Roadmap

Stop compiling test-utils into production builds

This PR removes the `test-utils` feature from the default list in `amaru-consensus`, which meant the test logic was included in the compilation process of any production build of `amaru`. This mostly has no tangible benefit (the compiler would drop the unreferenced test logic), but it does remove 3 crates from the binary and may save a few seconds in compilation. It does mean that it is semantically correct to use and enable `test-utils`, and a future accidental reference will error during compilation.

consolidate reconnect and resolv timers

fixes #1428

add simulation mode for measuring effect timings

The effect timing infrastructure has been in place for a while, but only network transmissions are actually simulated with latency.

add EDR on KES key handling

rough sketch:

Report the coverage of the cbor dataset against the specification + edge cases

### Abstract

Remove "Nightly Synchronization" job and simplify e2e test setup

### Abstract

feat: allow 3rd party dev to have full PR run

Make sure external contributors PR can run fully so that anyone can get good DX.

remove generic_const_exprs feature

fixes #1406

feat: add API for bootstrap and mithril progress report

This PR exposes bootstrap and Mithril synchronization as reusable library workflows, with cancellation, crash recovery, and canonical progress reporting shared by the CLI and embedding applications.

proper linking of events and spans for header and block perf telemetry

including world loop test to assert proper OTel structure

panic when starting with 50 upstream peers

``` thread 'amaru-node' (5842001) panicked at crates/amaru-pure-stage/src/tokio.rs:646:21: stage `connector-12` exceeded priority mailbox size (10): too many outstanding scheduled messages ```

decode each VersionData with its own version, keep bytes is unknown

fixes #1425

Generate .env from clap's definitions (for node run + node bootstrap & globals)

See also #1404.

make blockperf logs selectable via AMARU_LOG and inculde peer

- **log blockperf at DEBUG** - **blockperf logging, live vs sync mode** - **clean up logs at transition from sync to live**

fix: make decoders conform to the cbor dataset

This PR fixes the decoding gaps exposed by the cbor dataset generated in the [`cardano-cbor-dataset` repository](https://github.com/r2rationality/cardano-cbor-dataset/pull/1).

clean cli and align options with EDR-019 - guidelines for cli

This is a bit painful, but waiting longer for this is not going to help. With adoption growing and more and more docs being produced, we need to anchor the "final" api surface for users real soon. The best moment to do this was 6 months ago. The second best moment is now.

Forging Credentials Resource

### Abstract

fix: explicitely set network when starting oura

refactor(ledger): address post-merge review

Addresses KtorZ's post-merge comments on #1309 revert BackgroundTasks to `Arc<HS>`, eliminate the `stake_distributions deque`, and restore `Sync` on `HistoricalStores`.

fix: workaround github api rate limits

Make sure CI doesn't fail due to GH API rate limit (unauthenticated calls). Relies on git clone instead.

Amaru for epoch-end ledger audits

First, let me thank you for Amaru. I'm currently working on [Tessera](https://tessera-preview.matthieu-pizenberg.workers.dev/), a tool implementing [CIP-179 on-chain surveys](https://github.com/cardano-foundation/CIPs/blob/master/CIP-0179/README.md). We want survey results to be reproducible and independently verifiable, so Amaru is one of the options I've explored. This is an experience report about what I did, and where I struggled.

fix(amaru): add missing systemd units definitions to debian archive.

Reorganize Leadership Logic

In an attempt to familiarize myself with the new `forge_block` stage, I pulled the code locally and decided to isolate the leadership calculation logic. My goal is to decouple the "business logic" (Cardano-specific logic) from the pure stage wiring as much as possible, while also using the type system to restrict illegal states as much as possible. This is my proposed organization, and we can replicate this design for other pieces of the business logic. This means the computation logic lives with the storage logic, and is easier to read, review, and understand since it's not tangled into pure …

amaru.env config file filled with avalaible Variables

### Abstract

world loop test for block forging

Add a new scenario where the network starts from a snapshot matching the nodes’ KES key setup so that 100% stake is available for block forging. The network shall then be judged by whether it produces the expected chain density at acceptable levels of (slot|height) battles.

