feat(pool): replace stQRL with native QRL pooled staking - #46
Merged
Merged
Conversation
moscowchill
marked this pull request as ready for review
September 16, 2026 07:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Users now hold on-chain native QRL positions and request native QRL claims. The transferable stQRL contract, token ABIs, mint/burn flows and old deployment commands are retired. Validator funding remains bound to the canonical withdrawal recipient, with authenticated finalized accounting, deterministic FIFO withdrawals and an immutable 10% fee on eligible earned consensus gains.
The final review fixes zero-value FIFO blocking while preserving late-return rights, obsolete wallet transaction callbacks, missing exporter-down alerts and broad internal monitoring port bindings. Dependency locks are updated and the latest dev navigation/shared wallet UI is preserved. See native/FINAL-SECURITY-REVIEW.md for findings, evidence and residual risks.
Validation: the final pinned native suite passed with 38 model tests, 65,217 actual QRVM steps (385 expected reverts) and 32 tooling tests. This includes 12 added randomized histories, 768 action selections and 1,668 invariant snapshots. Frontend lint/typecheck/42 tests/build pass; the earlier phone/desktop browser, 26 monitoring-rule parses, seven alert scenarios and Terraform validation remain applicable. Hosted CI covers model/tooling/monitoring/frontend; the full compiler/native-VM gate was executed locally.
The prior frozen local graph completed a real validator exit, principal/reward withdrawal and 10% fee reconciliation to zero residue. A separate graph demonstrated pool-timeout cash recovery. Those runs predate the final zero-value FIFO runtime fix; a full funded lifecycle on the exact final bytecode remains a launch gate. Other gates include anchor and sampled-committee assumptions, production proof economics/timing, public early-exit policy and transaction-tip routing. This PR publishes a candidate for review and does not authorize a public launch.
No upstream QRL changes, remote deployments, public-chain transactions or legacy state recovery. Historical prototype evidence is explicitly separated from active native code.
Two additional independent internal agent reviews found no new confirmed contract defect. Follow-up fixes a Low pending-refund discovery issue: cancelled recent deposits can no longer hide older refundable deposits from the bounded list. Manual deposit-ID refunds remained available. The new state-machine corpus executes synthetic accounting histories in the actual native QRVM. See native/MERGE-REVIEW.md for exact scope, seeds, results and oracle limitations. Contract source, storage and ABI are unchanged by this follow-up.