High level summary​

This update covers a longer stretch than usual because there was no report since 2026-05-27: the whole Ledger team was first at the ZuriHac conference and then had an in-person team meetup, so the last several weeks were lighter on routine reporting but no less productive. A good chunk of the work below is the continuation of storylines from earlier updates, alongside a few new fronts.

On the performance side the state-annotated transaction (StAnnTx) work reached back to the older eras. Integration of the memoized values held in StAnnTx had previously been done for Babbage onward, and this cycle it was extended to Alonzo, which needed special handling, along with a small follow-up removing an unnecessary EncCBOR instance for AlonzoStAnnTx. We also finished the long-running effort to remove the legacy Coders machinery: the final piece for protocol version 12 and up (dropping the Summands usage) landed, Coders was removed from the testlibs and tests, and StakePoolParams was switched from CBORGroup-derived encoding to manual EncCBOR/DecCBOR instances in preparation for dynamic CBOR list lengths.

A notable new front is Leios support beginning to land in the ledger. The LeiosCert type, defined in the new cardano-crypto-leios package on the cardano-base repository, was added as an optional field to DijkstraBlockBody, and the Dijkstra CDDL for header_body was updated to reflect what the Leios prototype should be producing. We also introduced a new cardano-protocol package to house protocol-level code. On the ledger rules themselves there was a round of structural cleanup: a new ENTITIES rule (with an equivalent subrule) was introduced between LEDGER and CERTS to handle withdrawals and direct deposits, the era prefix was dropped from rule names, and the Rewarding script purpose was renamed to the more accurate Withdrawing.

The Dijkstra era work continued on several smaller fronts, including requiring top-level guards in the top-level transaction body, adjusting the Conway transaction_witness_set CDDL rule to use non-empty lists for the relevant fields. Conformance testing for Dijkstra advanced to its third installment, this time adding SpecTranslate instances for Dijkstra types and ExecSpecRule instances for the LEDGER and NEWEPOCH rules. Two user-visible bugs were fixed: injected extraConfig cost models were being ignored for PlutusV1/V3 because of an argument-ordering issue in overrideCostModels, and TxInfo translation could fail spuriously in LegacyMode. We also added ToJSON/FromJSON instances for EraScript and native scripts.

On the tooling and infrastructure side the generate-cbor CLI tool added last cycle was moved into cardano-ledger-api, refactor of the singleton-key namespaces (committee and constitution) for Canonical Ledger State, new Conway UTxO and Script generators were added, and CI was updated to allow automated agents to invoke the /update-changelogs skill. The dependency stack was moved forward with updates to cardano-crypto-class-2.5, the haskellNix flake input, and the usual GitHub Actions bumps.

Low level summary​

Features​

• PR-5837 - Remove unnecessary re-exports from Shelley Rules
• PR-5859 - Remove era prefix from rule names
• PR-5748 - Refactor namespaces with singleton keys
• PR-5867 - Prevent TxInfo translation failure for LegacyMode
• PR-5866 - Rename Rewarding to Withdrawing
• PR-5845 - Add ToJSON/FromJSON instances for EraScript
• PR-5860 - Stop using Summands from Coders for PV12+
• PR-5857 - Further StAnnTx integration
• PR-5872 - Add LeiosCert to DijkstraBlockBody
• PR-5897 - Remove unnecessary EncCBOR instance for AlonzoStAnnTx
• PR-5899 - Fix injected extraConfig cost models being ignored for PlutusV1/V3
• PR-5878 - Entities and Subentities Rules
• PR-5889 - Fix Dijkstra CDDL for Leios changes to header_body
• PR-5887 - Create cardano-protocol package
• PR-5903 - Require top-level guards in top-level transaction body
• PR-5908 - Use non-empty list for fields without duplicate enforcement in Conway transaction_witness_set cddl rule
• PR-5890 - Replace CBORGroup-derived EncCBOR/DecCBOR for StakePoolParams with manual instances

Testing​

• PR-5844 - Prepare conformance for Dijkstra 3
• PR-5868 - Add Test.Cardano.Ledger.Conway.Gen.{UTxO,Script} modules.
• PR-5883 - Add isPotentialFutureMember ImpTest

Infrastructure and releasing​

• PR-5864 - Move generate-cbor to cardano-ledger-api
• PR-5870 - Update to cardano-crypto-class-2.5
• PR-5876 - Bump actions/checkout from 6 to 7 in the actions group
• PR-5877 - Allow agents to invoke /update-changelogs
• PR-5865 - Remove Coders from testlibs and tests
• PR-5884 - Bump actions/cache from 5 to 6 in the actions group
• PR-5894 - Update haskellNix flake input

High level overview​

This week, the Mithril team refactored the unsafe SNARK setup, prepared the prover input for the recursive SNARK aggregation primitives, decoupled the Midnight library in the SNARK recursive circuit, and tested that the degree of the SNARK circuits remains unchanged. They continued improving the modularity of the SNARK recursive circuit using gadgets.