Optimize reward payouts using RocksDB merge operators

### Abstract

check and improve inbound connection limit handling

Currently, the handshake concludes successfully and then the bearer is dropped if the inbound connection limit is exceeded. We should investigate how the Haskell implementation signals this to the peer and possibly improve the behaviour accordingly.

Persist findings of consensus behaviour in Cardano blueprints

As discussed in Porto last week, any gaps found in the Ouroboros network spec shall eventually be filled with information on https://github.com/cardano-scaling/cardano-blueprint. This ticket serves as a reminder to myself that I should start with the notes taken in Porto from very fruitful discussions with Marcin M.

test: run decoding tests from a node-agnostic test suite

This PR adds a test suite that checks the decoding expectations of the conformance test suite created in the [`cbor-dataset` repository](https://github.com/r2rationality/cardano-cbor-dataset):

fix: decode uplc with smaller stack

Playing on iOS, I got some issues with stack sizes and uplc decoding. Building on top of recent related changes, use similar technics to solve that.

chore: reduce trace levels

Traces that can happen w/o breaking amaru should be `warn`ings.

fix: more resilient pipe

Skip-Changelog

feat(amaru-tui): simplify keyboard controls and improve copy mode

Few changes:

Update packages metadata for v10.11.20260918

Updates packages metadata generated from the published release [`v10.11.20260918`](https://github.com/pragma-org/amaru/releases/tag/v10.11.20260918).

Stack safe recursive types and tests

A "counter-proposal" to #1378; though I did preserve some of the commits, refactors and tests written on that occasion.

fix startup after block validation error

Previously (and this was a complaint from users), after a false block validation error manual intervention on the chainstore was needed to get the node syncing again. While this would be tolerable, the bigger issue was that subsequent restarts would NOT show the validation error again, instead they would connect to peers and reject all received headers, sitting their idly because all headers “build upon an invalid block”.

Address CBOR Decoding FIXMEs

This PR progresses #1174, but doesn't necessarily close it entirely. Some of the FIXMEs there are left for other PRs or future work because they are more significant overhauls, or they need to be considered more deeply.

some test and trace output fixes

- **avoid spamming logs when tests succeed** - **fix bytestring serde serialization**

Fix Changelog Workflow

Fix/improve the changelog workflow to support PR description edits, report better information about misplaced headers/content, and start posting the PR comment again.

bench epoch transition at scale

This pr adds a divan benchmark that seeds a RocksDB with realistic pools, UTxOs, and accounts, drives a State to the epoch boundary, and measures the full transition including the background rewards thread, pool updates, and stable flush.

Check the conformance of cbor encoding with the Haskell node

### Abstract

TUI: clarify when tui mode shall exit and how

Currently, `amaru node run` may open the TUI and immediately close it, leaving nothing on the console.

Bootstrap should fill db with blocks

### Abstract

Purge Mempool Transactions on Block Adoption

### Abstract

Trace Schemas for Forging

### Abstract

Amaru Watermark in Protocol Minor Version

### Abstract

Compute Leader Schedule for an Epoch

### Abstract

Block Forging CLI Commands

### Abstract

Block multi-era decoding

### Abstract

fix(mithril): make synchronization resilient

Improve Mithril synchronization correctness and resilience.

Fix off-by-one epoch check on CC member and action expiry + fix immediate cc resolution post ratification

- :round_pushpin: **feat(amaru-ledger): dump the state of the constitutional committee on startup.**

feat: add Amaru user-guide documentation

This PR contains the documents for **Milestone 2: Building the state of the art and the public sources of “how to operate a Cardano node” (August)** as part of the Amaru projetct : _Operations & Use Cases: Devops and SPO relationship_

Fix workflow concurrency and introduce blacksmith.sh runners for some jobs.

<!-- codesmith:footer --> --- <a href="https://app.blacksmith.sh/pragma-org/codesmith/amaru/pr/1341"><picture><source media="(prefers-color-scheme: dark)" srcset="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v2.svg"><source media="(prefers-color-scheme: light)" srcset="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-light-v2.svg"><img alt="View with [code]smith" src="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v2.svg"></picture></a> <a href="https://backend.blacksmith.sh/track/enable-autofix?expires=179171140…

