https://gitlab.com/tezos/tezos
Tip revision: 631a98d972d832382af739ef0d622ce0157f0ac8 authored by Thomas Letan on 04 March 2024, 09:18:27 UTC
fixup: rebase command
fixup: rebase command
Tip revision: 631a98d
018_oxford.rst
Protocol Oxford
===============
This page documents the changes brought by protocol Oxford with respect
to Nairobi (see :ref:`naming_convention`).
The code can be found in directory :src:`src/proto_018_Proxford` of the ``master``
branch of Octez.
.. contents::
Environment Version
-------------------
This protocol requires a different protocol environment version than Nairobi.
It requires protocol environment V11, compared to V9 for Nairobi.
- Simplify the timelock ``opening_result`` type in the environment as we do not deal with ``Bogus_cipher`` any longer. (MR :gl:`!8404`)
- Expose encoding with legacy attestation name. (MR :gl:`!8620`)
Smart Rollups
-------------
- Add the support for bootstrapped smart rollups in storage initialization,
similarly to bootstrapped accounts and smart contracts. (MR :gl:`!8552`)
- Remove the origination proof from the smart rollups’ origination operation.
(MR :gl:`!8817`)
- The field ``commitment`` in the operation ``Sc_rollup_cement`` is now removed.
It was no longer used and was deprecated in Nairobi. This also mean that the
commitment does not need to be provided in the client command. (MR :gl:`!8850`)
Before::
./octez-client cement commitment <commitment hash> from <src> for smart rollup <smart rollup address>
Now::
./octez-client cement commitment from <src> for smart rollup <smart rollup address>
- Enable the latest version of the WASM PVM (``2.0.0-r2``). Existing smart
rollups will see their PVM automatically upgrade, and newly originated smart
rollups will use this version directly (MR :gl:`!9051`)
- Add one new host function to the WASM PVM: ``store_exists`` (MR :gl:`!9204`).
- Remove dead refutation games at migration time. A game is dead if both players
are no longer staking. (MMR :gl:`!8975`)
- Reduce cost for internal transaction to smart rollup (MR :gl:`!9284`)
- The ``smart_rollup_originate`` operation now also takes an optional
whitelist of public key hashes. This whitelist cannot be used yet
(the ``sc_rollup.private_enable`` flag has to be set to true). (MR :gl:`!9401`)
- The ``transferring`` parameter from smart rollup client command
``get proof for message <index> of outbox at level <level>`` is now optional. (MR :gl:`!9461`)
- Enable the latest version of the WASM PVM (``2.0.0-r3``). Existing smart
rollups will see their PVM automatically upgrade, and newly originated smart
rollups will use this version directly (MR :gl:`!9735`)
- Added the updated whitelist for private rollups in the receipt of
the outbox message execution receipt. (MR :gl:`!10095`)
- Add private rollups: smart rollup with an updatable whitelist stakers. Only stakers on the whitelist can publish commitment and participate in a refutation game. (MRs :gl:`!9823`, :gl:`!10104`, :gl:`!9823`, :gl:`!9572`, :gl:`!9427`, :gl:`!9472`, :gl:`!9439`, :gl:`!9401`)
Adaptive Issuance (experimental)
----------------------------------
- This protocol expands the voting system for bakers to include
Adaptive Issuance alongside Liquidity Baking. This vote is ignored
on Mainnet (as explained below), but active on testnets for
testing purposes. Bakers may use the per-block votes
file, or CLI option ``--adaptive-issuance-vote``. If they do
not vote for the Adaptive Issuance feature, the vote defaults to
"pass" (unlike the case of Liquidity Baking, whose vote remains mandatory).
