Status: implemented and differentially tested against committed on-chain reads. Provenance for every fixture is in tests/fixtures/README.md.

Adapter notes: Script3 soroban-governor

Status: implemented in crates/core/src/adapters/script3.rs (Script3Adapter), verified offline against committed live-testnet captures by crates/core/tests/differential.rs. Everything below was read from the pinned upstream source; the source-to-behavior mapping table at the bottom says which file each decoded shape comes from. Repo lives at github.com/script3/soroban-governor (org script3, NOT script3-io).

Version verified

Latest release v1.1.1 (2024-07-09), built with Soroban CLI 21.0.0; workspace pins soroban-sdk = "20.5.0". Source: https://api.github.com/repos/script3/soroban-governor/releases , https://github.com/script3/soroban-governor/blob/main/Cargo.toml

Architecture verified

Two contracts: Governor (contracts/governor, crate soroban-governor) and Votes/Voter (contracts/votes, crate soroban-votes). No separate timelock contract — timelock is a Governor setting. Treasury = the Governor contract itself.
Voter has feature-flag variants: bonding (default, wraps a Stellar Asset 1:1), admin variant (mint/clawback), sep-0041 variant. Source: https://github.com/script3/soroban-governor/blob/main/docs/architecture.md

Governor functions verified (contracts/governor/src/contract.rs)

initialize(votes: Address, council: Address, settings: GovernorSettings)
settings() -> GovernorSettings, council() -> Address, vote_token() -> Address
propose(creator: Address, title: String, description: String, action: ProposalAction) -> u32
get_proposal(proposal_id: u32) -> Option<Proposal>
close(proposal_id: u32) — computes eta; there is NO queue function
execute(proposal_id: u32), cancel(from: Address, proposal_id: u32)
vote(voter: Address, proposal_id: u32, support: u32) (0=Against, 1=For, 2=Abstain)
get_vote(voter, proposal_id) -> Option<u32>, get_proposal_votes(proposal_id) -> Option<VoteCount>

Types verified (contracts/governor/src/types.rs)

Proposal { id: u32, config: ProposalConfig, data: ProposalData }
ProposalConfig { title: String, description: String, action: ProposalAction }
ProposalData { creator: Address, vote_start: u32, vote_end: u32, eta: u32, status: ProposalStatus, executable: bool }
ProposalStatus: Open=0, Successful=1, Defeated=2, Expired=3, Executed=4, Canceled=5
VoteCount { against: i128, _for: i128, abstain: i128 }
GovernorSettings { proposal_threshold: i128, vote_delay: u32, vote_period: u32, timelock: u32, grace_period: u32, quorum: u32 (BPS), counting_type: u32 (bitmask), vote_threshold: u32 (BPS) }
Proposal calldata: ProposalAction enum = Calldata(Calldata) | Upgrade(BytesN<32>) | Settings(GovernorSettings) | Council(Address) | Snapshot; Calldata { contract_id: Address, function: Symbol, args: Vec<Val>, auths: Vec<Calldata> } (recursive; nested auths become InvokerContractAuthEntry sub-invocations at execute time).

Events verified (contracts/governor/src/events.rs)

topic[0]	topics[1..]	data
`proposal_created`	proposal_id: u32, proposer: Address	title, description, action, vote_start, vote_end
`proposal_canceled`	proposal_id: u32	()
`proposal_voting_closed`	proposal_id: u32, status: u32, eta: u32	VoteCount
`proposal_executed`	proposal_id: u32	()
`proposal_expired`	proposal_id: u32	()
`vote_cast`	proposal_id: u32, voter: Address	support: u32, amount: i128

Votes contract events verified (contracts/votes/src/events.rs)

topic[0]	topics[1..]	data
`delegate`	delegator, delegatee	old_delegatee
`votes_changed`	delegate	old_votes: i128, new_votes: i128
`set_admin`	admin	new_admin
`deposit`/`withdraw`/`claim` (bonding only)	account	amount: i128
`set_emissions`	eps: u64, expiration: u64	()

Votes checkpoints: packed u128 = (sequence: u32) << 96 | amount (u96); per-user current checkpoint in persistent storage, history Vec<u128> in temporary storage; upper_lookup binary search. Functions: get_votes, get_past_votes(user, sequence), get_delegate, delegate(account, delegatee) (no chaining), total_supply, get_past_total_supply. Source: https://github.com/script3/soroban-governor/tree/main/contracts/votes/src

Published deployments (MAINNET only; from Script3’s governance explorer config)

DAO	Governor	Votes
YieldBlox	`CANSYFVMIP7JVYEZQ463Y2I2VLEVNLDJJ4QNZTDBGLOOGKURPTW4A6FQ`	`CAZ2U7Z2LS3N72NKMOR34HOV4WFDCMA2TPWD3KU4EA2VKZARFPMLF3LI`
Stellar Community Fund	`CD5BO2F56Q7WK37SWASI7J5J46H37ZWEERJWZFJLPQLP6Y6I76MQZCZO`	`CDHUZKXBNMAHTK62HDS6AVIZANVOABKRGY3SP3EUKYE634RFQ5NPG`
Soroban Domains	`CDXTT5PBPZ3ERZCC5S6NE2M3NMUNDKL4SJLT26DD3CYUWUWSUV5QPZRW`	`CC4Y5WAI5MF3HF77BAM4YOS3Y4NFZAW3FTRFS25GRLCRBGPDWPYN6VZ3`

Source: JS config of https://mainnet.governance.script3.io (linked from https://script3.io).

