IO & VacuumLabs: Enhancing Plutus - Performance, Correctness, and Usability

System3mo ago1 post

On-chain changes

  • 11,877,575 ₳paid tostake17xz...6ghh5qjr

Abstract

Proposal as pdf: https://ipnso-com.ipns.dweb.link/?cid=Qmd7G7L6xinunTLU9JorPLYyFCLGRarXEn7RngdNYgNH3B

This proposal strengthens Cardano’s smart contract platform across three critical and closely connected areas: language capabilities, formal correctness, and developer experience. It funds targeted expansion to the Plutus language with new syntactic forms and new primitives to reduce script costs, improve expressiveness, and unlock more efficient contract patterns; formal specification, conformance testing, and structured security review to support correctness as node diversity grows; and a better compiler and tooling experience that lowers setup friction, improves error reporting, and makes smart contract development more accessible. Together, these workstreams make Plutus cheaper to use, more trustworthy to build on, and easier for developers to adopt, helping Cardano support a broader range of applications while also providing stronger foundations for alternative node implementations and other ecosystem tooling.

This is a technical collaboration with Input Output and VacuumLabs, distributing Plutus stewardship across expert teams. Intersect administers funds via milestone-based smart contracts with independent oversight. All unspent funds return to the Treasury.

Treasury Ask: ₳11,877,575

Motivation & rationale

As a smart contract developer building on Cardano, whether authoring decentralized finance (DeFi) protocols, zero-knowledge (ZK) applications, or high-assurance infrastructure, I want a Plutus platform that compiles cleanly, runs efficiently, and carries formal correctness guarantees, so that I can spend my time building valuable applications with greater clarity and consistency across tools and specifications.

Opportunity: Plutus, a compact lambda-calculus-based language executed by Cardano nodes, serves as the foundation of all Cardano smart contracts. Its quality and capabilities directly influence what developers can build, how quickly they can build it, and how much confidence they can place in the results. There are three interconnected areas where further improvements would strengthen Plutus’s ability to fulfill this role.

Plutus execution efficiency and expressiveness. On-chain execution costs are critical to Cardano's competitiveness. Targeted expansion of Plutus capabilities and primitives can deliver meaningful reductions in script size and execution budget. Extending casing to cover the built-in Data type would let scripts efficiently pattern-match on Data, a ubiquitous type in validators. Implementing the ratified CIP-0156 (multiIndexArray) and the forthcoming CIP-0168 (additional Value functions) would turn common list and multi-asset operations into single, cheap built-ins rather than verbose on-chain loops. Removing the scope check, which currently adds roughly 25% to script preparation time without providing a security benefit, could free up significant validation overhead. Finally, a systematic exploration of laziness in UPLC would address a fundamental expressiveness gap that today forces developers into less modular or less efficient code patterns.

Formal verification, conformance, and security. As node diversity becomes a reality, the correctness guarantees must keep pace. The Plutus metatheory currently lacks formalization for many built-in functions, and conformance testing falls back to the Haskell reference implementation. Extending the metatheory to cover programmatic builtins and enriching the conformance test suite with a property-based testing framework would help close this gap. Meanwhile, continuous security auditing of the evaluator and costing code would proactively surface correctness and denial-of-service risks before they reach production.

Developer experience and tooling. The smart contract developer experience would benefit from a compiler architecture that produces clear, source-level error messages and eliminates the need for boilerplate and compiler-specific extensions. Beyond that, broader compiler version support and a simpler project setup that does not require Nix or native C library dependencies would make the user experience significantly simpler and more attractive, allowing a new developer to install, build, and write their first contract without friction.

Solution: This proposal funds three workstreams that together address all three areas.

Workstream 1. Plutus capabilities and primitives: extends the UPLC execution model, set of built-in functions, and expressiveness. It delivers support for casing on the built-in Data type, significantly reducing execution costs for most contracts due to the ubiquity of Data; an investigation and CIP or report on removing the redundant scope check (which adds approximately 25% overhead to script preparation); a SNARK-friendly Poseidon hash function CIP and C bindings conditional on benchmarks; implementation of the already-ratified multiIndexArray builtin (CIP-0156); and implementation of additional BuiltinValue functions for multi-asset operations (CIP-0168). It also delivers a CIP exploring laziness and memoization in UPLC, opening the design space for contract patterns that are modular, reusable, and less repetitive - patterns that are currently difficult or impossible to express.

Workstream 2. Formal specification, correctness, and security: strengthens the formal foundations of the Plutus platform. This stream delivers a property-based conformance testing framework, extending the current 1,982-test suite with randomly generated programs, which supports node diversity by enabling alternative Plutus evaluators to verify correctness against the canonical implementation; a systematic security and correctness audit of the security-critical code (such as the Plutus evaluator and costing); and formalization of programmatic built-in types and functions in the Plutus metatheory (Agda), making the metatheory an authoritative, executable specification for the covered built-ins rather than a partial formalization that falls back to the Haskell implementation.

Workstream 3. Developer experience: introduces a new compiler and optimizer architecture that improves code optimization, delivers clearer source-level error messages, and reduces boilerplate. It also simplifies setting up the development environment, removing the need for tools like Nix or manual dependency installation.

Why now: The Plutus team has completed development for the upcoming Van Rossem hard fork. This creates a natural window until the next hard fork, allowing Plutus to further extend its capabilities. Changes that require a hard fork, such as removing the scope check, need to be completed in time for the Dijkstra hard fork. At the same time, it is important to continue building on the developer experience and usability improvements we made over the past year, as further enhancements in this area are critical to Cardano’s adoption. Finally, as Cardano adoption increases and node diversity becomes a reality, the cost of any correctness or security issue is amplified. Investing in formal specification, cross-implementation conformance, and structured auditing now is significantly more cost-effective than responding to incidents in production.

Co-venture with VacuumLabs: This proposal is structured as a deliberate co-venture between Input | Output and VacuumLabs, a specialist firm with deep expertise in formal methods, security-critical Haskell development, and Cardano infrastructure. The partnership is planned and purposeful. Both organizations are investing in Plutus as shared public infrastructure for the Cardano ecosystem. This distributed ownership model reflects what a maturing ecosystem looks like: core infrastructure maintained by a consortium of expert teams, not dependent on any single contributor.

Proposed Value Delivered (Why)

Together, these workstreams enhance Cardano’s smart contract platform across three mutually reinforcing dimensions. Expanded language capabilities and lower execution costs directly translate into better returns for users and a more competitive offering relative to other chains. Formal verification, conformance testing, and continuous security auditing ensure that these gains rest on a sound foundation, which is increasingly important as node diversity expands. Tooling and developer-experience improvements lower the barrier to entry, allowing new developers to start building without friction and broadening the pool of people who write and deploy contracts.

