Implement ADR-004 Phase 1 - the Ancora (Latin for "anchor") contract
provides Merkle root anchoring for off-chain data with proof verification:
Core Features:
- Data root management: Track Merkle roots per VitaID and DataType
(Medical, Education, Investment, Documents, Custom)
- Provider registry: Committee-managed authorization for data providers
with rate limiting and cooldown periods
- Proof verification: Verify Merkle proofs against anchored roots
supporting SHA256, Keccak256, and Poseidon algorithms
- GDPR erasure: Right-to-be-forgotten workflow with pending/confirmed/denied
status and configurable grace periods
- Data portability: Generate attestations for cross-system data transfer
Contract Methods:
- registerProvider/revokeProvider: Committee authorization for providers
- updateDataRoot: Anchor new Merkle root with version tracking
- verifyProof: Validate leaf inclusion against anchored root
- requestErasure/confirmErasure/denyErasure: GDPR erasure workflow
- generatePortabilityAttestation: Data portability support
Cross-Contract Integration:
- Vita: Identity verification via ExistsInternal/OwnerOfInternal
- Tutus: Committee authority for provider management
State Types (pkg/core/state/state_anchors.go):
- RootInfo: Merkle root metadata with version and algorithm
- ErasureInfo: GDPR erasure request tracking
- ProviderConfig: Authorized provider configuration
- StateAnchorsConfig: Global contract settings
- Enums: DataType, TreeAlgorithm, ErasureStatus
Contract ID: -27
Tests (15 test cases):
- Configuration and query tests
- Provider registration/revocation tests
- Authorization and error handling tests
- Data type and algorithm validation tests
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Update test expectations for .one TLD block addition at index 14:
Block Definitions:
- Add blockAddRoot and txAddRoot for block 14 (add .one root to NNS)
- Add blockGASBounty3 (block 18) and blockGASBounty4 (block 24)
Sent Array:
- Add entry for block 14 addRoot transaction fees
- Total Sent entries: 26 (was 25)
Received Array:
- Add GAS bounty entries for blocks 18 and 24
- Total Received entries: 9 (was 8)
Index Updates:
- Sent indices in limit tests: shifted by +1 for indices >= 12
- Received indices in limit tests: shifted by +1 for indices >= 1
- checkNep17Transfers: updated to include all 26 sent and 9 received
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Update NEP11 transfer Index values in server_test.go to account for
.one TLD registration block added at index 14:
- 21 → 22 (NFSO transfer block)
- 18 → 19 (NFSO mint block)
- 14 → 15 (NNS register block)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add .one TLD registration to NNS at block #14
- Change domain from neo.com to tutus.one
- Update all block indices after #14 (+1)
- Update stateroot hash for block #21
- Update faultedTxHashLE and deploymentTxHash
- Update nnsToken1ID to hex of tutus.one
- Replace neo.com with tutus.one in all test parameters
- Update VM script byte arrays for new domain length
- Regenerate testblocks.acc
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Regenerated test fixtures after tutusrpc/tutusinternal rename caused
alphabetical import order changes:
- rpcclient/* now sorts before tutusrpc/*
- storage now sorts before tutusinternal
Used rewriteExpectedOutputs flag to regenerate:
- testdata/nex/nex.go
- testdata/nameservice/nns.go
- testdata/gas/gas.go
- testdata/nonepiter/iter.go
- rpcbindings/*/rpcbindings_test.go
Fixed embedded expected strings in generate_test.go.
Test status: 104 PASS, 10 FAIL (91.3% pass rate)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Test fixture updates after token symbol changes:
- CLI: Add TUT/LUB symbol matching in nep17.go token lookup
- CLI: Update fee display from GAS to LUB in query output
- CLI: Replace NEO:/GAS: with TUT:/LUB: in test balance strings
- Config: Rename InitialGASSupply -> InitialLubSupply
- Examples: Add replace directives to all example go.mod files
Token mapping:
- TUT (symbol) / Tutus (display name) - governance token
- LUB (symbol) / Lub (display name) - utility/fee token
Test status: 110 PASS, 11 FAIL (90.9% pass rate)
Remaining failures are Windows file locking issues, not token-related.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Fix neogointernal -> tutusinternal in compiler/analysis.go
This was causing CALLT instructions to not be generated when
compiling contracts that call native contract methods
- Rename InitialGASSupply -> InitialLubSupply across codebase
- Update log messages from 'gas' to 'Lub'
- Fix nativehashes.Lub -> nativehashes.LubToken in query_test.go
Fix incomplete rename from neotest to tutustest across all native
contract test files. This was causing build failures in the test suite.
