You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs: shift T2-T4 upgrade pages to past tense, polish T5 (#440)
* docs: clarify network upgrade sidebar labels
- Remove (Active) labels from T2 and T3
- Add (Latest) next to T4
- Add (Next) next to T5
Amp-Thread-ID: https://ampcode.com/threads/T-019e41c7-3c78-7429-8c11-8e48e079ba59
Co-authored-by: Amp <amp@ampcode.com>
* docs: shift T2-T4 upgrade pages to past tense, polish T5
- T2: add status callout, switch overview/feature copy to past tense,
normalize TIP links to tips.sh, drop pre-activation 'action required'
- T3: add status callout, drop pre/post-activation framing, simplify
ABI migration text, remove stale SDK caveat, switch TIP links to
tips.sh
- T4: drop 'current upgrade' framing, populate compatible SDK
releases table from v1.7.0 release notes, fix bare URL for TIP-1046,
normalize TIP links to tips.sh, past-tense TIP-1031 description
- T5: rename status callout to match T2-T4 pattern
Amp-Thread-ID: https://ampcode.com/threads/T-019e5e4e-9067-705c-9cd1-fb81d04f4cc4
Co-authored-by: Amp <amp@ampcode.com>
* docs: drop Moderato/Presto naming, use testnet/mainnet only
Replaces 'Moderato (testnet)' and 'Presto (mainnet)' in the timeline
tables and surrounding copy with plain 'Testnet' and 'Mainnet' across
T2-T5.
Amp-Thread-ID: https://ampcode.com/threads/T-019e5e4e-9067-705c-9cd1-fb81d04f4cc4
Co-authored-by: Amp <amp@ampcode.com>
---------
Co-authored-by: Amp <amp@ampcode.com>
**TLDR:**Extends TIP-403 policies so token issuers can set different authorization rules for senders, recipients, and mint recipients. Previously a single policy applied to both sides of a transfer.
37
+
**TLDR:**Extended TIP-403 policies so token issuers can set different authorization rules for senders, recipients, and mint recipients. Previously a single policy applied to both sides of a transfer.
36
38
37
-
**Customer use case:** Issuers of regulated or closed-loop tokens need to enforce different rules for senders vs recipients. For example: KYC required to on-ramp into a stablecoin, but anyone in the approved set can spend. Without compound policies, issuers must apply the same restrictions to both sides, which breaks real-world Commerce patterns and Tokenized Asset distribution flows.
39
+
**Customer use case:** Issuers of regulated or closed-loop tokens need to enforce different rules for senders vs recipients. For example: KYC required to on-ramp into a stablecoin, but anyone in the approved set can spend. Without compound policies, issuers had to apply the same restrictions to both sides, which broke real-world Commerce patterns and Tokenized Asset distribution flows.
38
40
39
41
**What this enables:**
40
42
- If you integrate with TIP-403 policies: new `isAuthorizedSender()`, `isAuthorizedRecipient()`, and `isAuthorizedMintRecipient()` functions are available. The existing `isAuthorized()` still works (returns `senderCheck && recipientCheck`).
41
-
- If you issue TIP-20 tokens: You can now create compound policies for use cases like vendor credits, directional KYC, or asymmetric compliance.
43
+
- If you issue TIP-20 tokens: you can now create compound policies for use cases like vendor credits, directional KYC, or asymmetric compliance.
**TLDR:** New precompile for managing consensus validators. Adds Ed25519 signature verification at registration, append-only history and stable validator indices.
51
+
**TLDR:** New precompile for managing consensus validators. Adds Ed25519 signature verification at registration, append-only history, and stable validator indices.
50
52
51
-
**Customer use case:**Node operators currently depend on Tempo to make any validator configuration changes. With V2, operators can self-service IP rotations, key rotations, and ownership transfers without waiting on Tempo — reducing operational dependency and enabling faster incident response.
53
+
**Customer use case:**Before V2, node operators depended on Tempo to make any validator configuration changes. With V2, operators can self-service IP rotations, key rotations, and ownership transfers without waiting on Tempo — reducing operational dependency and enabling faster incident response.
52
54
53
55
**What this enables:**
54
-
-**Node operators:** Node operators won't need to do anything for this migration. After the migration, operators can self-service IP updates, key rotation, and ownership transfers.
55
-
-**Minimal nodes for validators:** Validator v2 unlocks a major innovation: minimal nodes for validators. Today, validators must keep ~64,000 blocks of history to reconstruct validator sets requiring hundreds of GB of storage. V2 eliminates this requirement, letting validators query the set from the latest state only.
56
+
-**Node operators:** Node operators didn't need to take action for the migration itself. Operators can now self-service IP updates, key rotation, and ownership transfers.
57
+
-**Minimal nodes for validators:** Validator V2 unlocks minimal nodes for validators. Previously, validators had to keep ~64,000 blocks of history to reconstruct validator sets, requiring hundreds of GB of storage. V2 removes that requirement, letting validators query the set from the latest state only.