The VacuumLabs co-venture signals that this is an ecosystem effort rather than a proprietary IO initiative. Cardano's core infrastructure benefits from being maintained and evolved across a broad contributor base of expert teams rather than a single organization. This distributed ownership model is a direct contribution to Pillar 5 (Ecosystem Sustainability and Resilience) and is the kind of structural outcome the Cardano 2030 Vision is designed to produce.

KPIs

KPI Alignment KPI Alignment Narrative
TVL Yes: Partially Capital follows trust. Formal specification of Plutus primitives, cross-implementation conformance testing, and continuous security auditing all reduce the probability of exploits or consensus failures that could put locked funds at risk. At the same time, cheaper on-chain operations improve capital efficiency for financial protocols, making Cardano a more attractive venue for deploying liquidity than chains with higher execution costs or weaker correctness guarantees.
Monthly Transactions Yes: Fully Lower execution costs make transactions cheaper for users and open up application designs that were previously uneconomical. When builtins handle common operations like multi-asset comparisons or multi-index lookups in a single, cheap call rather than verbose on-chain loops, protocols can offer smaller minimum trade sizes and more frequent automated actions such as liquidations, rebalancing, and oracle updates, all of which increase transaction volume.
Monthly Active Users (MAU) Yes: Fully Simplifying the developer toolchain directly reduces the drop-off rate for new developers attempting their first Cardano application. A smoother onboarding path means more developers ship contracts, which in turn means more user-facing DApps, and ultimately, more people transacting on-chain regularly.

Additional KPIs

KPI Alignment KPI Alignment Narrative
Reliability: Monthly Uptime (6 epochs) Yes: Partially Several of these workstreams directly reduce the risk of unplanned downtime or degraded network performance. Removing the scope check eliminates unnecessary validation overhead; continuous security auditing is explicitly designed to catch subtle evaluator and costing bugs; formalizing built-in semantics and expanding conformance testing ensure that all node implementations agree on script execution, preventing unintended forks.
Operational Resilience: Voting Power Distribution of Controlling Stake N/A
Operational Resilience: Alternative Full Node Clients Yes: Partially The property-based conformance testing framework is a direct enabler of alternative node client development. Extending conformance testing to property-based tests that cover a wide program space gives alternative implementers far greater confidence that their evaluator agrees with the canonical implementation across edge cases. The Agda formalization provides an authoritative, implementation-independent specification that alternative node builders can test against.
Revenue / Adoption: Annual Protocol Revenue Yes: Partially A more capable and developer-friendly platform draws new protocols and use cases to Cardano, expanding fee-generating activities. Improved uptime and stronger correctness guarantees also matter here indirectly since they improve trust.
Governance: DRep Participation Rate N/A
Scalability: Throughput Capacity per day Yes: Partially Workstream 1 is directly related to this. By reducing the resources consumed per script execution, more transactions can fit into the same block.

Pillars

KPI Alignment KPI Alignment Narrative
Pillar 1: Infrastructure and Research Excellence Yes: Fully Formalizing Plutus's built-in semantics, building a property-based conformance framework, and improving the compiler advance the state of the art in how production blockchain contract logic is specified, verified, and compiled. They position Cardano's smart-contract infrastructure as among the most rigorously specified and tested in the industry.
Pillar 2: Adoption and Utility Yes: Fully A frictionless developer toolchain brings more builders to the platform. Cheaper on-chain execution unlocks applications that may be uneconomical today, expanding what Cardano is useful for. Stronger correctness and security guarantees give both developers and users the confidence to commit capital and build businesses on top of the platform.
Pillar 3: Governance N/A
Pillar 4: Community and Ecosystem Growth Yes: Partially The property-based conformance framework is designed for collaboration with teams building alternative evaluators, strengthening ties across the node-diversity ecosystem. Implementing ratified CIPs like CIP-0156 and CIP-0168 demonstrates that community-driven governance translates into timely delivery, reinforcing trust in the process.
Pillar 5: Ecosystem Sustainability and Resilience Yes: Fully Continuous security auditing and formal specification reduce the likelihood of costly incidents that erode trust and drain community resources. The VacuumLabs technical collaboration distributes Plutus maintenance expertise across multiple organizations, directly reducing the risk of a single point of failure in tooling stewardship. This distributed ownership model is a structural contribution to Pillar 5 and reflects the Cardano 2030 Vision for a resilient, multi-steward ecosystem.

