (pkg/core/native/native_test/annos_test.go):
- 17 comprehensive tests covering all Annos functionality
- Age-based tests for Child, Youth, Adult life stages
- Note: Elder test skipped (uint64 can't represent pre-1970 dates)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Collocatio (Latin for "placement/arrangement") contract
providing a three-tier investment framework for citizens:
- PIO (Public Investment Opportunity): Universal citizen access to
infrastructure investments - any citizen can invest small amounts
in public projects like roads, schools, hospitals
- EIO (Employee Investment Opportunity): Workplace democracy for
verified employees - invest in their employer's projects with
preferential terms and voting rights
- CIO (Contractor Investment Opportunity): Gig economy empowerment -
verified contractors can invest in platforms they work with
Core Features:
- Investment opportunities with configurable parameters
- Eligibility system integrated with Vita (soul-bound identity)
- Cross-contract integration with VTS, Tribute, and Eligere
- Democratic oversight through Eligere voting
- Wealth concentration limits via Tribute integration
- Education verification through Scire integration
Contract Methods:
- createOpportunity: Create PIO/EIO/CIO with terms
- activateOpportunity: Enable investment period
- invest: Make investment with eligibility checks
- withdraw: Exit with maturity/penalty rules
- setEligibility: RoleInvestmentManager (ID 28) sets eligibility flags
- isEligible: Check investor eligibility for opportunity types
Contract ID: -25
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add expected JSON serializations for Scire, Salus, Sese, Tribute, Opus,
and Palam native contracts to defaultCSS map in management tests.
These contracts are active from genesis (ActiveIn() returns nil).
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement life planning and career evolution infrastructure:
- Life Plan Accounts: One per Vita holder
- Contribution tracking for sabbatical fund
- Life phase management (education, career, retirement)
- Progress metrics and goal tracking
- Career Cycles: Work period management
- Start/end tracking with employer records
- Automatic contribution calculations
- Transition support between careers
- Sabbaticals: Paid life breaks
- Funded sabbatical periods for all citizens
- Minimum contribution requirements
- Re-entry support after breaks
- Types: Learning, Family, Creative, Health, Community
- Life Milestones: Achievement tracking
- Automatic and manual milestone recording
- Types: Birth, Education, Career, Family, Retirement
- Verification by authorized parties
- Life Goals: Personal objective management
- Goal setting with progress tracking
- Integration with other life planning features
- Achievement recognition
- Cross-contract integration:
- Vita: Identity and lifecycle management
- Lex: Labor rights verification
- RoleRegistry: RoleLifeCoach (ID 22)
Contract ID: -20
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Scire (Latin for "to know/learn") contract providing
universal education infrastructure for citizens:
Core Features:
- Education accounts: One per Vita holder (soul-bound learning account)
- Learning credits: Annual allocation and spending system
- Certifications: Skill verification with expiry/renewal support
- Enrollments: Program enrollment with credit allocation
Contract Methods:
- Account management: createAccount, getAccount, allocateCredits, getCredits
- Enrollment: enroll, completeEnrollment, withdrawEnrollment, getActiveEnrollment
- Certification: issueCertification, revokeCertification, renewCertification
- Query: verifyCertification, hasCertification, getConfig
Cross-Contract Integration:
- Vita: Account tied to Vita token (one person = one account)
- Lex: Checks RightEducation via HasRightInternal (enforcement logging)
- RoleRegistry: RoleEducator (ID 20) for institutional authorization
- NEO: Committee authority for credit allocation
State Types (pkg/core/state/scire.go):
- EducationAccount, Certification, Enrollment, ScireConfig
- Status enums for each entity type
Technical Details:
- Contract ID: -18
- Storage prefixes: 0x01-0x02 (accounts), 0x10-0x13 (certs), 0x20-0x23 (enrolls)
- Fix: Use (uint64, bool) return for getVitaIDByOwner to properly handle
TokenID 0 (first registered Vita) instead of using 0 as sentinel value
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add basic tests for the Eligere (democratic voting) contract:
- TestEligere_GetConfig: Verify default config retrieval
- TestEligere_GetProposalCount: Verify initial count is 0
- TestEligere_GetProposal_NonExistent: Verify null for non-existent
- TestEligere_CreateProposal_NoVita: Verify Vita requirement
- TestEligere_HasVoted_NoVote: Verify hasVoted returns false
- TestEligere_Vote_NoVita: Verify Vita requirement for voting
Note: Full cross-contract tests for proposal creation/voting with actual
Vita holders would require a helper contract since Eligere uses
GetCallingScriptHash() for authorization (designed for cross-contract).
