Implements the foundational on-chain infrastructure for Kokonut Intelligence: smart contracts, EAS attestation pipeline, and cross-chain bridge support.
Work Items (7/7 Complete)
Work 1-2: EAS Data-Stream Anchoring + Ethereum Config
signer_service.py — Polls pending attestation_request queue, submits via EAS
Work 4: KGP Deployment on Gnosis
- services/guilds/kgp_deploy.py: deployment orchestration service
with record_deployment, get_deployment, list_deployments,
verify_deployment functions
- schemas/postgres/346_kgp_deployment.sql: migration for
kgp_protocol_deployment table tracking deployed contracts per chain
Closes KKN-215 Work 4
Work 5: Marketplace Fee Settlement
- marketplace.py: collect_fee() now called inside execute_buy_order(),
computing buyer_fee and seller_fee from ecocredit_params and persisting
them in the buy order result
- fees.py: added over-distribution guard in distribute_fee() that checks
SUM(distributed.amount) <= total_fee before allowing further distribution
- schemas/postgres/347_marketplace_fee_settlement.sql: adds buyer_fee and
seller_fee columns to credit_buy_order
Closes KKN-215 Work 5
- test_score_transparency: use governance_body key (not decision_method)
to match _score_transparency implementation
- test_technology_roadmap_lifecycle: pass reviewed_by to review_roadmap
to satisfy human-oversight requirement
The monolithic _apply_files() batched all pending migrations into a single
psql session via subprocess.run(input=<2 MB>). When piped through
docker compose exec -T, a statement failure inside a BEGIN/COMMIT block
(e.g. 061_impact_value_chain.sql) with ON_ERROR_STOP=1 caused psql to
exit early, triggering BrokenPipeError → SIGPIPE (141) — the root cause
of recurring CI failures on builds 7, 8, and 11.
Rewrite _apply_files() to apply each migration in its own _psql() call:
- First checks if already applied (SELECT → \gset)
- If not, runs the migration SQL + tracking INSERT in one session
- Successfully applied migrations are committed before the next starts
- A failure in one migration does not kill the pipe for subsequent ones
- On re-run, already-applied migrations are skipped via ON CONFLICT
Also replace cat|psql pipe patterns in seed.sh and seed-pilot.sh with
input redirection (< file) to eliminate the same SIGPIPE vector in
curated seed application.
Remove dead code: ADVISORY_LOCK_KEY constant, _migration_is_applied_sql().
The per-migration approach (one _psql() call per migration) resolved the
monolithic SIGPIPE but not migration-specific SIGPIPE at 061. The root
cause is subprocess.run(input=...) piping SQL through Python's stdin to
docker compose exec -T database psql — when psql exits early (e.g. an
error inside BEGIN/COMMIT with ON_ERROR_STOP=1), the Python-level pipe
breaks and triggers SIGPIPE (exit 141).
Replace stdin piping with temp file + shell input redirection:
docker compose exec ... psql < /tmp/mig.sql
This matches the fix already applied to seed.sh and seed-pilot.sh:
shell-level file redirection avoids the Python subprocess stdin pipe
that was the SIGPIPE vector. Temp files are created per-call and
cleaned up in a finally block.
The temp-file rewrite of _psql() duplicated the 'docker compose exec
-T database' prefix: psql_args already contained it, then shell_cmd
added it again. This caused 'exec: docker: not found' inside the
database container (which has no docker binary). Also shell-quote
psql_args via shlex.quote() to prevent injection via -v variables.
The Clean PostgreSQL bootstrap failure was hiding the actual SQL error
because head -60 truncated the output right after the schema name
listing. Increase to head -200 so the full error message is visible
in CI logs.
The migration CLI prints all 341 schema names BEFORE applying them,
so head -200 only shows schema names and never reaches the actual
error message. Switch to tail -80 which captures the last 80 lines
including the actual SQL error and failing migration.
Migration 317 created the table with chain_id (INTEGER), but the
Python code (kgp_deploy.py) uses chain (VARCHAR). 346's CREATE TABLE
was a no-op (IF NOT EXISTS), then the index on chain failed with
'column does not exist'. Replace with ALTER TABLE ADD COLUMN IF NOT
EXISTS + index creation.
psql's -F flag does not interpret escape sequences. The change from
subprocess.run(list) to sh -c '...' with shlex.quote() in 4ab3191
turned the tab byte into a literal \t string, breaking _get_applied()
parsing when schema_migration has rows. Bootstrap passes because the
fresh DB table is empty on first parse. Removes -F entirely (default |)
and splits on | instead of tab.
Tranch 4: Solidity / EAS / Bridge Infrastructure
Implements the foundational on-chain infrastructure for Kokonut Intelligence: smart contracts, EAS attestation pipeline, and cross-chain bridge support.
Work Items (7/7 Complete)
Work 1-2: EAS Data-Stream Anchoring + Ethereum Config
Work 3: KokonutCreditToken (ERC-1155 UUPS)
Work 4: KGP Deployment on Gnosis
Work 5: Marketplace Fee Settlement
Work 6: Selective-Disclosure / Merkle Proofs
Work 7: Oracle Price Attestation on Ethereum
Testing
Migrations
Architecture Notes
Closes KKN-215