Deliverables and Roadmap

Sequence Item Description
Q3 2026 WS1: UPLC Built-in Casing on Data, Phase 1. UPLC evaluation semantics extended to support built-in casing on the Data type. Conformance test cases for new evaluation rules and AST nodes. Benchmark results published.
Q3 2026 WS1: multiIndexArray Built-in (CIP-0156). multiIndexArray built-in implemented per CIP-0156 in both Plutus Core and Plinth. Cost model benchmarked and integrated. Hard fork ready.
Q3 2026 WS1: Additional BuiltinValue Functions (CIP-0168), Phase 1. CIP-0168 approach finalized. Initial implementations of policies, restrictValueTo, and filterOutPolicies built-ins in Plutus Core and Plinth. Unit tests complete.
Q3 2026 WS2: Security Audit, Evaluator Review begins. Structured manual review of the Plutus evaluator implementation initiated. Review notes and documented reasoning about evaluator behavior.
Q3 2026 WS3: Untangling Plinth Dependencies, Analysis. Full dependency analysis of Plinth native C library dependencies (blst, secp256k1). GitHub issue documenting all dependency paths and removal assessment.
Q3 2026 WS3: GHC Plinth Backend, Proof of Concept, and Feature Parity. Standalone Plinth compiler achieving feature parity with the existing GHC plugin-based compiler. Binary distributions for major platforms (Windows x86_64, macOS aarch64, Linux). Installable via a single command.
Q3 2026 WS3: Multi-Version GHC Support. Plinth compiler extended to support two concurrent major GHC versions. All tests compile and pass under both versions. Compatibility layer merged into the Plinth repository with updated documentation.
Q4 2026 WS1: Built-in Casing on Data, Plinth Support. Support for new Data casing semantics added to Plinth. Execution unit benchmark results published.
Q4 2026 WS1: Scope Check Investigation, Semantic Analysis, and Performance Comparison. Deep analysis of CEK interpreter code paths for open terms. Performance measurements with and without scope check across a range of programs. GitHub documentation of semantic consequences.
Q4 2026 WS1: Additional BuiltinValue Functions, Cost Models, and assetCount. Cost models for policies, restrictValueTo, filterOutPolicies benchmarked and integrated. assetCount built-in implemented. Conformance tests, metatheory updates, and user documentation delivered.
Q4 2026 WS1: SNARK-Friendly Hash Function, CIP and Benchmarks. Basic C bindings for Poseidon hash function implemented and benchmarked. CIP for SNARK-friendly built-in submitted. Conditional on benchmark results.
Q4 2026 WS2: Plutus Conformance Property Tests, Interface Design, and Initial Implementation. Community-informed interface design for property-based conformance testing. Framework implemented and tested with at least one alternative UPLC evaluator. Initial property tests running.
Q4 2026 WS2: Formalize Plutus Primitives, Agda Denotations. Agda denotations for the target list of programmatic built-in types and functions implemented. Invariants proved. Code available in the Plutus metatheory repository. Covers: BuiltinUnit, BuiltinInteger, BuiltinBool, BuiltinByteString, BuiltinList, BuiltinPair, BuiltinData, BuiltinString, BuiltinArray, BuiltinValue.
Q4 2026 WS2: Security Audit, Evaluator Review Complete. Systematic review of Plutus evaluator semantics and invariants complete. Potential issues documented; relevant GitHub issues opened.
Q4 2026 WS3: GHC Plinth Backend, Improved Error Messages, and Reduced Boilerplate. INLINEABLE pragma no longer required across modules. All compilation errors traceable to Haskell source locations. Testsuite for cross-module usability and source-location errors delivered.
Q4 2026 WS3: Untangling Plinth Dependencies, Implementation. Plinth decoupled from UPLC evaluator and native C library dependencies. Users can set up a Plinth environment like a standard Haskell project, without Nix or additional steps. Merged pull requests in the Plutus repository.
Q1 2027 WS1: Scope Check Investigation, CIP, or Report. CIP submitted if investigation indicates scope check removal is viable and beneficial; or a report explaining why removal is not advisable, with technical and performance evidence.
Q1 2027 WS2: Plutus Conformance Property Tests, Full Suite Ported. All relevant property tests from the Plutus repository ported to the new conformance framework. Multiple external tools are able to run the full suite.
Q1 2027 WS2: Formalize Plutus Primitives, Integration. Agda built-in implementations integrated into Plutus metatheory conformance test machinery. Performance report produced; any issues documented.
Q1 2027 WS2: Security Audit, Costing Review, and Final Report. Systematic audit of costing logic complete. Written audit report with all findings, risk assessments, and recommendations delivered.
Q1 2027 WS3: GHC Plinth Backend, Reduced Boilerplate, and Improved Frontend. Mandatory Plinth-specific GHC extensions and flags no longer required. Unsupported Haskell features detected before reaching GHC Core, with errors referencing Haskell source only. Full testsuite updated.
Q1 2027 WS3: Laziness and Memoization in UPLC, Evaluation and Prototyping. Candidate approaches to laziness and memoization in UPLC surveyed and evaluated. Security, semantic, and costing implications analyzed. Feasibility prototypes delivered. External researcher collaboration (Philip Wadler).
Q2 2027 WS1: Laziness and Memoization in UPLC, CIP Submitted. CIP describing the proposed laziness and memoization design opened for community discussion, structured similarly to CIP-0152 (Modules in UPLC).
Q2 2027 WS1: multiIndexArray and BuiltinValue Functions, Verification and Documentation Complete. Conformance tests, end-to-end tests, metatheory updates, Plutus Core specification updates, and user documentation complete for all delivered built-ins.
Q2 2027 WS2: Formalize Plutus Primitives, Conformance Harness (if required). If performance issues arose in Q1, the metatheory is refactored to abstract over built-in type representation. New Agda vs. Haskell conformance test harness added. Literate Agda documentation deployed at https://plutus.cardano.intersectmbo.org/metatheory/latest/.

Resources

Workstream 1: Plutus Developer Experience

  • 2 Compiler engineers (GHC backend and frontend work)
  • 1 Compiler engineer (multi-version GHC support, Plinth dependency decoupling)
  • 1 Language engineer (laziness and memoization investigation and CIP)

Workstream 2: UPLC Capabilities and Platform Primitives

  • 1 Compiler and language engineer (built-in casing on Data),
  • 1 Language engineer (scope check investigation)
  • 1 Cryptography engineer (SNARK-friendly hash, Poseidon C bindings)
  • 1 Language engineer (multiIndexArray CIP-0156 and BuiltinValue CIP-0168)

Workstream 3: Formal Specification, Correctness, and Security

  • 1 Language and formal methods engineer (conformance property tests framework)
  • 1 Security and language engineer (Plutus evaluator and costing audit)
  • 1 Formal methods engineer (Agda formalization of Plutus primitives)

Budget

Total Treasury Ask: ₳11,877,575

Funding Distribution
Development ₳10,214,715 86%
Infrastructure ₳118,776 1%
Security & Audits ₳118,776 1%
Legal & Compliance ₳118,776 1%
Engagement & Ecosystem support ₳712,655 6%
Operations & Delivery ₳356,327 3%
Governance ₳118,776 1%
Others ₳118,776 1%

Pricing Principles: IO is requesting funding in ada and has provided USD figures as a reference. A portion of the funding shall be specifically tied to demonstrating measurable impact on Cardano's KPIs and pillars.

