Current ABI is 0.7-redesign-8: post-audit-package delta (Russian), documentation index, glossary. The sealed audit handoff describes the earlier 0.7-redesign-6 and does not certify this ABI; the owner approved the 0.7-redesign-8 release bundle on 2026-09-24. Polygon mainnet (137): deployed on Polygon mainnet on 2026-09-25 (registry 0x3281492981DCD492cc2F7c17398134e1D3B5CA1F, all addresses in SPEC §7). Amoy is not used. Current authorization prohibits wallet connection, external-network access, deployment and publication.

Object Digital Passport

An open registry of issuer statements and immutable document commitments for physical, digital and mixed objects. ODP records which wallet registered which commitments and when. Identity, physical matching and institutional assessments are verified separately; the registry does not adjudicate ownership or authenticity.

Redesigned 0.7

Local contract candidate for independent audit. No deployed, approved production generation is produced by this work. The ABI is 0.7-redesign-8, incompatible with the earlier 0.7 code, including 0.7-redesign-7, even though the packed version byte is7.

• Normative specification
• Implementation, tests and remaining release boundaries (Russian)
• Independent critique of the previous audit/design (Russian)
• Schema and examples, conformance vectors
• Offline preparation tools
• Deployment manifest procedure
• Security model
• Русский

Build locally

Requires Node22.10+ and npm. From the repository:

cd chain
npm ci
npx hardhat clean
npm run check

This compiles with Solidity0.8.20, enforces the EIP-170 size limit, checks conformance vectors and runs local EDR tests. Compilation/tests do not load real wallet files. Generated TypeChain files under chain/types/ correspond to the current sources; CI checks that compilation does not change them.

Contract boundaries

The core has immutable cards/hashes, permanent profile registration, caller-only issuance and issuer-only revocation within72h (C) or24h (B/P/M), only before irreversible print finalization. It has no administrator, freeze, owner/transfer, mutable lifecycleStatus classification, general event-history API, URL storage, extension router or unit-passport mint. Internal validation is inlined, not externally linked.

Nine independent satellites cover concerns, hosting, domain declarations, institutional proofs, author signatures, wallet document anchors, affiliations, statement journal and edition activation. They cannot mutate the core. Edition preparation uses a preselected nonce; the completed root is committed before an ID is assigned. Clients must retain the activation satellite pinned in the edition document across future upgrades.

Audit history

The original150 tests reproduced old behavior; independent counterexamples brought that baseline to165. They are archived with exact baseline contracts in review/astra/. Current tests exercise the new behavior; the totals are not a before/after defect count. Audit documents and legacy guides are historical inputs. Where they conflict, this generation's SPEC and ABI apply. Historical releases/demos are not a deployed instance of this rewrite. Apple/Android clients require a separate integration and release cycle.

MIT license. No protocol fees; chain transactions cost gas. Availability depends on chain and file retention.

Integration handoff

• Task for the application session (Russian)
• Sealed 0.7-redesign-6 audit package — a snapshot, not a review of the current sources
• What changed after that package (Russian), including the open conflicts that block a release bundle

Historical prelaunch verification: clean build, deployment rehearsal and remaining wallet binding.