- Adaptive Issuance is locked behind a feature flag and cannot be activated for
this proposal. The voting mechanism for Adaptive Issuance remains accessible,
but is ignored and can never activate the feature. Moreover, the vote EMA will
be reset before reactivating the feature flag. (MR :gl:`!10371`)
- The new ``stake`` and ``unstake`` operations are currently deactivated on Mainnet, calls to
these operations will fail. Staking and unstaking transfers are still used
internally, and may appear in balance receipts. (MR :gl:`!10849`)
- The new staking mechanism is used internally to freeze deposits automatically
at cycle ends, and mimic Nairobi's behavior. (MR :gl:`!10562`)
- Most rewards (baking rewards, baking bonuses, attestation rewards, revelation
rewards) are partially paid on the frozen deposits balance in addition to the spendable
balance. Manager operations fees and denunciation rewards are still paid on
the spendable balance. (MR :gl:`!8091`)
- Denunciation rewards computation updated to depend on ``limit_of_staking_over_baking``. (MR :gl:`!8939`)
When the feature flag is enabled (testnets only), the following extra changes happen:
- Add parameter ``limit_of_staking_over_baking`` as the limit of the ratio of tez staked by other delegators over the baker's own, for a given baker. (MR :gl:`!8744`)
- Multiplicative coefficient (with a dynamic part) applied to reward values. (MRs :gl:`!8860`, :gl:`!8861`)
- EMA and launch cycle. (MRs :gl:`!8967`, :gl:`!9002`, :gl:`!9025`, :gl:`!9058`)
- Staking and deposits. (MRs :gl:`!8940`, :gl:`!8957`, :gl:`!8958`, :gl:`!8965`, :gl:`!8966`, :gl:`!8973`,
:gl:`!9000`, :gl:`!9014`, :gl:`!9018`, :gl:`!9022`, :gl:`!9023`, :gl:`!9031`, :gl:`!9033`, :gl:`!9039`,
:gl:`!9040`, :gl:`!9052`, :gl:`!9054`, :gl:`!9055`, :gl:`!9069`)
- New RPCs introduced: total supply, total frozen stake, launch cycle.
(MRs :gl:`!8982`, :gl:`!8995`, :gl:`!8997`, :gl:`!9057`)
- The ``unstake`` client command uses the ``amount`` field instead of an extra parameter. (MRs :gl:`!10377`, :gl:`!10429`)
- Balance updates now include more information related to staking in general,
including slashing and rewards. (MRs :gl:`!10485`, :gl:`!10486`, :gl:`!10487`,
:gl:`!10488`, :gl:`!10496`, :gl:`!10526`, :gl:`!10766`, :gl:`!10853`)
- Unstaked frozen deposits, i.e recently unstaked funds, can be used by bakers
to be staked again (unless the baker has been slashed). They are used in
addition to liquid funds for staking, prioritizing the most recent unstake
requests. (MR :gl:`!10781`)
Breaking Changes
----------------
- Protocol parameter ``ratio_of_frozen_deposits_slashed_per_double_endorsement``
is converted from the ratio ``1/2`` into the percentage ``50%`` and renamed to
``percentage_of_frozen_deposits_slashed_per_double_attestation``. (MRs
:gl:`!8753`, :gl:`!9440`)
- Protocol parameter ``double_baking_punishment`` is converted from a fixed
value of ``640tz`` into the percentage ``5%`` and renamed to
``percentage_of_frozen_deposits_slashed_per_double_baking``. (MR :gl:`!8753`, :gl:`!10431`)
- Since protocol Ithaca, the ratio of delegated tez over the delegate's frozen deposit
must be at most 9. Until now, this was ensured by a protocol parameter named
``frozen_deposits_percentage`` (whose value is 10%) representing the minimal percentage
of frozen deposit. We convert it from a percentage to a factor named
``limit_of_delegation_over_baking`` whose value is 9. (MR :gl:`!8884`)
- Receipts involving the ``Deposits`` kind of balance are updated in a
non-backward-compatible manner. It allows non-delegates, and
distinguishes updates to a delegate's balance from sharing of rewards
and punishments. (MR :gl:`!9498`)
- Field ``for_double_endorsing`` from context storage has been renamed into
``for_double_attesting``. (MR :gl:`!9486`)
- Field ``endorsing_reward_per_slot`` from rewards storage has been renamed into
``attesting_reward_per_slot``. (MR :gl:`!9486`)
- Field ``missed_endorsements`` from contract storage has been renamed into
``missed_attestations``. (MR :gl:`!9486`)
- Fields ``preendorsements_seen``, ``endorsements_seen`` and
``double_endorsing_evidences_seen`` from the mempool's ``operation_state``
encoding has been renamed ``preattestations_seen``, ``attestation_seen`` and
``double_attesting_evidences_seen``. (MR :gl:`!9440`)
- A DAL attestation operation now contains a new ``slot`` field, while the
``attestor`` field is removed. (MRs :gl:`!10183`, :gl:`!10294`, :gl:`!10317`)
RPC Changes
-----------
- Split duplicated argument ``pkh`` in RPC ``smart_rollups/smart_rollup/<address>/staker1/<pkh>/staker2/<pkh>/timeout``
and ``smart_rollups/smart_rollup/<address>/staker1/<pkh>/staker2/<pkh>/timeout_reached`` into ``/staker1/<staker1_pkh>/staker2/<staker2_pkh>``.
