feat: establish the Edition 2026 witness contract

Author: a19q3

.rustfmt.toml

@@ -4,6 +4,6 @@ use_try_shorthand = true
 use_small_heuristics = "Max"
 newline_style = "auto"
 edition = "2024"
-# Keep the established layout while the language edition migrates. A future
-# style-edition change can be reviewed as a dedicated mechanical diff.
+# Formatting dialect only; this is not a CellScript or Rust language
+# compatibility edition.
 style_edition = "2021"

BRANCHES.md

@@ -6,6 +6,16 @@ The 0.12-era work is the formal proposal baseline for grant-style acceptance
 discussions. Do not use that historical baseline to describe the current
 `main` branch state.
 
+## nightly-0.23
+
+`nightly-0.23` is the active edition and native-release-tooling line. It has one
+mandatory source/ABI contract, `edition = "2026"`, and deliberately rejects
+older package, lock, deployment, receipt, builder, and raw entry-witness
+identities rather than migrating them. Treat the line as merge-ready only when
+the edition/profile identity is consistent across compiler, metadata, WASM,
+builders, initialized submodules, docs, and the `dev`, `ci`, and `backend`
+gates.
+
 ## nightly-0.22
 
 `nightly-0.22` is the active implementation line for the 0.22 type-and-set

CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## Unreleased
 
+- Make `edition = "2026"` the single mandatory CellScript package contract.
+  The resolved edition profile now binds source semantics, target and primitive
+  assurance, entry payload ABI, and group-relative
+  `WitnessArgs.input_type` placement across metadata, cache keys, registry
+  records, `Cell.lock` v2, `Deployed.toml` v2, compile receipts v2, generated
+  builders, native APIs, WASM, LSP, and the playground. Missing or different
+  editions and older persisted schemas are rejected; no migration or
+  compatibility reader is provided. Generated CKB entries also remove the
+  raw-`CSARGv1` witness fallback, so Edition 2026 accepts the payload only
+  inside canonical `WitnessArgs.input_type`. See the
+  [0.23 development release notes](docs/releases/CELLSCRIPT_0_23_RELEASE_NOTES.md).
 - Complete the native-tooling cleanup: neutralize migration-era identifiers,
   remove tracked legacy traceback logs and cache exclusions, rename the native
   tooling integration suite, and add a repository-wide source-policy command
@@ -25,8 +36,8 @@
   parameterized CKB entries. Generated wrappers now resolve witnesses relative
   to the active script group, decode the `CSARGv1` payload from
   `WitnessArgs.input_type`, preserve wallet/multisig ownership of `lock`, reject
-  malformed or wrongly placed payloads, and retain group-relative raw-v1
-  compatibility. Builders place `input_type` before SDK signing because the
+  malformed or wrongly placed payloads, and reject group-relative raw-v1
+  placement. Builders place `input_type` before SDK signing because the
   complete `WitnessArgs` is signed. A canonical signed multisig-v2 CKB-VM
   regression covers a type group whose first input is not transaction input
   zero and rejects post-signing witness mutation. The Rust-native v0.23

Cargo.lock

@@ -40,6 +40,7 @@ exclude = [
     "AGENTS.md",
     "BRANCHES.md",
     "README_REVIEW.md",
+    "audits/",
     "cellscript-*.png",
     "docs/",
     "docs/wiki/",

Cargo.toml

@@ -491,6 +491,7 @@ or CellFabric intent engine.
 
 - [VS Code extension](editors/vscode-cellscript)
 - [Runtime error codes](docs/CELLSCRIPT_RUNTIME_ERROR_CODES.md)
+- [Edition policy](docs/CELLSCRIPT_EDITION_POLICY.md)
 - [Entry witness ABI](docs/CELLSCRIPT_ENTRY_WITNESS_ABI.md)
 - [BIP340 verifier CellDep ABI](docs/CELLSCRIPT_SIGNATURE_VERIFIER_ABI.md)
 - [Collections support matrix](docs/CELLSCRIPT_COLLECTIONS_SUPPORT_MATRIX.md)
@@ -716,6 +717,7 @@ policy defaults:
 
 ```toml
 [package]
+edition = "2026"
 name = "token"
 version = "0.22.0"
 entry = "src/main.cell"
@@ -732,7 +734,11 @@ deny_ckb_runtime = false
 deny_runtime_obligations = false
 ```
 
-Command-line flags can tighten policy checks for a build or CI job.
+`edition = "2026"` is mandatory and is the only supported edition. It binds
+the source, ABI, metadata, lockfile, deployment, receipt, and builder contract;
+older or missing editions are rejected rather than migrated. Command-line
+flags can tighten policy checks for a build or CI job. The full contract is in
+the [edition policy](docs/CELLSCRIPT_EDITION_POLICY.md).
 
 ### Package Workflow
 

README.md

@@ -14,6 +14,8 @@ path = "src/main.rs"
 [dependencies]
 anyhow = "1.0"
 blake2b-ref = "0.3"
+ckb-jsonrpc-types = "1.0.0"
+ckb-types = "1.0.0"
 clap = { version = "=4.5.49", features = ["derive"] }
 hex = "0.4"
 hex-literal = "0.4"