Advance CellScript 0.17 iCKB benchmark gates

Author: a19q3

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "cellscript"
-version = "0.16.0"
+version = "0.17.0"
 edition = "2021"
 rust-version = "1.85.0"
 autobins = false

Cargo.toml

@@ -558,7 +558,7 @@ policy defaults:
 ```toml
 [package]
 name = "token"
-version = "0.16.0"
+version = "0.17.0"
 entry = "src/main.cell"
 source_roots = ["src"]
 

README.md

@@ -3,9 +3,20 @@
 The differential harness is partial and model-level only.
 
 `tests/benchmarks/ickb_diff/matrix.json` records the selected comparison
-matrix. The test `ickb_diff_matrix_is_partial_and_consistent_with_model_fixtures`
-checks that every row is labelled as a model result rather than CKB VM
-equivalence.
+matrix. The manifest now uses schema `cellscript-ickb-diff-matrix-v1` and is
+also the executable production-equivalence claim gate. The integration test
+`tests/ickb_diff.rs` checks that every current row is labelled as a model result
+rather than CKB VM equivalence, and rejects any future `PROVEN` claim that lacks
+binary hashes, CKB VM/testtool evidence, fixture hashes, exit codes, cycle
+counts, and named reject modes. The iCKB-specific gate is intentionally kept in
+the test suite rather than the generic `cellc` CLI.
+
+Current manifest status:
+
+- `mode`: `MODEL_LEVEL_ONLY`
+- `equivalence_status`: `NOT_PROVEN`
+- `production_equivalence_claim`: `false`
+- `equivalence_evidence`: `null`
 
 | Scenario | Original iCKB expected | CellScript expected | Result |
 |---|---:|---:|---|
@@ -19,15 +30,54 @@ equivalence.
 | valid limit order | pass | pass | model-pass |
 | limit order underpayment | fail | fail | model-pass |
 
+## Production Equivalence Gate
+
+The stricter gate is documented in
+`docs/0.17/ickb_production_equivalence_gate.md`. In short, production
+equivalence requires:
+
+- original iCKB repo commit and script binary hashes;
+- CellScript source commit and generated artifact hashes;
+- CKB VM/testtool version;
+- transaction fixture manifest hash;
+- proof that inputs, outputs, cell deps, header deps, witnesses, and output data
+  are identical across both executions;
+- original and generated exit codes;
+- named failure modes for rejects;
+- cycle and transaction-size measurements;
+- per-row execution objects with fixture/context hashes, both artifact hashes,
+  status/exit-code match, cycles, transaction size, occupied capacity, and fee.
+
+Without those fields, `MODEL_LEVEL_ONLY` rows cannot be upgraded to
+behavioural-equivalence rows.
+
 ## Why This Is Not Behavioural Equivalence
 
 - The original iCKB Rust scripts were not executed side-by-side with generated
   CellScript artifacts.
 - iCKB `cargo test --locked` did not run to completion because prebuilt Capsule
   contract binaries were missing under `scripts/build/debug`.
-- CellScript currently lacks first-class HeaderDep, Script role, CKB OutPoint,
-  occupied capacity, xUDT args, and DAO maturity primitives required for a true
-  CKB VM differential test.
+- CellScript 0.17 has partial HeaderDep, SourceView, script-role, input
+  OutPoint, pairwise MetaPoint relative, fixed-distance lock/type MetaPoint
+  pair cardinality, base-cell-data signed i32 lock/type MetaPoint pair
+  cardinality, DAO-rate/header-lineage/type-and-data-classification, and xUDT
+  helper surfaces. Input-side accumulated-rate reads can now use `LOAD_HEADER`
+  at the original iCKB `AR_OFFSET=160+8`. The iCKB owner-mode xUDT args pattern
+  now has executable explicit-hash and current-script-hash Type Script args
+  verifiers, SourceView lock/type empty-args and 32-byte args helpers exist,
+  and simple xUDT group amount conservation plus token-side minted/burned
+  deltas have executable helpers and strict helper-backed aggregate bridges.
+  iCKB-specific output deposit/receipt map equality, receipt byte layout, and
+  group receipt mint-sum recomputation are deliberately kept in benchmark
+  fixtures instead of generic `dao::*` helpers. Local `u128`
+  add/sub/mul/div/function-return deltas can now be materialized for generic
+  xUDT delta helpers. CellScript also has
+  RFC0017 epoch-since constructors and a generated relative epoch maturity
+  bridge for DAO-like redeem paths. CellScript still lacks full arbitrary
+  `Script`, full DAO second-withdrawal request/deposit/header binding,
+  computed multi-cell iCKB mint-side receipt/deposit/DAO aggregate lowering,
+  and native action-aware MetaPoint map semantics for a true CKB VM
+  differential test.
 
 ## Next Differential Step
 

docs/0.17/CELLSCRIPT_0_17_ROADMAP.md

@@ -101,6 +101,27 @@ git -C /tmp/cellscript-ickb-audit/proposal rev-parse HEAD
 git -C /tmp/cellscript-ickb-audit/v1-core rev-parse HEAD
 ```
 
+Production-equivalence revisit:
+
+```bash
+rm -rf /tmp/cellscript-ickb-prod-eq
+git clone --depth 1 https://github.com/ickb/v1-core.git /tmp/cellscript-ickb-prod-eq/v1-core
+git clone --depth 1 https://github.com/ickb/proposal.git /tmp/cellscript-ickb-prod-eq/proposal
+git -C /tmp/cellscript-ickb-prod-eq/v1-core rev-parse HEAD
+git -C /tmp/cellscript-ickb-prod-eq/proposal rev-parse HEAD
+command -v capsule || true
+command -v cross || true
+command -v docker || true
+cd /tmp/cellscript-ickb-prod-eq/v1-core/scripts
+cargo test --locked
+```
+
+Result: v1-core and proposal resolved to the same commits listed above.
+`docker` was available at `/opt/homebrew/bin/docker`, but `capsule` and `cross`
+were not installed. `cargo test --locked` compiled the iCKB contract crates and
+the `tests` crate, then failed the two test cases because the test loader could
+not find prebuilt script binaries under `scripts/build/debug`.
+
 iCKB source inspection:
 
 ```bash
@@ -153,9 +174,13 @@ Benchmark tests after implementation:
 
 ```bash
 cargo test --locked -p cellscript --test ickb_benchmark
+cargo test --locked -p cellscript --test v0_17 ickb_benchmark_specs_compile_under_0_17_strict_source_mode -- --test-threads=1
+target/debug/cellc tests/benchmarks/ickb_specs/ickb_logic.cell --target-profile ckb --target riscv64-asm --debug
 ```
 
-Result: passed, 4 tests.
+Result: the iCKB benchmark tests passed, and `ickb_logic.cell` compiled to
+RISC-V assembly after the parser was tightened so all-caps constants immediately
+before `{ ... }` branches are not misread as struct initializers.
 
 ## Assumptions And Gaps
 
@@ -167,3 +192,7 @@ Result: passed, 4 tests.
   executions.
 - iCKB's own reusable CKB test harness could not be run to completion without
   a prior Capsule build producing `build/debug` or `build/release` binaries.
+- The iCKB 10% oversized-deposit discount formula is now present in
+  `tests/benchmarks/ickb_specs/ickb_logic.cell`; this proves expression/compile
+  coverage for the formula, not production equivalence for the surrounding DAO
+  HeaderDep lineage.