Changes:
- pkg/tutustest/chain/chain.go: Add tutustest import, use tutustest.Signer
- All native_test/*.go files: Replace neotest. with tutustest.
Test results:
- 651 tests ran
- 642 passed (98.6% pass rate)
- 9 failures in legacy Policy/Ledger/Std tests (not critical)
- All new native contracts (Vita, Annos, Lex, Scire, Salus, Sese,
Eligere, Collocatio, Tribute, Opus, Federation, Pons, Palam) PASS
- Rewrite README with professional presentation
- Add MarketAlly as developer organization
- Add David H. Friedel Jr. as Lead Architect
- Comprehensive native contracts documentation
- Architecture diagram and security features
- Acknowledge Neo foundation in Acknowledgments section
- Remove upstream references from all documentation
- docs/*.md updated for Tutus branding
- CHANGELOG.md, ROADMAP.md updated
- examples/ documentation updated
- VM prompt changed to TUTUS-VM
Convert CRLF to LF line endings for consistent cross-platform
development. Affects:
- .github/workflows/*.yml
- cli/smartcontract/rpcbindings tests
- cli/smartcontract/testdata
- scripts/*.sh
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Convert CRLF to LF line endings in native contract and state files
modified during security remediation. Ensures consistent line endings
across Windows and Linux development environments.
Files normalized:
- pkg/core/native/*.go (15 files)
- pkg/core/state/*.go (3 files)
- devnotes.md
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Convert .docker/tutus-entrypoint.sh from CRLF to LF line endings.
Linux containers cannot execute shell scripts with Windows-style
line endings, causing "no such file or directory" errors.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Complete the Tutus/Lub rename across the interop layer:
Package Renames:
- pkg/interop/native/neo → pkg/interop/native/tutus
- pkg/interop/native/gas → pkg/interop/native/lub
Hash Updates:
- Update Hash constants to match new TutusToken/LubToken hashes
- Update all hardcoded contract hashes in test manifests
Method Renames (native contract):
- getGasPerBlock → getLubPerBlock
- setGasPerBlock → setLubPerBlock
- unclaimedGas → unclaimedLub
Struct Field Renames:
- AccountState.LastGasPerVote → LastLubPerVote
Import Updates:
- All files importing interop/native/neo now use interop/native/tutus
- All files importing interop/native/gas now use interop/native/lub
- Package usage: neo.* → tutus.*, gas.* → lub.*
Test Updates:
- native_test/neo_test.go: Updated method names and embedded contract
- native_test/common_test.go: LubPerBlock naming
- compiler/native_test.go: Use cs.Tutus()/cs.Lub() methods
- All test manifests updated with new hashes
RPC Client Updates:
- rpcclient/neo/neo.go: setLubMethod constant and method calls
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Update test files that still referenced nativenames.Neo, nativenames.Gas,
nativehashes.NeoToken, and nativehashes.GasToken:
- cli/nep_test/nep11_test.go
- cli/nep_test/nep17_test.go
- cli/query/query_test.go
- internal/contracts/contracts_test.go
- pkg/core/bench_test.go
- pkg/core/blockchain_neotest_test.go
- pkg/core/custom_native_test.go
- pkg/core/interop/runtime/ext_test.go
- pkg/core/native/invocation_test.go
- pkg/services/notary/core_test.go
- pkg/services/rpcsrv/server_test.go
- pkg/services/stateroot/service_test.go
Note: Some tests (TestNEO_*, TestManagement_GenesisNativeState) still fail
due to hardcoded contract hashes from the original NEO codebase. These
tests would require updating the expected hashes or the test contracts.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Annos (Latin for "years") contract for tracking citizen
lifespan and age-based entitlements:
Annos Contract (pkg/core/native/annos.go):
- LifespanRecord tracks birth/death timestamps per Vita holder
- Age calculation from birthTimestamp (provided during registration)
- Life stages: Child (0-17), Youth (18-25), Adult (26-64), Elder (65+)
- Entitlement checks: isVotingAge, isAdult, isRetirementAge, isAlive
