# Bonds-only Base Mainnet Manifest — Validation Results

## Commit

- Commit: amended after deterministic-provenance hardening (see final Git hash).
- Checked-in source/evidence commits and archive hashes are null by design; deterministic finalization derives them from the reviewed integration repository.
- Target chain: Base mainnet (`8453`)
- Operations performed: offline file validation and tests only. No wallet access,
  signing, RPC request, deployment, funding, or broadcast was performed.

## Implemented controls

- Enabled deployment order: `MultisigGovernanceV3`,
  `BasePilotAccessControllerV3`, `ThresholdConsensusV3`,
  `DisputeRegistryV3`, `SafeBondFactoryV3`.
- Child types are limited to `PartnershipBondV3Safe` and
  `AccountabilityBondV3Safe`; rewards, escrow, mutual aid, vault, validation,
  identity/evidence/mandate modules, Solana, and cross-chain are excluded.
- Native caps: global `0.40 ETH` (`400000000000000000` wei) and per-position
  `0.20 ETH` (`200000000000000000` wei). Every bond cap is no larger than the
  per-position limit.
- The v2 template binds compiler settings, schema/payload integrity hashes,
  order, constructor args, CREATE nonce derivation assumptions, reward
  exclusion (`address(0)`), 3-of-5 governance, 24-hour timelock, pause flow,
  assertions, and explicit approval state. Deterministic finalization binds
  source/evidence commits, trees, and archive SHA-256s.
- The generator is unsigned/non-broadcast and produces creation/runtime keccak
  hashes and expected CREATE addresses only from clean artifacts plus an
  owner-supplied public deployer and nonce.

## Validation run

- `python3 pr8/pilot/deployment_manifest.py` — passed.
- `python3 -m unittest discover -p 'test_*.py' -v` from `pr8/pilot` — passed after hardening (16 tests).
- `python3 -m py_compile deployment_manifest.py generate_bonds_only_package.py
  bootstrap_profile.py generate_bootstrap_package.py` — passed.
- `git diff --check` before commit — passed.

## Residual blockers (intentional fail-closed state)

1. Checked-in source/evidence commits, Git trees, archive hashes, and external evidence references remain null until `finalize_bonds_only_manifest.py` is run against the reviewed integration repository.
2. Checked-in governance signer, guardian, attester, adjudicator, and partner
   fields remain null/empty. No roles were invented.
3. Explicit owner approval and approval evidence remain false/null.
4. No reviewed public deployer address or starting nonce exists, so the manifest
   has no expected deployment addresses; the package generator resolves them
   only when those inputs are approved.
5. `forge` is unavailable in this environment. No clean `solc 0.8.24` Foundry
   artifacts were generated, so no actual creation/runtime code hashes were
   asserted against compiled contracts.
6. Audit, Base Sepolia, and x402 records remain null and unsatisfied; this
   tooling does not promote them.
7. Guardian pause targets cannot be constructor-supplied because the bonds are
   factory-created after governance deployment and governance rejects targets
   without code. The manifest requires a 3-of-5, timelocked, post-deploy
   `addGuardianPauseTarget(actualChildAddress)` review/verification flow. This is a fail-closed post-deployment assertion, not an on-chain atomic enforcement claim: the current governance API has no atomic batching, leaving the child-creation to pause-target-addition interval as an operational review gate.