  • Personnel and Delivery: Majority of costs needed to fund the delivery resources across the IO internal team members and VacuumLabs co-proposer contributions across all three workstreams
  • Ecosystem support, Audit, Assurance & Contingency: Leadership, ecosystem, and delivery to support execution and wider alignment. Independent work assurance and audits, plus contingency to account for complexities during execution

Risks

Type Description Likelihood Severity / Impact
Technical The scope check investigation may conclude that removal requires bigger changes to the interpreter than anticipated. The deliverable is a CIP or report, either way; the risk is to the scope of the conclusion, not the existence of the deliverable. Medium Low: Time-boxed to one engineer for six months regardless of outcome.
Technical Built-in casing on Data requires costing changes that allow non-constant operations on Case nodes. Costing discrepancies may require additional iterations. Medium Low: Core functionality is not blocked; costing can be resolved iteratively.
Technical Poseidon hash C binding implementation is conditional on benchmark results. If benchmarks do not meet the threshold, implementation does not proceed. Medium Low: CIP is delivered regardless; only the C binding is conditional.
Technical Scaling the property-based conformance test framework to run thousands of test cases against external tools within reasonable time is an open engineering challenge. Medium Medium: Could limit practical utility for frequent CI use. Mitigation: interface design phase (Q3 2026) addresses this with community input before implementation commits to an architecture.
Technical The Agda formalization may reveal that specific built-ins do not warrant formalization due to language limitations or unforeseen problems. Low Low: A report detailing the issue and proposed future solutions is an acceptable substitute output.
Community / Ecosystem GHCup support is needed for the smoothest Plinth binary distribution experience. A fallback installation script is available if GHCup support is not ready in time. Low / Medium Low: Fallback script allows installation without GHCup; the effect is cosmetic rather than functional.
Community / Ecosystem CIP-0168 (BuiltinValue functions) is not yet ratified (PR #1090). A material specification change after implementation begins could require rework. Low High: Implementation tracks the PR closely; any changes are assessed before incorporation.

Additional Information

Benefit Dependencies: Realizing the cost and size reductions from Workstream 1 requires the corresponding hard fork to activate the new UPLC features on mainnet. The benefits of the property-based conformance framework depends on engagement from teams building alternative node clients.

Release and Solution Readiness: Plutus language and built-in extensions (casing on Data, multiIndexArray, and the additional BuiltinValue functions) are delivered as production-ready code and require a hard fork for activation on mainnet, with Dijkstra as the target. The scope check investigation and the laziness investigation are delivered as CIPs or technical reports; any subsequent implementation depends on community consensus and is out of scope for this proposal. The SNARK-friendly hash builtin is delivered as a CIP, with C bindings shipped conditional on benchmark results. The property-based conformance testing framework is released independently of the node and available for immediate use by alternative node implementers. The Agda formalization of programmatic built-ins ships as part of the Plutus metatheory, and will be used in conformance testing. The security and correctness audit is delivered as a written report with findings and recommendations. Developer experience and usability improvements from Workstream 3 are production-ready on delivery and can be adopted immediately by developers without waiting for a hard fork or any other governance or protocol-level change.

Demos and Assets: Plutus repository: https://github.com/IntersectMBO/plutus | Plutus Core formal spec: https://plutus.cardano.intersectmbo.org/resources/plutus-core-spec.pdf | Metatheory: https://plutus.cardano.intersectmbo.org/metatheory/latest/

Treasury Governance & Compliance

Contract Management

A written off-chain Legal Contract will be created between Input Output and the Cardano Development Holdings (CDH), as mandated by the Constitution, and will be administered by Intersect. This will include details of the project delivery schedule and dispute resolution.

Project Delivery

All milestones, acceptance criteria, payment amounts and expected delivery dates will be agreed between the Input Output and Intersect, acting on behalf of the CDH. Input Output will deliver according to the agreed-upon project schedule within the Legal Contract, of which the necessary information will be made public via the budget management platform via transaction metadata.

Defined by the milestones within a Legal Contract, Input Output will submit and attest milestone acceptance to the community, Intersect or 3rd Party Assurer.

Project progress will be monitored via Intersect's delivery assurance function which will be communicated to the community.

Acceptance of the work will be supported by a 3rd Party Assurer, who will be responsible for reviewing and signing off the work completed at each project milestone against the corresponding milestone deliverables detailed within the Legal Contract. This work is funded from a portion of this treasury withdrawal.

Auditable Accounts & Fund Delegation

Budget Management Tooling

To administrate treasury funds on-chain, Intersect will utilize the treasury management smart contract framework developed by Sundae Labs. The smart contracts have been extensively tested including audits from TxPipe and MLabs.

Final mainnet validation test can be seen via the Disburse action within transaction: 0f591dc544ae14102dbb4a74d5311a6acffc1772b163d8b7a9656b9525950b17

This withdrawal will utilise Intersect’s 2025 treasury reserve contract with address being: stake17xzc8pt7fgf0lc0x7eq6z7z6puhsxmzktna7dluahrj6g6ghh5qjr
Funds will later be migrated to a 2026 treasury reserve contract once established.

Budget Management Specifics

Intersect will utilize a single Treasury Reserve Smart Contract (TRSC), with many Project-Specific Smart Contracts (PSSC), managed by Intersect. Intersect's management consists of three 'admin' and two Intersect 'leadership' roles. An Oversight Committee consisting of five external, independent third-party entities will provide checks and balances on Intersect, and safeguard against errors and unilateral control. The administration of both TRSC and PSSCs will be managed by Intersect, with external oversight on certain actions from the Oversight Committee.

The 2025 TRSC Oversight Committee consists of Sundae Labs, Cardano Foundation, Dquadrant, Xerberus and NMKR. Their role is to independently verify key administrative actions using on-chain logic, ensuring accuracy and consistency without exercising discretion over governance decisions.

For all details on Intersect's configuration please see the Smart Contract Guide on the knowledgebase.

The high level permissions are as follows:

  • TRSC Fund and PSSC Modify
    • Two of the three Intersect admins, two of the five trusted entities and one of the two Intersect leadership sign-off must authorize
  • TRSC Disperse
    • Two of three Intersect admins, three of five trusted entities and two of two Intersect leadership sign-off must authorize
  • TRSC Pause and Resume
    • Two of three Intersect admins, and one of two Intersect leadership sign-off must authorize
  • TRSC Sweep
    • One of three Intersect admins, and one of two Intersect leadership sign-off must authorize
  • TRSC Reorganize
    • Two of three Intersect admins and three of five trusted entities must authorize
Processes

Upon enactment of this governance action, funding for this project will be directed into the TRSC's stake account. All instances of TRSC and PSSC can not be staked with a SPO and will be delegated to the auto-abstain predefined DRep. From here funds will be withdrawn into a UTxO remaining at the TRSC.

When a 2026 TRSC is established, the funding for this project will be migrated via the ‘disburse’ action.

When the Legal contract is prepared and Input Output is ready, funding for this project will be transferred using the Fund action to a PSSC. All milestones will be outlined within the metadata.

A dashboard will be available for the community to audit the TRSC or PSSC and track metrics related to this withdrawn ada as well as being immutably verifiable on chain.

Funding Denomination

All amounts in this proposal are denominated in ada (₳). The total Treasury ask is ₳11,877,575. USD figures ($2,850,618) are provided for reference only, based on an ADA/USD rate of 0.24.