The team also worked on enhancing the aggregator state machine to support the Blocked state and on capturing end-to-end execution logs in artifacts.

Finally, they continued work on shipping the Mithril signer node binary in the Cardano node bundle, releasing the 2628 distribution, upgrading the Cardano node to 11.1, updating the DMQ node to 0.7.0.0, and upgrading the midnight-zk library to 2.3.3.

Low level overview​

Features​

• Completed the issue Refactor unsafe SNARK setup #3300
• Completed the issue Recursive SNARK aggregation primitives: Refactor preparation of prover input #3319
• Completed the issue Refactor SNARK recursive circuit - Midnight library decoupling #3129
• Completed the issue Test that SNARK circuits degree are unchanged #3330
• Worked on the issue Refactor SNARK recursive circuit - Modularity enhancement with gadgets #3131

Protocol maintenance​

• Worked on the issue Ship Mithril signer node binary in Cardano node bundle in GitHub #3011
• Worked on the issue Release 2628 distribution #3271
• Worked on the issue Enhance aggregator state machine to support Blocked state #3333
• Worked on the issue Upgrade to Cardano 11.1 #3346
• Worked on the issue Update DMQ node to 0.7.0.0 #3358
• Worked on the issue Capture e2e execution logs in artifacts #3362
• Worked on the issue Upgrade midnight-zk to 2.3.3 #3375

High level summary​

In the past weeks, the Plutus team has continued to make improvements across performance, tooling, and assurance.

Performance and compiler improvements. We improved several parts of the Plutus optimization pipeline and ledger API implementation. This includes making common Value operations more efficient, adding a new compiler optimization for certain recursive functions, and fixing an optimization pass so that it preserves program behavior correctly.

Better benchmarking and tooling. We added lightweight benchmarking support to the uplc executable, making it easier to sanity-check execution-time measurements for UPLC scripts and compare results against existing benchmark infrastructure.

Specs and formal methods. We continued strengthening the foundations of Plutus by updating the UPLC specification for the built-in value type and related functions, and by improving the metatheory and certification infrastructure used to reason about compiler transformations. These changes make the formal-assurance workflow easier to maintain, debug, and scale to larger programs.

Key Pull Requests Merged​

• Specification of the built-in value type and functions
• Rename UPLC scope variable in the metatheory
• Mutually recursive PIR function inlining
• Lightweight benchmarking in the uplc executable
• Fuse unionWith and checkBinRel in PlutusLedgerApi.V1.Data.Value
• Certifier: Generate one Proof .agda file per certified pass
• Optimal non-builtin valueOf in plutus-ledger-api Data.Value
• Metatheory: define semantic versions of value and purity
• Certifier: deduplicate ASTs in agda certificate
• Fix the FloatDelay compiler optimization pass

High level overview​

This week, the Mithril team completed the wiring of the recursive SNARK proof in the aggregate signature, and its integration in the end-to-end tests and its deployment in a test network. They continued work on refactoring the unsafe SNARK setup and refactoring the preparation of the prover input for the recursive SNARK aggregation primitives.

The team also completed the implementation of the monitoring for Cardano blocks and transactions in the protocol dashboard, the integration tests for the unknown signed entity type in the signer and aggregator, and the enhancements of the aggregator state machine to support the Blocked state. They continued work on the release of the 2626 distribution, the upgrade to Cardano 11.1, and the update of the DMQ node to 0.7.0.0.

Finally, the team fixed some flakiness in the Hydra CI, enhanced the versions bump script and implemented a GitHub workflow to automate the marking of stale issues and pull requests.

Low level overview​

Features​

• Completed the issue Recursive SNARK aggregation primitives: Wire SNARK proof in aggregate signature #3141
• Completed the issue Implement recursive SNARK proof generation and verification in end-to-end tests #3142
• Worked on the issue Refactor unsafe SNARK setup #3300
• Worked on the issue Recursive SNARK aggregation primitives: Refactor preparation of prover input #3319

Protocol maintenance​

• Completed the issue Implement monitoring for Cardano Blocks and Transactions in Protocol dashboard #3157
• Completed the issue Activate CardanoBlocksTransactions in Mithril networks #3160
• Completed the issue Add integration tests for unknown signed entity type in signer and aggregator #3296
• Completed the issue Flaky CI on hydra run of ci/hydra-build:x86_64-linux.mithril-common #3329
• Completed the issue Enhance versions bump script #3334
• Completed the issue Mark stale issues and PRs with GitHub workflow #3339
• Completed the issue Certification stopped on ivc-snark-preview network #3351
• Worked on the issue Ship Mithril signer node binary in Cardano node bundle in GitHub #3011
• Worked on the issue Release 2626 distribution #3271
• Worked on the issue Enhance aggregator state machine to support Blocked state #3333
• Worked on the issue How to reduce the IVC tests duration #3343
• Worked on the issue Upgrade to Cardano 11.1 #3346
• Worked on the issue Update DMQ node to 0.7.0.0 #3358