Source-to-behavior mapping (adapter implementation)

Adapter: crates/core/src/adapters/script3.rs, pinned SHA a2ac6de81055be5bd13e31f922c9546309bfdb8a (same commit as scripts/upstream/upstream.lock.json). Each decoded shape maps to one file:

Adapter code path	Upstream file	What it decodes
`EVENT_ARITY` + `matches_event`	`contracts/governor/src/events.rs`	topic[0] symbol + exact topic arity per event
`normalize_event` `proposal_created`	`contracts/governor/src/events.rs`	topics `[symbol, id u32, proposer]`; data `[title, desc, action, vote_start, vote_end]`
`normalize_event` `vote_cast`	`contracts/governor/src/events.rs`	topics `[symbol, id u32, voter]`; data `[support u32, amount i128]`
`normalize_event` `proposal_voting_closed`	`contracts/governor/src/events.rs`	topics `[symbol, id u32, status u32, eta u32]`; data `VoteCount` map
`decode_action` (5 variants + fail-closed `Unknown`)	`contracts/governor/src/types.rs`	`ProposalAction = Calldata
`decode_calldata`	`contracts/governor/src/types.rs`	`Calldata { contract_id, function, args, auths }` (recursive)
`decode_settings`	`contracts/governor/src/types.rs`	`GovernorSettings` (all 9 fields required)
`decode_vote_count`	`contracts/governor/src/types.rs`	`VoteCount { against, _for, abstain }`
`state_from_chain`	`contracts/governor/src/types.rs`	`Proposal { id, config, data }` layout from `get_proposal`
`crates/core/src/tally.rs`	`contracts/governor/src/vote_count.rs`, `constants.rs`	`add_vote`, `count_quorum`, `is_over_quorum`, `is_over_threshold` (strict `>`, floored)
`crates/core/src/checkpoint.rs`	`contracts/votes/src/checkpoints.rs`	packed `u128` checkpoints, `upper_lookup` floor semantics
`AMOUNT_POSITIONS`	`contracts/votes/src/contract.rs`	`transfer(from,to,amount)` → amount at `args[2]`
`VotePowerModel`	`contracts/governor/src/contract.rs:268`	power = `get_past_votes(voter, vote_start)` at snapshot

Every row is asserted against committed raw captures in crates/core/tests/differential.rs (ids 0-5, offline).

Vote-weight decay: no decay term found (source reading)

contracts/votes/src/ in the pinned Script3 source contains no decay term — power is a stored checkpoint read (get_past_votes → upper_lookup), never a function of elapsed time. The OpenZeppelin stack (packages/governance/src/votes/) is the same shape. Found by full-text search of both trees at their pinned SHAs on 2026-10-08; this is a source reading, not a live-verified claim. The adapter implements no decay because neither governor’s vote accounting contains one.

UNVERIFIED / honest limitations

No official testnet deployment IDs found. The repo Makefile ID is a localhost Standalone placeholder. For testnet proof we must deploy via scripts/seed-testnet.*.
Event shapes above are from source reading; not yet observed on live testnet by us. Adapter implementation must re-verify against emitted events from our seeded testnet deployment before marking anything verified at runtime.
Whether these exact event shapes are emitted by mainnet deployments at v1.1.1: UNVERIFIED (we have not queried mainnet).

WASM adapter bindings

The WASM package exposes the adapter through sans-IO JSON bindings. All base64 values below are individual XDR-encoded ScVal values; malformed JSON, XDR, unknown event shapes, and missing contract specs return an explicit error or an unverified result. The caller must select this adapter from its own registry; the parser never guesses an adapter from an event alone.

Export	Inputs	Output and failure behavior
`identify_governor()`	none	`"script3-soroban-governor"`
`matches_event(contractId, ledger, txHash, topicsJson, value)`	Complete topic vector as a JSON array of base64 XDR plus value	Boolean structural match; malformed input is an error and a non-matching contract/topic shape is `false`
`normalize_event(contractId, ledger, txHash, topicsJson, value)`	Same event inputs	JSON `NormalizedEvent` with verified payload, or an explicit normalization error
`decode_call(contractId, functionName, argsJson, specJson?)`	JSON array of argument XDR and optional `ContractSpec` JSON	JSON `DecodedCall`; without a usable spec, arguments remain positional and `decoding` is `unverified`

The complete topic vector is required so arity and topic positions are checked; passing just topic[0] is not sufficient for a match.

Keyboard shortcuts

Stellar Governance Guardians