Refund Conditions

All funds not disbursed by the end of the delivery period will be returned to the Cardano Treasury. A final reconciliation will be published as part of the oversight reporting cycle. In the event of partial delivery or scope reduction, unspent funds associated with cancelled or reduced deliverables will be returned proportionally.

Prior Treasury Receipts

IO and its affiliated entities has been accountable for delivery of work funded by the Cardano Treasury. The total funds allocated has been ₳130,708,860 across a number of projects within Treasury Smart Contract, to date IOG has withdrawn ₳78,459,777.

Workstream Ada received % of allocation Corresponding Governance Action
Blockfrost ₳1,137,500 88% 8ad3d454f3496a35cb0d07b0fd32f687f66338b7d60e787fc0a22939e5d8833e#2
Catalyst ₳3,095,400 60% ** 8ad3d454f3496a35cb0d07b0fd32f687f66338b7d60e787fc0a22939e5d8833e#23
IOE ₳47,159,487 49% 8ad3d454f3496a35cb0d07b0fd32f687f66338b7d60e787fc0a22939e5d8833e#1
IOR ₳26,840,000 100% 8ad3d454f3496a35cb0d07b0fd32f687f66338b7d60e787fc0a22939e5d8833e#32
Governance ₳227,390 38% 8ad3d454f3496a35cb0d07b0fd32f687f66338b7d60e787fc0a22939e5d8833e#22

**Note: for Catalyst this only reflects the workstream that focuses on the Hermes Infrastructure and UX/UI improvements, not the execution and operation of Funds 14-16. Per Info Action this is in the process of transitioning to Cardano Foundation.

Net Change Limit Compliance

The requested amount does not at time of submission, on its own or in aggregate, breach the applicable 350M Net Change Limit covering Epoch 613 to Epoch 713.

In accordance with the guardrail TREASURY-02a, this withdrawal does not exceed the NCL at the moment of submission.

Audit & Oversight

Audit and oversight costs are included within the overhead applied to this proposal. The Intersect administration fee covers administrative oversight and is reflected within the cost of this proposal. Independent oversight will be provided through Intersect and technically capable third-party, including reporting obligations and milestone-based disbursement controls.

Standardized Format & Immutable Hosting

Upon finalization, this proposal will be hosted on IPFS in an immutable format. The blake2b-256 hash of the document will be provided for on-chain reference and verification.

Rationale highlights

Why some of the largest DReps voted for and against, in their own words.

  • Yes584.2M ₳

    Summary Yoroi DRep votes YES on “IO & VacuumLabs: Enhancing Plutus — Performance, Correctness, and Usability”. This is a change from Yoroi’s earlier ABSTAIN position, with the reasoning for that change set out below. Rationale Plutus evaluator accuracy...

    Summary

    Yoroi DRep votes YES on “IO & VacuumLabs: Enhancing Plutus — Performance, Correctness, and Usability”. This is a change from Yoroi’s earlier ABSTAIN position, with the reasoning for that change set out below.

    Rationale

    Plutus evaluator accuracy cannot be deferred.
    The conformance testing framework and Agda formalization ensure that any node implementation executes smart contracts identically and correctly. Without them, alternative node teams have no authoritative specification to test against as they progress toward production. That gap becomes harder to close the longer it remains unfunded, and that risk now outweighs the timing concern behind our original position.

    Distributed stewardship tips the balance.
    The VacuumLabs partnership spreads Plutus maintenance expertise across organisations, reducing single-point-of-failure risk in a critical part of the stack. Combined with IO’s track record of returning unused funds within the Intersect framework, both factors give Yoroi confidence in delivery at the requested scale.

    Conclusion

    Yoroi’s earlier abstention reflected a cautious moment in the cycle rather than a substantive objection to this work. Having reassessed the broader funding landscape and considered the sequencing implications more carefully, Yoroi changes its vote to YES and supports this proposal as a well-timed and well-governed investment in the foundations Cardano’s smart contract ecosystem depends on.

  • Yes435.8M ₳

    I am voting YES on "IO: Cardano Upgrades," "IO: Cardano High Assurance Technical Collaboration," and "IO & VacuumLabs: Enhancing Plutus - Performance, Correctness, and Usability." Cardano Upgrades: I believe that "Account Address Enhancement" and "Babel...

    I am voting YES on "IO: Cardano Upgrades," "IO: Cardano High Assurance Technical Collaboration," and "IO & VacuumLabs: Enhancing Plutus - Performance, Correctness, and Usability."

    Cardano Upgrades: I believe that "Account Address Enhancement" and "Babel Fees" are ultimately necessary for the Cardano ecosystem. These will enable progress toward micropayments (and the resulting strengthened sustainability of DApps and wallets), various features that are convenient under an account model, payment of transaction fees in tokens other than ADA (and—though this is outside the scope of this proposal—ultimately the removal of minimum UTXO ADA in native asset transactions). As for "Cardano Multi-Asset Treasury," I think it's likely not necessary right now, but in the future, when ADA's price improves, we may want to convert the treasury's ADA back into stablecoins. Preparing now so that this can be executed if and when we want to may be a good thing, since no one knows when prices will move.

    Cardano High Assurance Technical Collaboration: Various AI-powered hacks have been occurring across different ecosystems, with many tokens being stolen and sold by hackers. This tool can strengthen security, which is one of Cardano's strengths. If we can use 13,078,578 ADA to reduce the likelihood of hacks exceeding 13,078,578 ADA in value, this potentially makes sense.

    Enhancing Plutus: Improving the efficiency of Cardano's smart contract functionality, strengthening security features, and enhancing the developer experience are all necessary pieces.

    ーーー

    私は「IO: Cardano Upgrades」「IO: Cardano High Assurance Technical Collaboration」「IO & VacuumLabs: Enhancing Plutus - Performance, Correctness, and Usability」にYESを投票します。

    Cardano Upgrades:
    私は「Account Address Enhancement」と「Babel Fees」は最終的にCardanoのエコシステムに必要だと考えています。これにより少額決済(とそれによるDAppsやウォレットの持続可能性強化)やアカウントモデルによれば便利である様々な機能、ADA以外でのトランザクションフィーの支払い、(そしてこれはこの提案書の範疇ではないですが、そして最終的にはネイティブアセットTxにおける最小UTXO ADAの削除)へ進むことができます。私は「Cardano Multi-Asset Treasury」に関しては今必要ではない可能性が高いと思っていますが、将来的にADAの価格が改善した際に、トレジャリーのADAをステーブルコインに返還しておきたいと私たちは思う可能性があります。そう思った場合にそれが実行できるように準備をしておくことは良いことかもしれません。価格はいつ変動するか誰にもわからないからです。

    Cardano High Assurance Technical Collaboration:
    AIを活用したさまざまなハッキングが種々のエコシステムで発生し、多くのトークンがハッカーに盗まれ、売られています。このツールにより、Cardanoの強みの1つのセキュリティを強化することができます。13,078,578ADAを使用して、13,078,578ADA以上のハッキングの可能性を下げることができるのであれば、これは理にかなっている可能性があります。

    Enhancing Plutus:
    Cardanoのスマートコントラクト機能の効率性の向上、セキュリティ機能の強化、開発者体験の強化はいずれも必要なピースです。

  • I've thought a lot about this proposal, and decided to vote no. I'll share my rationale below: First off, as everybody knows, treasury spending is limited and there are a lot of proposals. That means that we have to triage features we want to build this...