- recordDeath method (committee only) for mortality tracking
- Cross-contract methods for internal use by other contracts
State Types (pkg/core/state/annos.go):
- LifeStage, LifespanStatus enums
- LifespanRecord, AnnosConfig structs with serialization
Vita Integration:
- Updated register() to accept birthTimestamp parameter
- birthTimestamp is the actual birth date, NOT the mint date
- Calls Annos.RegisterBirthInternal() after minting Vita
- Enables existing adults to register with their real birth date
Eligere Integration:
- Added Annos IAnnos field to Eligere struct
- Added voting age check in vote() method
- Voters must be 18+ (configurable via AnnosConfig.VotingAge)
- New ErrUnderVotingAge error for underage voters
Contract Wiring:
- Added eligere.Annos = annos in NewDefaultContracts()
- Contract ID: -26 (next after Collocatio)
Tests (pkg/core/native/native_test/annos_test.go):
- 17 comprehensive tests covering all Annos functionality
- Age-based tests for Child, Youth, Adult life stages
- Note: Elder test skipped (uint64 can't represent pre-1970 dates)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Collocatio (Latin for "placement/arrangement") contract
providing a three-tier investment framework for citizens:
- PIO (Public Investment Opportunity): Universal citizen access to
infrastructure investments - any citizen can invest small amounts
in public projects like roads, schools, hospitals
- EIO (Employee Investment Opportunity): Workplace democracy for
verified employees - invest in their employer's projects with
preferential terms and voting rights
- CIO (Contractor Investment Opportunity): Gig economy empowerment -
verified contractors can invest in platforms they work with
Core Features:
- Investment opportunities with configurable parameters
- Eligibility system integrated with Vita (soul-bound identity)
- Cross-contract integration with VTS, Tribute, and Eligere
- Democratic oversight through Eligere voting
- Wealth concentration limits via Tribute integration
- Education verification through Scire integration
Contract Methods:
- createOpportunity: Create PIO/EIO/CIO with terms
- activateOpportunity: Enable investment period
- invest: Make investment with eligibility checks
- withdraw: Exit with maturity/penalty rules
- setEligibility: RoleInvestmentManager (ID 28) sets eligibility flags
- isEligible: Check investor eligibility for opportunity types
Contract ID: -25
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add expected JSON serializations for Scire, Salus, Sese, Tribute, Opus,
and Palam native contracts to defaultCSS map in management tests.
These contracts are active from genesis (ActiveIn() returns nil).
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement transparent ledger infrastructure for accountable governance:
- TransactionFlow tracking: Multi-party flows with complete audit trails
- Full lifecycle: Initiation -> Intermediate steps -> Completion
- Participant verification via Vita token (one-person-one-identity)
- Immutable flow records with timestamp chains
- Encrypted Payload System: Role-based access to sensitive data
- Payloads encrypted per-role (Consumer, Merchant, Bank, etc.)
- Keys distributed to authorized parties only
- Supports judicial declassification process
- Declassification Requests: Due process for accessing protected data
- Judicial authority required (RolePalamJudge = 26)
- Multi-party approval workflow
- Configurable approval thresholds and expiry
- Audit Log System: Complete transparency for oversight
- All operations logged with actor attribution
- Auditor access via RolePalamAuditor (25)
- Immutable chronological records
- Cross-contract integration:
- Vita: Identity verification for participants
- RoleRegistry: Role-based authorization
- Lex: Rights enforcement for privacy protections
Latin naming: Palam = "openly/publicly" - reflecting the
contract's purpose of enabling transparent governance while
protecting legitimate privacy through programmed disclosure rules.
