tempoxyz/tempo v1.12.0

Release v1.12.0

on GitHub

Update Priority

After activation, nodes running an earlier release can diverge when a block uses T9 policy-binding behavior or the new TIP-403 interfaces.

Activation Times

TIPs included with T9

The T9 network upgrade includes:

1. TIP-1092: TIP-20 Policy IDs in TIP-403: Adds token-to-policy bindings to TIP-403 so transfer-policy selection can be proven from registry state. New TIP-20 tokens register their policy during creation. Existing tokens continue to use their token-local policy until a permissionless migration copies it into TIP-403, or an administrator changes the policy after activation. Zone and provable-contract flows must require tokenTransferPolicyId(token).isSet == true; an unset lookup can still return the token's legacy policy ID.

Operators

What's Changed

• Reliable finalized-block feeds (#6968, #6989): Drives consensus RPC state and subscriptions from persisted marshal finalizations, including while a node is syncing, and removes reorg-prone notarized block delivery.
• Follower RPC lifetime fix (#6920): Keeps the execution node alive for the full follower-engine lifetime so HTTP RPC and other execution services do not shut down after startup.
• Validator fee-token command (#6906): Adds tempo consensus set-validator-token, with verified-token lookup by symbol or name, raw-address support, and --list output for the connected chain.
• Snapshot restore planning (#6929): Extends tempo download --print-plan-json to report the selected consensus archive together with Reth's execution-layer archives without downloading or modifying data directories.
• Consensus status output (#6933): Adds the number of blocks remaining before the next epoch to tempo consensus info.
• Signing-key file permissions (#6840): Creates encrypted signing-key files with owner-only permissions on Unix and tightens permissions when replacing an existing file.

Developers

SDK Crate Versions

No new SDK crate versions accompany this binary release.

T9 Protocol Changes

• TIP-403 token-policy bindings (#6846, #6935): Adds the T9-gated tokenTransferPolicyId(address) and migrateTransferPolicyIds(address[]) interfaces, distinguishes an unset binding from policy ID 0, and preserves legacy fallback for unmigrated tokens.
• Token creation, updates, and migration (#6846): New T9 tokens write their initial binding atomically. Permissionless migration skips invalid or already-bound addresses, copies the current local policy, and deletes the local slot. An administrator policy update writes the new registry binding while leaving the legacy slot untouched.

EVM, Transaction Pool, and Genesis Tooling

• Custom fee-manager integration (#6908, #6917, #6928, #6938): Lets downstream nodes supply their configured EVM to transaction-pool validation, customize fee-token resolution and validation, and programmatically disable only the FeeAMM liquidity admission check. Tempo's default USD-only validation remains unchanged.
• Reusable TIP-20 mutation APIs (#6927, #6930): Exposes checked balance mutation and transfer helpers for downstream fee managers without requiring direct TIP-20 storage writes.
• EIP-2935 genesis provisioning (#6925): Adds the canonical block-hash history account to genesis state generated by tempo-xtask, allowing Zone deployments to anchor batches to L1 block hashes.

Testing, Benchmarks, and Tooling

• Added focused driver, resolver, and executor actor coverage for follower synchronization (#6896, #6899, #6900).
• Added StablecoinDEX gas and overflow snapshots across historical hardforks through T9 (#6967).
• Added a stable public benchmark preset and synchronized multi-region benchmark workflows with GCP support (#6905, #6977).

Full Changelog: v1.11.0...v1.12.0