    I've thought a lot about this proposal, and decided to vote no. I'll share my rationale below:

    First off, as everybody knows, treasury spending is limited and there are a lot of proposals. That means that we have to triage features we want to build this year. In my mind, Plutus is very stable. It's extremely rare that I meet a developer that wants to onboard onto Cardano, and the main blocker ends up being the Plutus usability. Almost always it's a consensus feature, a ledger feature, or a feature that Plutus fundamentally cannot deliver since it wasn't built for it (ex: ZK)

    That being said, Plutus does need to be maintained in three important ways even if working on it is not a core bet for how we will grow Cardano:

    1. Ensuring correctness (esp. against growing AI threats to code)
    2. Performance improvements (Plutus still powers many contracts, so improving Plutus performance benefits every user)
    3. Adding new precompiles (ex: upcoming post-quantum primitives being added to Cardano)

    However, all three of these features are more "maintenance" than "enhancing Plutus". In fact, the "Cardano Maintenance" proposal by IOG even mentioned Plutus Core maintenance in relation specifically to these points (and post-quantum work is proposed as different treasury proposals, so the cost of adding these precompiles I believe will largely not need to be covered by this proposal)

    I think Cardano needs some bold bets right now over maintenance. For example, if you gave developers the choice between making Plutus 1.5x faster or having event support for Cardano, I think a large number of people would pick events (and I think it would have a much bigger effect on Cardano adoption that slightly faster Plutus). However, adding events to Plutus requires a lot of rethinking about how things work (outside the scope of what this proposal is trying to do). I really don't think any of the "Developer experience" improvements mentioned in the proposal will move the needle at all (I think almost everybody will just dismiss these) compared to some of bigger ideas.

    However, I'll be monitoring this proposal to see how others vote. If it gets close to passing and I end up being the blocker, I may change my vote to avoid me being the blocker on this passing. I'm voting no mostly to signal my feeling on this proposal, but if the rest of the ecosystem wants this to pass as-is I do feel the Plutus team will use the funding honestly and will try to do their best with the funds received

  • No120.2M ₳

    This document includes the Cardano Foundation’s voting decisions and individual voting rationales for nine Treasury Withdrawal governance actions submitted by Input Output Global. A PDF version of this rationale is also made available. We have decided to...

    This document includes the Cardano Foundation’s voting decisions and individual voting rationales for nine Treasury Withdrawal governance actions submitted by Input Output Global.

    A PDF version of this rationale is also made available.

    We have decided to create a unified document to record our votes as many of the initiatives are connected.

    We invite the proposers and anyone else from the Cardano Community to carefully review our individual rationales below per proposal, as well as the following table.

    Governance Action Title CF DRep Vote
    97. IO - Developer Experience Initiative NO
    98. IO - Cardano Upgrades YES
    99. IO - Consensus Initiative YES
    100. IO & Ensurable Systems - Cardano Maintenance Initiative ABSTAIN
    101. IO & Midgard Labs - L2 Scalability Initiative ABSTAIN
    102. IO - Cardano High Assurance Technical Collaboration YES
    103. IO & VacuumLabs - Enhancing Plutus - Performance, Correctness, and Usability NO
    104. Blockfrost - Maintenance and Next Generation Indexing NO
    105. Pogun - Capital Without Compromise YES

    Individual Rationales

    The following section contains all nine individual voting rationales for the above-mentioned proposals.

    97. IO - Developer Experience Initiative

    Summary

    The Cardano Foundation votes NO. We are eager to collaborate on DevX, but this proposal is expensive, lacks financial granularity, and risks duplicating ecosystem efforts. We encourage returning with a leaner, more detailed, and coordinated resubmission addressing the points as recommended below.

    Rationale Statement

    We recognize that developer onboarding is a critical vertical, and we appreciate the proposers targeting legitimate ecosystem pain points. While we fully support the overarching goals, we cannot approve this treasury withdrawal in its current form due to the following structural and financial concerns:

    1. Costs Lacking Granularity: The request for approximately 900k USD is exceptionally high for a 6-month timeframe. The budget lacks a meaningful Full-Time Equivalent (FTE) breakdown, allocating 81% to a broadly categorized "Development & Engineering" bucket. This makes it difficult to distinguish between community bounties, hackathon prizes, and administrative overhead, hindering our ability to evaluate financial proportionality.Creating CLI tooling, cleaning documentation, and building contract templates can be achieved in a cost-effective way which does not require a budget of this size.
    2. Overlap with Active CF and Intersect Initiatives: The proposal intends to restructure the "Developer HUB" using the Developer Portal as its primary entry point. The Developer Portal is already actively maintained, funded, and strategized by the Cardano Foundation alongside Intersect committees. While we are highly receptive to ecosystem contributions, requesting nearly 900k USD to duplicate or restructure ongoing work is inefficient. We would welcome collaboration on this workstream to improve cost efficiency.
    3. Severe Execution Risk: The proposal requests funding for only six months. The proposer indicates that the engineering team for these workstreams has not yet been established and will be hired using the funds released from this withdrawal. Setting up a new team and familiarizing them with the necessary ecosystem intricacies will conservatively consume a significant portion of this short timeframe, jeopardizing the delivery schedule. A future proposal would be significantly strengthened by establishing an upfront execution structure. Clearly identifying, aligning, and sharing ownership with ecosystem partners from the outset ensures precise accountability for all deliverables.
    4. Lack of Long-Term Ownership and Maintenance: There is no clear transition strategy for the resulting products (such as cardano-init or the contracts library) after the initial six-month funding period. The ecosystem requires continuous, ongoing feedback and maintenance for developer tools, rather than a highly expensive, short-term sprint that risks leaving behind abandoned infrastructure if subsequent funding is not secured.
    5. Open Source Fragmentation: While cardano-init is explicitly designed as an aggregation layer to unify and elevate existing ecosystem tools rather than replace them, its long-term value hinges heavily on sustained community buy-in. The proposal’s strategy for allocating bounties and incentives to existing tool maintainers is a strong step toward coordination. However, the primary risk shifts from community fragmentation to the execution of integrations: we must ensure that external toolmakers actively maintain these integrations over time so the aggregator remains a reliable, up-to-date entry point for new developers.
    Conclusion