fix: fetch candidate CC members from volatile and stable proposals

@arwlf reported an invalid block on mainnet with the following logs:

Flat-decoding optimizations

## Abstract

advertise protocol V15 in consensus handshake

fixes #1332

improve observability of new peer management

_{Stack created with <a href="https://github.com/github/gh-stack">GitHub Stacks CLI</a> • <a href="https://gh.io/stacks-feedback">Give Feedback 💬</a>}

implement peer churn

gracefully remove upstreams as per the Cardano churn schedule (20% every hour with some timing jitter); the metrics this is based on are still not refined, just the mechanism is implemented properly

properly terminate protocol handlers

Bearer termination is only adequate in case of peer misbehaviour, protocols can be shut down in a graceful fashion.

remove concurrency infrastructure from ledger state

Closes the follow-up agreed in #1290, ref #1094 removes all remaining concurrency infrastructure from the ledger state, so stable and stake_distributions lose their Arc<Mutex> and the rewards background task now receives snapshot handles by value and returns the rotated stake distribution through its join handle instead of writing into shared state, verified with the full workspace suite plus a live preprod sync to tip of about 9,300 blocks including an epoch transition and rewards computation with no errors the read only era_history and global_parameters Arcs are left in place and I am happy …

improve TUI log component: search, filter, retention

found that I want to use the TUI a bit more and built in some less-ish behaviour

fix handshake negotiation

fixes #884

update to Rust 1.100

This introduces the !/never type that I’ll want to use later, but it also enables several new cargo lints that took some effort to adhere to.

fix: release should sign commit

Make sure commits from the release PR are signed.

chore: move tx submission test to dedicated workflow

Move tx submission test to dedicated workflow. This reduce stress and time required to merge a PR, and simplify running PR by external contributors (as this requires access to a preprod wallet private key).

feat: allow to selectively export OTLP signals

By default all OLTP signals are exported (metrics, logs and spans) while end users might be interested in only a subset of those. If some collector path is missing then errors will be printed amaru side (client here in this scenario).

add world simulation tests

- **add full network simulation tests** - **run many simulated test scenarios**

Increase Ledger Coverage

Closes #885

feat: test e2e tx submission

Allow to easily test e2e tx submission, up to the point it is properly included in a peer mempool. Both from CI and local scripts.

VRF Key Uniqueness Validation - Take 2

Add rust docs to TraceContext

As a way to solidify my understanding and softening the learning curve of future devs, the interplay between `tracing`, `opentelemetry` and serialization/deserialization (esp. with the `TraceBuffer`) should be spelt out.

amaru snapshot create fails with "Permission denied (os error 13)" when no --dist-dir and --snapshot-dir is given

### What revision are you using?

Cardano Node Diversity platform

### Abstract

Support chained transactions in the mempool

### Abstract

Consider memory + cpu execution units when computing the available mempool capacity

### Abstract

Update the animations for the simulation

### Abstract

Add the txsubmission protocol to the simulation

### Abstract

Granular Ledger Benchmarks

### Abstract

Enable the TraceBuffer in production

### Abstract

Promote downstream connections to initiator mode on incoming connections (warm -> hot peer transition)

### Abstract

Publish on brew

Allow to browse static JSON

`amaru` can output JSON traces. Allow to open them and display details.

Visualise current network connections state

Showing the state of incoming/outgoing (or initiator/responder as mini protocols' terminology has it) would be useful to troubleshoot a node's state. In particular, we'll need to be able to trigger disconnections of "faulty" nodes so while we'll obviously trace that, visualising the links from/to a node would be nice.

Add static querying capacities

`amaru` should offer static querying capacities e.g. access db details

Add VIM keybindings for navigation

Make sure VIM like keybindings are added on top of regular keybindings for navigation between various panels.

Publish on crates

This is currently blocked by amaru not being published on crates

Allow to be used as a library

Make sure `amaru-doctor` can be used as a library in `amaru` directly.