Contract ID: -23
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement life planning and career evolution infrastructure:
- Life Plan Accounts: One per Vita holder
- Contribution tracking for sabbatical fund
- Life phase management (education, career, retirement)
- Progress metrics and goal tracking
- Career Cycles: Work period management
- Start/end tracking with employer records
- Automatic contribution calculations
- Transition support between careers
- Sabbaticals: Paid life breaks
- Funded sabbatical periods for all citizens
- Minimum contribution requirements
- Re-entry support after breaks
- Types: Learning, Family, Creative, Health, Community
- Life Milestones: Achievement tracking
- Automatic and manual milestone recording
- Types: Birth, Education, Career, Family, Retirement
- Verification by authorized parties
- Life Goals: Personal objective management
- Goal setting with progress tracking
- Integration with other life planning features
- Achievement recognition
- Cross-contract integration:
- Vita: Identity and lifecycle management
- Lex: Labor rights verification
- RoleRegistry: RoleLifeCoach (ID 22)
Contract ID: -20
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Scire (Latin for "to know/learn") contract providing
universal education infrastructure for citizens:
Core Features:
- Education accounts: One per Vita holder (soul-bound learning account)
- Learning credits: Annual allocation and spending system
- Certifications: Skill verification with expiry/renewal support
- Enrollments: Program enrollment with credit allocation
Contract Methods:
- Account management: createAccount, getAccount, allocateCredits, getCredits
- Enrollment: enroll, completeEnrollment, withdrawEnrollment, getActiveEnrollment
- Certification: issueCertification, revokeCertification, renewCertification
- Query: verifyCertification, hasCertification, getConfig
Cross-Contract Integration:
- Vita: Account tied to Vita token (one person = one account)
- Lex: Checks RightEducation via HasRightInternal (enforcement logging)
- RoleRegistry: RoleEducator (ID 20) for institutional authorization
- NEO: Committee authority for credit allocation
State Types (pkg/core/state/scire.go):
- EducationAccount, Certification, Enrollment, ScireConfig
- Status enums for each entity type
Technical Details:
- Contract ID: -18
- Storage prefixes: 0x01-0x02 (accounts), 0x10-0x13 (certs), 0x20-0x23 (enrolls)
- Fix: Use (uint64, bool) return for getVitaIDByOwner to properly handle
TokenID 0 (first registered Vita) instead of using 0 as sentinel value
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Feer interface method required after adding Vita fee
exemption functionality. FakeChain returns false for all accounts
since it's a test mock.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add basic tests for the Eligere (democratic voting) contract:
- TestEligere_GetConfig: Verify default config retrieval
- TestEligere_GetProposalCount: Verify initial count is 0
- TestEligere_GetProposal_NonExistent: Verify null for non-existent
- TestEligere_CreateProposal_NoVita: Verify Vita requirement
- TestEligere_HasVoted_NoVote: Verify hasVoted returns false
- TestEligere_Vote_NoVita: Verify Vita requirement for voting
Note: Full cross-contract tests for proposal creation/voting with actual
Vita holders would require a helper contract since Eligere uses
GetCallingScriptHash() for authorization (designed for cross-contract).