    The Cardano Foundation votes NO. While the ambition to improve Cardano's developer experience is valued, this proposal's steep cost, execution risks, and overlapping scope prevent us from approving it in its current form. To secure approval, a resubmission must be leaner, more cost-effective and provide a granular FTE budget breakdown for financial transparency. It should also integrate with active Cardano Foundation and Intersect initiatives to avoid duplicating ongoing work, establish an execution structure with a pre-identified team to ensure delivery within the tight six-month window, and outline a strategy for long-term maintenance and community buy-in.

    98. IO - Cardano Upgrades

    Summary

    The Cardano Foundation votes YES. CIP-159, CPS-23, and Native Babel Fees have potential to improve L2 reserves, protect against volatility, and improve onboarding. Despite certain budget and execution concerns, we view the 13.1M ada ask as an acceptable investment.

    Rationale Statement

    We recognize the impact these three platform-level capabilities will have on Cardano’s economic models and ecosystem growth. We are voting YES based on the following technical and strategic assessments:

    1. Critical Infrastructure and Economic Resilience: The CIP-159 (Account Address Enhancements) upgrade bridges the gap between UTXO and Account models. By solving the minUTxO constraints, it enables micro-fee collection, cheaper DeFi batcher operations, and introduces new smart contract paradigms more familiar to EVM developers. Furthermore, it is a prerequisite for seamless L2 reserve management. CPS-23 (Multi-Asset Treasury) enables the Cardano Treasury to hold stablecoins or other native assets, which is a next step for long-term sustainability. It could protect the ecosystem's funding runway from ADA price volatility and introduce the potential for diverse treasury holdings.
    2. Native Babel Fees and Onboarding: While non-native (smart contract-based) Babel fees currently exist within the ecosystem, they have struggled to gain significant traction. Allowing users to interact with Cardano DApps using stablecoins or bridged assets without first acquiring ADA will hopefully be a driver for mainstream institutional and retail adoption.

    3. Feedback for Ongoing Alignment: While we support funding this initiative, there are elements of this proposal which raised concerns and we wish to offer feedback.

    Implementing CIP-159 fundamentally alters Cardano's accounting model. With alternative nodes like Amaru and Dingo actively in development, introducing such massive ledger changes requires careful coordination. Making frequent, significant modifications directly onto the Layer 1 core ledger introduces substantial maintenance fatigue for open-source builders, which can be lessened with coordination. We urge IO to collaborate to establish a clear framework for alignment with other node implementation and material downstream tooling teams to prevent consensus fragmentation.

    Workstream 2 allocates roughly $565,000 USD primarily to design and draft the Multi-Asset Treasury CIP. For a design-phase deliverable, this is a premium investment. We expect this effort to feature rigorous, high-quality deliverables, contributions to improvements to the overall CIP process and extensive community consultation to reflect the amount.

    Workstream 3 includes integration with the Lace wallet. Given the use of treasury funds, we expect the IO team to ensure that the underlying infrastructure for Native Babel Fees is open and easily accessible for all ecosystem wallets, Tx builders (e.g., Mesh, Lucid Evolution), and indexers, rather than focusing support solely on its own products.

    Although these concerns are valid, we appreciate the dialogue with IOG on this proposal which contributed to this voting decision.

    Conclusion

    The Cardano Foundation votes YES. The combination of Account Enhancements, a Multi-Asset Treasury, and Native Babel Fees represents a step forward for Cardano's scalability, developer experience, and economic sustainability.

    99. IO - Consensus Initiative

    Summary

    The Cardano Foundation votes YES. Leios is important for scaling Cardano and long-term competitiveness. Despite concerns over budget opacity and prior funding overlaps, delaying this upgrade risks ecosystem stagnation. We approve to ensure development continuity.

    Rationale Statement

    We recognize the impact that the Consensus Initiative (Leios) will have on the network’s capacity. We are voting YES based on the following technical and strategic assessments:

    1. Essential Base Layer Scaling: Scaling through Leios is fundamentally positive and provides Cardano with a massive upgrade. To ensure Cardano remains competitive with newer Layer 1 blockchains in terms of throughput, upgrading the base protocol is non-negotiable. This prevents the network from adopting unsustainable design patterns, such as forcing all high-volume activity to Layer 2 solutions.
    2. Core Infrastructure Investment: This proposal is a direct investment in the core protocol infrastructure. The Leios research phase has produced solid, academic-level work fully in the spirit of a peer-reviewed blockchain.
    3. Development Continuity: Leios development requires highly specialized knowledge. Voting NO at this critical juncture would risk halting momentum, meaning expert engineering teams would need to be replaced or re-assembled at a later date. Approving this proposal ensures the unbroken continuation of the roadmap toward the Dijkstra era.
    Conclusion

    The Cardano Foundation votes YES. We recognize that Leios is a credible path available to meet Cardano's 2030 scaling ambitions. While we have significant concerns regarding the insufficiently detailed, escalating budget, the risk of derailing base-layer scaling is too significant.

    100. IO & Ensurable Systems - Cardano Maintenance Initiative

    Summary

    The Cardano Foundation votes ABSTAIN. We appreciate the dialogue with IOG on this proposal, which contributed to our voting decision. While continuous maintenance is important for long-term network stability, this 62.1M ada proposal presents fiscal uncertainty and the scope appears to duplicate funding of other concurrent initiatives.