High level summary​

• Benchmarking: -O2 build optimization benchmarks.
• Development: Legacy iohk-monitoring tracing backend removed from cardano-node; RTView removed from cardano-tracer; trace-dispatcher maintenance and ongoing restructuring into Hermod packages.
• Infrastructure: Genesis cache overhaul with full Protocol Version 11 overlay close to merging.
• Tracing: ReCon framework and trace-resources moved to Hermod project; cardano-tracer timeseries HTTP API and Grafana datasource merged; ASCII operator spellings for cardano-recon-framework.

Low level overview​

Benchmarking​

The P&T team has performed benchmarks of a highly optimized build (-O2) vs. a build using standard optimization (-O1), the latter being the current default for our releases. The benchmarks demonstrated that under low to near-idle submission load, no significant gains in resource usage were achieved. Only under full saturation over extended periods of time was a ~17% reduction in Process CPU usage measured, whereas RAM usage was stable. However, in both cases, we observed small increases (3% - 6%) in block adoption times across the network. For the current Praos Node, we still recommend the default. When using another Consensus mode with a significantly higher idle baseline, it's worth noting there's a potential trade-off that can be made.

Development​

Last month we reported that the removal of the legacy iohk-monitoring-based tracing backend from cardano-node was complete but awaiting final verification. That PR has now been merged (cardano-node PR#6580). The change eliminates approximately 11,000 lines of dead code across 15 modules and removes 9 transitive build dependencies, leaving trace-dispatcher as the sole tracing backend. With this out of the way, the remaining components of the new tracing system can be moved into the self-contained Hermod Tracing System project repository without coupling their release cycle to cardano-node. Please refer to the PR description for a detailed breakdown of now obsolete Node config keys.

Alongside that, RTView has been removed from cardano-tracer (cardano-node PR#6607). RTView was an experimental, opt-in browser dashboard hidden behind a build flag since version 0.2.4. Its functionality is now fully covered by the Grafana datasource and the timeseries server built into cardano-tracer, making the component redundant. The removal cleans up 35 source files and several build dependencies.

The P&T team has also completed a focused maintenance pass over trace-dispatcher (hermod-tracing PR#12). Additionally, work is underway to restructure trace-dispatcher into two distinct packages — hermod-tracing-api, carrying types and combinators, and hermod-tracing-core, carrying the full backend stack including EKG and Prometheus (hermod-tracing PR#16). This split will allow downstream packages that only need to instrument their own code to avoid pulling in the full backend stack as a dependency.

Infrastructure​

The genesis cache overhaul for our performance workbench (the benchmarking automation framework) is completed and close to merging (cardano-node PR#6544). As reported last month, the new approach splits a genesis into two independently-cached halves — the heavy dataset (keys, UTxO entries, delegators, DReps) and the per-era protocol parameters — which are then reassembled on demand. This greatly widens the range of parameters a benchmarking profile can modify without causing a full cache miss. The PR additionally restores non-default Plutus cost models via the Alonzo genesis extraConfig field, and includes a full Protocol Version 11 overlay with the updated cost models and execution budgets that have been submitted as a governance action on mainnet.

Tracing​

With the legacy tracing removal merged, the cardano-recon-framework and the trace-resources package have both been moved from cardano-node into the Hermod Tracing System project. The ReCon framework has been accommodated under hermod-tracing (cardano-node PR#6598, hermod-tracing PR#11); trace-resources — which provides cross-platform OS-level resource sampling (CPU, memory, network I/O, filesystem I/O, thread count) — has been renamed hermod-trace-resources (hermod-tracing PR#14), with its module namespace updated from Cardano.Logging.Resources.* to Hermod.Tracing.Resources.*. All logic, platform-specific C bindings, and tests are preserved unchanged.

The cardano-tracer timeseries HTTP API and its accompanying Grafana datasource, which we reported as being in testing last month, have now been merged (cardano-node PR#6562). The API provides PromQL-like queries over metrics timeseries stored by cardano-tracer, aligned closely with the Prometheus HTTP API schema so that existing Grafana integrations and community-built tooling can reuse familiar glue code. The Grafana datasource shipped alongside it replaces the now-removed RTView and includes a reference dashboard for operators to build from.

The cardano-recon-framework formula parsers now accept ASCII alternatives to their Unicode operators (hermod-tracing PR#15). Spellings such as \globally, \finally, && and => are now valid alongside the original Unicode forms, as are numeric indices in parentheses (e.g. \globallyN(2)). This makes authoring LTL properties more accessible in environments where Unicode input is inconvenient, and ships as part of v1.4.0.