{"id":51509139,"url":"https://github.com/valkyoth/cardano","last_synced_at":"2026-07-09T05:00:29.901Z","repository":{"id":368781656,"uuid":"1286844145","full_name":"valkyoth/cardano","owner":"valkyoth","description":"Cardano protocol building blocks for Rust, with bounded CBOR/CDDL boundaries, era-aware design, explicit security policy, and release evidence.","archived":false,"fork":false,"pushed_at":"2026-07-02T10:11:53.000Z","size":475,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-07-08T04:21:05.435Z","etag":null,"topics":["ada","blockchain","cardano","cardano-ledger","cbor","cddl","cip","cryptography","fuzzing","hacktoberfest","no-std","ouroboros","plutus","rust","rust-crate","rustlang","security","utxo"],"latest_commit_sha":null,"homepage":"https://crates.io/crates/cardano","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/valkyoth.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":["eldryoth"],"thanks_dev":"u/gh/eldryoth"}},"created_at":"2026-07-02T06:35:42.000Z","updated_at":"2026-07-02T10:05:02.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/valkyoth/cardano","commit_stats":null,"previous_names":["valkyoth/cardano"],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/valkyoth/cardano","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valkyoth%2Fcardano","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valkyoth%2Fcardano/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valkyoth%2Fcardano/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valkyoth%2Fcardano/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/valkyoth","download_url":"https://codeload.github.com/valkyoth/cardano/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valkyoth%2Fcardano/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ada","blockchain","cardano","cardano-ledger","cbor","cddl","cip","cryptography","fuzzing","hacktoberfest","no-std","ouroboros","plutus","rust","rust-crate","rustlang","security","utxo"],"created_at":"2026-07-08T04:01:37.377Z","updated_at":"2026-07-09T05:00:29.880Z","avatar_url":"https://github.com/valkyoth.png","language":"Python","funding_links":["https://github.com/sponsors/eldryoth","https://thanks.dev/u/gh/eldryoth"],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cb\u003eno_std-first Cardano protocol building blocks for Rust.\u003c/b\u003e\u003cbr\u003e\n  Explicit domains, bounded CBOR/CDDL policy, era-aware validation boundaries, and security-gated release evidence.\n\u003c/p\u003e\n\n\u003cdiv align=\"center\"\u003e\n  \u003ca href=\"https://docs.rs/cardano\"\u003eDocs.rs\u003c/a\u003e\n  |\n  \u003ca href=\"docs/RELEASE_PLAN.md\"\u003eRelease Plan\u003c/a\u003e\n  |\n  \u003ca href=\"docs/threat-model.md\"\u003eThreat Model\u003c/a\u003e\n  |\n  \u003ca href=\"SECURITY.md\"\u003eSecurity\u003c/a\u003e\n\u003c/div\u003e\n\n\u003cbr\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/valkyoth/cardano\"\u003e\n    \u003cimg src=\"https://raw.githubusercontent.com/valkyoth/cardano/main/.github/images/cardano.webp\" alt=\"cardano Rust crate overview\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n# cardano\n\n`cardano` is a `no_std`-first Rust workspace for Cardano protocol building\nblocks.\n\nThe project target is a production-ready Cardano crate at `1.0.0`, reached\nthrough small releases with explicit security, conformance, and dependency\nevidence. The first implementation work is intentionally conservative:\nexplicit domains, bounded CBOR/CDDL policy, stable crate boundaries, and\nsecurity documentation before node protocols, signing, local keys, Plutus\nexecution, or wallet-adjacent helpers become real dependencies.\n\n## Current Status\n\nStatus: `v0.3.0` domain-newtypes implementation stop reached;\nwaiting for pentest.\n\nImplemented now:\n\n- Rust workspace pinned to stable `1.96.1`.\n- MSRV policy for Rust `1.90.0` through `1.96.1`.\n- `no_std` facade and focused first-party crate boundaries.