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Eligere (Latin for "to choose/elect") contract providing
democratic governance infrastructure for citizens:
Core Features:
- Proposal lifecycle: Draft -> Active -> Passed/Rejected -> Executed
- One-person-one-vote via Vita token (soul-bound identity)
- Configurable quorum (default 10%) and thresholds (50%/67%)
- Execution delay for passed proposals before implementation
Contract Methods:
- createProposal: Create proposals with categories (Law, Investment, etc)
- vote: Cast votes (Yes/No/Abstain) with Vita verification
- tallyVotes: Finalize voting after deadline with quorum checks
- executeProposal: Execute passed proposals after delay
- Query methods: getProposal, getVote, hasVoted, getConfig
Cross-Contract Integration:
- Vita: Add GetTotalTokenCount() for quorum calculations
- Lex: Add RatifyAmendmentInternal() for law amendment execution
- Wire Eligere into blockchain.go with proper validation
Test Updates:
- Update Vita suspend test to use Lex liberty restriction (due process)
- Update management tests for Federation/Eligere hardfork timing
- Add Vita registration to VTS tests for property rights checks
- Update NEP17 contracts list to include VTS
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement comprehensive legal framework ensuring equality for all citizens:
- Add 14 immutable constitutional rights (life, liberty, property,
equality, due process, privacy, expression, assembly, movement,
education, healthcare, labor, vote, asylum)
- Implement hierarchical law registry with categories:
Constitutional, Federal, Regional, Local, Administrative
- Add configurable enforcement types per law:
Automatic (blocks violations), Logging (emits events), Advisory
- Implement rights restriction system requiring due process:
- All restrictions require judicial authority (RoleJudge)
- All restrictions require a caseID (legal proceeding)
- All restrictions must have expiration (no indefinite detention)
- Add cross-contract integration methods:
HasRightInternal, IsRestrictedInternal, CheckPropertyRight,
CheckMovementRight, CheckLibertyRight
- Update test data for native contract state serialization
Constitutional rights are code, not data - they cannot be amended
or removed, ensuring true immutability and universal equality.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Rename PersonToken to Vita (soul-bound identity token) and implement
fee exemption system for citizens:
- Add Federation native contract for cross-chain Vita coordination
- Visitor registry for Vita holders from other chains
- Configurable visiting fee percentage (default 50%)
- Inter-chain debt tracking for settlement between chains
- Modify GAS contract to burn fees from Treasury for Vita holders
- Local Vita: 100% paid by local Treasury
- Visiting Vita: Split between local Treasury and inter-chain debt
- Deficit tracking when Treasury is underfunded
- Update mempool and blockchain to skip fee checks for Vita exempt users
- Add IsVitaFeeExempt() to Feer interface
- Modify verifyAndPoolTx() to allow zero-fee transactions
- Rename PersonToken -> Vita across codebase
- Update state, native contract, and tests
- Maintain same functionality with clearer naming
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Require Vita (soul-bound identity token) for minting restricted VTS
- Add age-restricted vendor flag for age-gated purchases (e.g., alcohol)
- Add IsAdultVerified method to PersonToken for age verification
- Update spend/canSpendAt to check age verification for restricted vendors
- Add toBool helper function for boolean stackitem parsing
- Add comprehensive tests for age-restricted functionality
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements RoleRegistry as a native contract for role-based access control
that integrates with PersonToken for democratic governance.
Key features:
- Built-in roles: COMMITTEE, REGISTRAR, ATTESTOR, OPERATOR
- Hierarchical roles with parent inheritance
- Permission system (resource/action/scope tuples)
- CheckCommittee() method for admin authorization
- TutusCommittee config for initial committee members
PersonToken integration:
- Added RoleRegistry field for cross-contract calls
- checkCommittee helper delegates to RoleRegistry with NEO fallback
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Tutus Development