    Rationale Statement

    While the critical importance of keeping the network operating securely is undisputed, our evaluation reflects several material concerns regarding the current formulation of the proposal:

    1. Lack of Budget Detail/Potential Duplications: This proposal bundles nine maintenance workstreams into a single budget, grouping 74% (46M ada) of the funds into a broad "Development" category, which, without a granular Full-Time Equivalent (FTE) headcount breakdown, limits the capacity to verify cost efficiency. Additionally, given that the same development teams contribute across multiple initiatives, there appears to be a funding overlap with resources already requested in the Upgrades, Plutus, Consensus, and Developer Experience proposals. Providing a more detailed budget breakdown would help the community in conducting a clear cost-benefit analysis and ensure there is no duplication of funding.
    2. Lack of Quantifiable Deliverables: The proposal functions structurally as an open-ended funding commitment lacking defined technical boundaries, presenting a deficit of tangible deliverables, milestones, or open-source repository evidence mapping out the work. Without clear engineering baselines, it acts as an unquantifiable blanket retainer that challenges our ability to properly assess the proposal.
    3. Substantial Budget Inflation: The requested amount of 62.1M ada (approximately 14.9M USD) represents a high allocation of treasury resources. Industry baselines indicate that these costs are significantly inflated relative to the actual operational overhead required for equivalent DevOps and core maintenance tasks.
    4. Structural Preference for Targeted Initiatives: The Cardano Foundation maintains a clear structural preference for a modular funding framework wherever possible. Funding generalized blanket proposals introduces fiscal uncertainty, whereas smaller, targeted sub-proposals (such as specific consensus, developer experience, or scaling layer initiatives) feature transparent line-item budgets and clearly defined milestones that allow for rigorous milestone-based verification.
    5. Node Diversity Risks: To support a healthy multi-client ecosystem, overarching services such as global network monitoring and core documentation (e.g., the Cardano Blueprint) should be gradually decoupled from node-specific maintenance to ensure a completely product-agnostic and inclusive infrastructure landscape.
    Conclusion

    The Cardano Foundation votes ABSTAIN. We appreciate the critical nature of network maintenance and the expertise of the proposing teams. However, we require greater financial transparency, and a more node-agnostic approach to ecosystem tooling in order to properly assess this proposal. If this proposal does not reach the required approval threshold, we ask the proposers to refine and resubmit. A resubmission would greatly benefit from a decoupled structure, detailed FTE allocations, and an independent oversight mechanism to ensure verifiable and neutral delivery.

    101. IO & Midgard Labs - L2 Scalability Initiative

    Summary

    The Cardano Foundation votes ABSTAIN. While Layer 2 scaling is important for enterprise DApps, the proposal's lack of budget granularity, contested IP, and unresolved 2025 milestones introduce uncertainty. While we do not oppose this proposal, we urge a refined resubmission if it does not pass.

    Rationale Statement

    We support the technological objectives and the necessity of Layer 2 scaling, however we require further clarity regarding the following uncertainties before we are able to support:

    1. Unclear Scope and Structural Bundling: The proposal bundles two Layer 2 technologies at different stages of their respective product lifecycles into a single governance action. Furthermore, the financial distribution is skewed; despite being a titular focus of the initiative, the Midgard workstream receives only 9% of the allocated funding, while Hydra consumes approximately 73%.
    2. Milestone Accountability and Prior Deliverables: Midgard's 2025 funded milestones under contract EC-0001-25 were previously reported as past due and paused. While new evidence was submitted on May 19 to claim milestones 2–5, these submissions remain pending final verification. Committing additional treasury resources without a fully finalized reconciliation of past deliverables introduces significant fiscal uncertainty.
    3. Budget Granularity and Potential Overlaps: The 10.4M ada request lacks a granular breakdown. The technical scope for Workstream 2 (Hydra) closely mirrors the team's existing public roadmap and open pull requests, making it difficult to isolate net-new work from previously funded core engineering efforts. Additionally, the 1.8M ada requested for a bespoke Data Availability (DA) prototype does not sufficiently clarify why existing modular alternatives are unsuitable.
    4. Technical, IP, and Organizational Risks: The proposal contains contradictory timelines regarding the Midgard mainnet launch (end of 2026 versus Q1 2027). Subject Matter Experts (SMEs) also noted unresolved authorship and payment disputes (e.g., PR #434) that introduce contested-IP risks. Finally, the legal distinction and relationship between "Midgard Labs" and Anastasia Labs require clarification to ensure accountability.
    5. Unsubstantiated Metrics and Commercial Dependencies: Performance claims such as "10,000+ TPS" are presented without concrete benchmarking data or baseline metrics. Furthermore, the proposal relies heavily on specific commercial partners (like Delta DeFi and Masumi) continuing to build, without providing contingency plans. Ideally, commercial entities utilizing the stack for enterprise applications should contribute to the hardening of the infrastructure they rely upon.
    Conclusion

    The Cardano Foundation votes ABSTAIN. We appreciate the dialogue with IOG on this proposal which contributed to our voting decision. We value the technical ambition of this initiative and respect the engineering teams involved, but we cannot support this proposal in its current state without proper budget breakdowns, clarity on IP, and clear accountability for past milestones. If this proposal does not reach the required approval threshold, we ask the proposers to refine and resubmit their initiative.

    102. IO - Cardano High Assurance Technical Collaboration

    Summary

    The Cardano Foundation votes YES. Automating formal verification is a strategic public good that reinforces network security. Despite significant concerns regarding budget opacity and adoption risks, the ecosystem benefits outweigh the reservations.

    Rationale Statement

    We support this proposal because it aligns with Cardano's core value proposition of security, correctness, and determinism. Our YES vote is grounded in the following primary drivers:

    1. Strategic Digital Trust Infrastructure: Cardano’s underlying smart contract model, based on Lambda calculus and determinism, is uniquely positioned for formal mathematical verification. Recent high-profile vulnerabilities in EVM-based DeFi protocols, such as the ~$300M Kelp DAO exploit, highlight that verifiable security is a strict prerequisite for institutional adoption. This enables a shift away from high-risk environments toward highly secure, institutional-grade DeFi applications.
    2. Universal Ecosystem Support via UPLC: The proposed automated verification tool, Blaster, operates directly on Untyped Plutus Core (UPLC). This architectural choice is strategic, as it avoids siloed development and simultaneously supports developers across the ecosystem, regardless of whether they write in Aiken, Plutus, or other high-level smart contract languages.
    3. Lowering the Barrier to Entry: Historically, formal verification has been restricted to specialized experts. By providing a Lean4-based verification enabler, integrating it directly into native toolchains (e.g., VS Code), and offering extended "one-click" containerized developer environments, this initiative significantly democratizes access to production-ready, secure smart contract development.
    4. AI-Agentic Workflow Readiness: As software engineering transitions toward AI-assisted development, the emphasis on robust Command Line Interfaces (CLIs) within this proposal provides a strong, secure foundation for future integration with autonomous AI agents, ensuring Cardano's toolchain remains forward-looking.
    5. Reusable and Auditable Components: The initiative focuses on d
See all 86 rationales