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Constitutional rights (RightLife, RightLiberty, etc.) are immutable in Lex
code and cannot be amended. Constitutional proposals still require 67%
supermajority but create Federal-level laws since Lex.RatifyAmendmentInternal
correctly panics when given LawCategoryConstitutional.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the Eligere (Latin for "to choose/elect") contract providing
democratic governance infrastructure for citizens:
Core Features:
- Proposal lifecycle: Draft -> Active -> Passed/Rejected -> Executed
- One-person-one-vote via Vita token (soul-bound identity)
- Configurable quorum (default 10%) and thresholds (50%/67%)
- Execution delay for passed proposals before implementation
Contract Methods:
- createProposal: Create proposals with categories (Law, Investment, etc)
- vote: Cast votes (Yes/No/Abstain) with Vita verification
- tallyVotes: Finalize voting after deadline with quorum checks
- executeProposal: Execute passed proposals after delay
- Query methods: getProposal, getVote, hasVoted, getConfig
Cross-Contract Integration:
- Vita: Add GetTotalTokenCount() for quorum calculations
- Lex: Add RatifyAmendmentInternal() for law amendment execution
- Wire Eligere into blockchain.go with proper validation
Test Updates:
- Update Vita suspend test to use Lex liberty restriction (due process)
- Update management tests for Federation/Eligere hardfork timing
- Add Vita registration to VTS tests for property rights checks
- Update NEP17 contracts list to include VTS
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Wire Lex contract into core contracts for constitutional rights enforcement:
VTS Integration:
- Add Lex dependency to VTS struct
- Add property rights check in transferUnrestricted() - blocks transfers
if sender's RightProperty is restricted via Lex
- Add property rights check in spend() - blocks spending if restricted
Vita Integration:
- Add Lex dependency to Vita struct
- Add liberty rights check in suspend() - requires valid liberty
restriction order from Lex before suspension (due process)
- Add liberty rights check in revoke() - requires restriction order
before permanent revocation
Blockchain Integration:
- Add lex field to Blockchain struct
- Add Lex initialization and validation in NewBlockchain()
Contract Wiring:
- Wire vts.Lex = lex for property rights enforcement
- Wire vita.Lex = lex for liberty rights enforcement
This ensures constitutional rights are automatically enforced:
- No property transfers without property rights
- No identity suspension/revocation without judicial due process
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement comprehensive legal framework ensuring equality for all citizens:
- Add 14 immutable constitutional rights (life, liberty, property,
equality, due process, privacy, expression, assembly, movement,
education, healthcare, labor, vote, asylum)
- Implement hierarchical law registry with categories:
Constitutional, Federal, Regional, Local, Administrative
- Add configurable enforcement types per law:
Automatic (blocks violations), Logging (emits events), Advisory
- Implement rights restriction system requiring due process:
- All restrictions require judicial authority (RoleJudge)
- All restrictions require a caseID (legal proceeding)
- All restrictions must have expiration (no indefinite detention)
- Add cross-contract integration methods:
HasRightInternal, IsRestrictedInternal, CheckPropertyRight,
CheckMovementRight, CheckLibertyRight
- Update test data for native contract state serialization
Constitutional rights are code, not data - they cannot be amended
or removed, ensuring true immutability and universal equality.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Extend Federation contract to protect citizens when their home government
becomes hostile:
- Add Asylum Registry for refugee protection
- grantAsylum/revokeAsylum methods (committee only)
- hasAsylum/getAsylumInfo query methods
- AsylumGranted/AsylumRevoked events
- Asylum seekers get 100% local Treasury funding with NO inter-chain
debt to avoid funding hostile governments
- Add Naturalization (Vita Transfer) for permanent immigration
- naturalize method for permanent citizenship transfer
- isNaturalizedCitizen/getNaturalizationInfo query methods
- CitizenNaturalized event
- Naturalized citizens treated same as local Vita holders
- Add VitaExemptAsylum type for humanitarian override
- Fee exemption priority: Local Vita > Naturalized > Visitor > Asylum
- Asylum: 100% from local Treasury, zero inter-chain debt
- Protects refugees even if home chain revokes their Vita
- Update IsVitaFeeExempt() to check all exemption types
- Local Vita, naturalized citizens, visitors, and asylum seekers
The one-Vita-per-person rule remains inviolable - Vita is tied only to
a living person globally. This enables protection without duplication.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Rename PersonToken to Vita (soul-bound identity token) and implement
fee exemption system for citizens:
- Add Federation native contract for cross-chain Vita coordination
- Visitor registry for Vita holders from other chains
- Configurable visiting fee percentage (default 50%)
- Inter-chain debt tracking for settlement between chains
- Modify GAS contract to burn fees from Treasury for Vita holders
- Local Vita: 100% paid by local Treasury
- Visiting Vita: Split between local Treasury and inter-chain debt
- Deficit tracking when Treasury is underfunded
- Update mempool and blockchain to skip fee checks for Vita exempt users
- Add IsVitaFeeExempt() to Feer interface
- Modify verifyAndPoolTx() to allow zero-fee transactions
- Rename PersonToken -> Vita across codebase
- Update state, native contract, and tests
- Maintain same functionality with clearer naming
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Tutus Development