\n- Cardano-specific implementation, release, scope, threat-model, modularity,\n  toolchain, unsafe, spec-source, and supply-chain docs.\n- Local check, release-gate, dependency-policy, SBOM, and pentest evidence\n  tooling adapted from the same process model and reset for Cardano.\n- Official-source workflow for `cardano-ledger`, `cardano-node`,\n  `ouroboros-network`, and CIPs.\n- Initial crate boundaries for primitives, CBOR, crypto, addresses, ledger,\n  scripts, governance, node, RPC, sanitization, signer, testkit, and the\n  `cardano` facade.\n- Release-readiness tooling for release notes, SBOM, permanent pentest report\n  metadata, reviewed-commit checks, tag-exists checks, and support-crate\n  publish-order validation.\n- Explicit primitive domains for network ids, eras, slots, epochs, block\n  numbers, coins, transaction ids, block hashes, datum hashes, script hashes,\n  key hashes, policy ids, credentials, and bounded asset names.\n\nNot implemented yet:\n\n- No protocol decoders.\n- No ledger validation.\n- No CBOR/CDDL conformance vectors.\n- No address parser.\n- No native script or Plutus data implementation.\n- No transaction builder or signer.\n- No local key storage.\n- No node-to-client or node-to-node protocol support.\n- No RPC/query/submit transport.\n- No wallet, indexer, or full-node behavior.\n\n## Trust Dashboard\n\n| Area | Status |\n| --- | --- |\n| License | `MIT OR Apache-2.0` |\n| MSRV | Rust `1.90.0` |\n| Pinned toolchain | Rust `1.96.1` |\n| Default target | `no_std` |\n| Default runtime dependencies | first-party scaffold crates only |\n| Unsafe policy | first-party crates use `#![forbid(unsafe_code)]` |\n| Default features | protocol-core boundaries only |\n| Network/signing defaults | none |\n| Release evidence | local gates, cargo-deny, cargo-audit, SBOM, pentest report |\n| Formal verification | Kani harness planned before `1.0.0` as extra assurance |\n| Crate versions | tracked in [`docs/CRATE_VERSION_MATRIX.md`](docs/CRATE_VERSION_MATRIX.md) |\n| 1.0 target | serious production-ready Cardano protocol toolkit |\n\n## Install\n\n```toml\n[dependencies]\ncardano = \"0.3\"\n```\n\n## Features\n\n| Feature | Default | Purpose |\n| --- | --- | --- |\n| `std` | no | Enables `std` support in admitted core crates. |\n| `node` | no | Future node-to-client and node-to-node protocol boundary. |\n| `rpc` | no | Future query/submit trust-policy boundary. |\n| `sanitization` | no | Future secret-bearing data sanitization bridge APIs. |\n| `signer` | no | Future signer isolation boundary. |\n| `testkit` | no | Test fixtures, conformance helpers, and adversarial inputs. |\n\nDefault builds do not enable networking, signing, local key storage, Plutus\nexecution, wallet behavior, or node operation.\n\n## Source Discipline\n\nCardano protocol behavior must not be implemented from memory. Every milestone\nthat changes consensus-sensitive behavior starts by checking current official\nsource material, pinning exact revisions in `spec-lock.toml`, importing only\nthe required fixtures into the external reference store, and updating\n[`docs/SPEC_MATRIX.md`](docs/SPEC_MATRIX.md).\n\nPrimary source families:\n\n- `https://github.com/IntersectMBO/cardano-ledger`\n- `https://github.com/IntersectMBO/cardano-node`\n- `https://github.com/IntersectMBO/ouroboros-network`\n- `https://github.com/cardano-foundation/CIPs`\n\n## Release Discipline\n\nEvery version must stop before tagging until security review and pentest\nevidence exist for the exact implementation commit. Tagging and publishing are\nmanual maintainer actions, not automatic side effects of implementation.\n\n```text\nvX.Y.Z implementation stop reached. Run pentest for this exact commit.\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvalkyoth%2Fcardano","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvalkyoth%2Fcardano","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvalkyoth%2Fcardano/lists"}