This changes the RPC description but not its use. (MR :gl:`!8339`)
- Update context with new reward parameters. This changes the JSON from the RPC
``/chains/main/blocks/head/context/constants``. (MR :gl:`!8657`)
- Remove the RPC for computing smart rollups’ origination proofs
``smart_rollups/all/origination_proof``. (MR :gl:`!8817`)
- Add the consensus key's public key to the reponse of the
``../context/delegates/<delegate_pkh>/consensus_key`` RPC. (MR :gl:`!8856`)
- Three new variants of the ``voting_power`` RPC (which returns the
voting power of a delegate based on the stake it had when voting
snapshot was taken) have been added:
- ``current_voting_power`` the voting power of a delegate based on
its current stake (MR :gl:`!9329`)
- ``current_baking_power`` computes the baking power of a delegate
based on its current stake (MR :gl:`!9350`)
- Two new variants of the ``voting_power`` RPC (which returns the
``expected_endorsing_rewards`` field from ``/participation`` RPC has been
renamed in ``expected_attesting_rewards``.
Operation receipts
------------------
- To handle the new staking mechanism, the following changes
to receipts have been made:
- the ``Deposits`` kind of balance, which used to be associated to
the public key hash of a delegate, has been generalized to handle
non-delegate staking and sharing of rewards and punishments; it is
now associated to either a ``Single`` delegator (represented by a
pair of the delegator address and its delegate public key hash) or
``Shared`` between all the delegators of a given delegate in
proportion to their stake (represented by the public key hash of
the delegate). (MR :gl:`!9498`)
- a new ``Unstaked_deposits`` kind of balance has been added to
represent tez for which unstaking has been requested. This kind of
balance is associated with the cycle at which the tez become
liquid and, like in the ``Deposits`` case, it is either associated
with a ``Single`` delegator or ``Shared`` between a delegate and
its delegators. (MR :gl:`!9498`)
Protocol parameters
-------------------
- The protocol constant ``max_slashing_period`` has been moved from parametric
constants to fixed constants. (MR :gl:`!10451`)
Bug Fixes
---------
- Fix the JSON field ``kind`` of the smart rollup preveal
encoding. This constant field was wrongfully set for the
``metadata`` and ``request_dal_page`` case. (MR :gl:`!9307`)
- Fix reporting of gas in traced execution of Michelson scripts. (MR :gl:`!6558`)
Minor Changes
-------------
- Improve the error for implicit account type check. (MR :gl:`!7714`)
- Remove infinite source ``Double_signing_evidence_rewards`` and take reward from the punishment instead. (MR :gl:`!7758`)
- Remove zero tickets from a big map of a mainnet contract during migration. (MR :gl:`!8111`)
- Add a Total supply counter in the storage. (MRs :gl:`!8732`, :gl:`!8739`)
- Allow to choose the bootstrapped contracts hashes. (MR :gl:`!9176`)
- Rename ``endorsement`` into ``attestation`` in protocol errors (MR :gl:`!9192`)
- Arithmetic errors on Michelson ``mutez`` type have been exported so
they can now be caught outside of the protocol. (MR :gl:`!9934`)
- Slashing penalties for double-signing are now applied at the end of the cycle where denunciations were included, rather than immediately. The same applies for rewards allocated from denunciations. (MR :gl:`!10389`)
- The semantics of forbidden delegates has been adjusted: a delegate becomes
forbidden if it has been slashed for more than 51% of its frozen stake over
the last 2 cycles. (MRs :gl:`!10382`, :gl:`!10844`)
Internal
--------
- Fail earlier when a smart rollup commitment is in conflict when cementing.
