Implement dual-chain voting ledger, API, and gated dApp #18

Merged

PlasticDigits merged 1 commit from feat/voting-bundle into main

2026-08-25 06:47:00 +00:00

PlasticDigits commented

2026-08-25 06:41:51 +00:00

(Migrated from gitlab.com)

Summary

#1 + #4: voting-ledger registers Terra CW20 and BSC BEP-20 wallets from live balances (no archive node, no pre-registration backfill) and indexes transfers for the registered set only.
#2 + EIP-191: operator-voting verifies ADR-36 and EIP-191, freezes { terra_height, bsc_block }, enforces ≥1000 CL8Y / blacklist / one vote, and uses a restricted DB role.
#3 + #5 + #6: /vote dApp with Legal clickwrap (vote.cl8y.com, TerraClassic + EVM) and ported DEX Terra / Bridge EVM wallet stacks.

Closes #1 #2 #3 #4 #5 #6

Test plan

cargo test --workspace --lib (31 unit tests)
Postgres integration (LEDGER_TEST_DATABASE_URL): register → transfer → balance_at, no backfill, BSC isolation, reorg unwind
operator-voting API: propose / vote / replay 409 / blacklist / XSS strip
Restricted role: EXECUTE on balance functions, INSERT on ledger tables denied
Frontend vitest (35)
Playwright register → list → create → vote (Legal hatch on webServer only)
Coolify: apply migrations, restricted DATABASE_URL, unset VITE_PLAYWRIGHT_E2E
Legal ops: register vote.cl8y.com (confirm hostname), CORS + portal redirect allowlist
Manual: Keplr Terra register/vote and MetaMask BSC register/vote after Legal accept

Docs

Invariants L1–L11 in docs/LEDGER_INVARIANTS.md. API/signing in docs/OPERATOR_VOTING.md. dApp/Legal/wallets in docs/FRONTEND.md. Skills cross-linked.

## Summary - **#1 + #4:** `voting-ledger` registers Terra CW20 and BSC BEP-20 wallets from live balances (no archive node, no pre-registration backfill) and indexes transfers for the registered set only. - **#2 + EIP-191:** `operator-voting` verifies ADR-36 and EIP-191, freezes `{ terra_height, bsc_block }`, enforces ≥1000 CL8Y / blacklist / one vote, and uses a restricted DB role. - **#3 + #5 + #6:** `/vote` dApp with Legal clickwrap (`vote.cl8y.com`, TerraClassic + EVM) and ported DEX Terra / Bridge EVM wallet stacks. Closes #1 #2 #3 #4 #5 #6 ## Test plan - [x] `cargo test --workspace --lib` (31 unit tests) - [x] Postgres integration (`LEDGER_TEST_DATABASE_URL`): register → transfer → `balance_at`, no backfill, BSC isolation, reorg unwind - [x] `operator-voting` API: propose / vote / replay 409 / blacklist / XSS strip - [x] Restricted role: `EXECUTE` on balance functions, `INSERT` on ledger tables denied - [x] Frontend vitest (35) - [x] Playwright register → list → create → vote (Legal hatch on webServer only) - [ ] Coolify: apply migrations, restricted `DATABASE_URL`, unset `VITE_PLAYWRIGHT_E2E` - [ ] Legal ops: register `vote.cl8y.com` (confirm hostname), CORS + portal redirect allowlist - [ ] Manual: Keplr Terra register/vote and MetaMask BSC register/vote after Legal accept ## Docs Invariants L1–L11 in `docs/LEDGER_INVARIANTS.md`. API/signing in `docs/OPERATOR_VOTING.md`. dApp/Legal/wallets in `docs/FRONTEND.md`. Skills cross-linked.

PlasticDigits commented

2026-08-25 06:41:58 +00:00

(Migrated from gitlab.com)