(MR :gl:`!8128`)
- split smart rollup origination fct for readibility. (MR :gl:`!8276`)
- Remove the deprecated and unused ``tx_rollup_l2_address`` Michelson
type. (MR :gl:`!8546`)
- Add an internal represention case for the ``UNIT`` Michelson instruction. (MR :gl:`!8579`)
- Encoding that supports ``endorsement`` kind in JSON are now suffixed with
``_with_legacy_attestation_name``. Non legacy encoding supports
``attestation`` kind. (MRs :gl:`!8563`, :gl:`!8531`)
- Michelson: remove legacy behaviour related to contract type. (MR :gl:`!5800`)
- Michelson: cleanup legacy annotation management. (MR :gl:`!8208`)
- Michelson: refactor management of metadata in ty smart constructors. (MR :gl:`!8420`)
- Michelson: remove unused deprecated tx_rollup_l2_address type. (MR :gl:`!8546`)
- Rename ``source`` into ``sender``. (MR :gl:`!7373`)
- Improve efficiency of solving the baker PoW challenge. (MR :gl:`!8403`)
- Refactor declarations of ``make_empty_context`` and ``make_empty_tree`` for easier use.
(MR :gl:`!8550`)
- Move notions of Smart rollup address and various smart rollup hashes types to
the shell to make them common to all protocols though the environment. (MR
:gl:`!8562`, MR :gl:`!8625`)
- Refactoring : stake splitted between a frozen part and a delegated part. (MRs :gl:`!8051`, :gl:`!8885`)
- Refactoring : rewards computed as a relative portion of the total amount of tez
rewarded per minute (about 85tez/min). (MR :gl:`!8657`)
- Introduce the notion of rollups “machine” which can compute the semantics of
a given rollup, but cannot be used to generate or verify proof. (MR
:gl:`!8815`)
- Consensus: optimized validation of attestations by maintaining a set
of forbidden delegates instead of checking through an I/O that the
delegate has a sufficient frozen deposit. (MR :gl:`!8722`)
- Refactor punishing transfers to be closer to each other. (MR :gl:`!7759`)
- Remove almost all transaction rollup logic from the protocol. (MR :gl:`!8466`)
- Fix encoding names for rewards. (MR :gl:`!8716`)
- Use ``pair`` type instead of ``*``` for Michelson pairs. (MR :gl:`!8720`)
- Add new function ``of_list`` to build a Merkle list. (MR :gl:`!8853`)
- Improve some aspects in the PlonK code. (MR :gl:`!8730`)
- Store a history of percentages of slashed deposits. (MR :gl:`!8828`)
- Renaming the ``endorsement_power`` and ``preendorsement_power`` fields from
consensus operation receipt to ``consensus_power`` in the non legacy encoding.
(MR :gl:`!8531`)
- Improve storage cleaning at the end of a refutation game. (MR :gl:`!8881`)
- ``version_value`` moved from ``raw_context.ml`` to ``constants_repr.ml``. (MR :gl:`!8867`)
- Transaction rollup: removed left parameters (:gl:`!8700`)
- ``balance_update_encoding`` now output ``attesting rewards`` and ``lost
attesting rewards`` in JSON.
``balance_update_encoding_with_legacy_attestation_name`` has been added and
output legacy ``endorsing rewards`` and ``lost endorsing rewards``. (MR
:gl:`!9251`)
- Register an error's encoding: ``WASM_proof_verification_failed``. It was
previously not registered, making the error message a bit obscure. (MR :gl:`!9603`)