Copy file name to clipboardExpand all lines: src/pages/protocol/upgrades/t3.mdx
+18-21Lines changed: 18 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,51 +5,52 @@ description: Details and timeline for the T3 network upgrade, including enhanced
5
5
6
6
# T3 Network Upgrade
7
7
8
-
T3 is the next Tempo protocol upgrade. It introduces enhanced access keys, a standard signature verification precompile, and virtual addresses for TIP-20 deposit routing.
8
+
T3 introduced enhanced access keys, a standard signature verification precompile, and virtual addresses for TIP-20 deposit routing.
9
+
10
+
:::info[T3 status]
11
+
T3 is active on both testnet and mainnet.
12
+
:::
9
13
10
14
## Timeline
11
15
12
16
| Network | Date | Timestamp |
13
17
|---------|------|-----------|
14
-
|Moderato (testnet)| April 21, 2026 4pm CEST |`1776780000`|
15
-
|Presto (mainnet)| April 27, 2026 4pm CEST |`1777298400`|
18
+
|Testnet| April 21, 2026 4pm CEST |`1776780000`|
19
+
|Mainnet| April 27, 2026 4pm CEST |`1777298400`|
16
20
17
-
Partners should upgrade nodes to the T3-compatible release before the Moderato activation timestamp.
21
+
Node operators needed to upgrade to the T3-compatible release before the testnet activation timestamp.
18
22
19
23
## Overview
20
24
21
25
| TIP | What it does | Who should review |
22
26
|-----|-------------|-------------------|
23
-
|[TIP-1011](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1011.md)| Periodic spending limits, call scoping, and a ban on access-key contract creation | Wallets, account SDKs, apps using connected apps or subscriptions |
24
-
|[TIP-1020](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1020.md)| Signature verification precompile for secp256k1, P256, and WebAuthn | Smart contract teams, account integrators, wallet SDKs |
|[TIP-1011](https://tips.sh/1011)| Periodic spending limits, call scoping, and a ban on access-key contract creation | Wallets, account SDKs, apps using connected apps or subscriptions |
28
+
|[TIP-1020](https://tips.sh/1020)| Signature verification precompile for secp256k1, P256, and WebAuthn | Smart contract teams, account integrators, wallet SDKs |
These breaking changes only affect access-key integrations. You need to update your integration if you create new access keys, manually encode `key_authorization` or `authorizeKey(...)`, or rely on access-key-signed deployment flows. Existing authorized keys continue to work.
30
34
31
35
### Access-key authorization ABI
32
36
33
-
Integrations that directly call `AccountKeychain.authorizeKey(...)` or manually encode `key_authorization` must migrate to the TIP-1011 format after activation. Legacy calls fail with `LegacyAuthorizeKeySelectorChanged(newSelector: 0x980a6025)`.
34
-
35
-
-**Before activation:** use the legacy ABI. The TIP-1011 format is not yet valid onchain.
36
-
-**After activation:** use the TIP-1011 tuple-form ABI. The legacy selector `0x54063a55` stops working.
37
+
Integrations that directly call `AccountKeychain.authorizeKey(...)` or manually encode `key_authorization` must use the TIP-1011 tuple-form ABI. The legacy selector `0x54063a55` no longer works — legacy calls fail with `LegacyAuthorizeKeySelectorChanged(newSelector: 0x980a6025)`.
37
38
38
-
If you use an updated SDK, this is mostly a tooling upgrade. If you support both pre-T3 and post-T3 networks, branch on network version or activation timestamp. If you hand-encode calldata, use the exact tuple-form signature from the [Account Keychain precompile spec](/protocol/transactions/AccountKeychain).
39
+
If you use an updated SDK, this is mostly a tooling upgrade. If you hand-encode calldata, use the exact tuple-form signature from the [Account Keychain precompile spec](/protocol/transactions/AccountKeychain).
39
40
40
41
### Access-key contract creation
41
42
42
-
Post-T3, access-key-signed transactions can no longer create contracts in any configuration — including direct CREATE, factory CREATE, and internal CREATE2. Move those flows to a root key path.
43
+
Access-key-signed transactions can no longer create contracts in any configuration — including direct CREATE, factory CREATE, and internal CREATE2. Move those flows to a root key path.
43
44
44
45
### Migration checklist
45
46
46
47
- Upgrade to a T3-compatible SDK release listed below
47
48
- Regenerate contract bindings or replace handcrafted encoders for `authorizeKey(...)`
48
49
- Move any access-key contract-creation flows to a root key path
49
50
- If you adopt virtual addresses, collapse the two-hop `Transfer` pair into one logical deposit to the registered master wallet rather than treating the virtual address hop as a separate transfer
50
-
- Test key creation, key rotation, and recovery flows on Moderato after T3 activates
51
+
- Test key creation, key rotation, and recovery flows on testnet
51
52
52
-
Most integrators only need to upgrade tooling. Existing authorized access keys keep working.
53
+
Most integrators only needed to upgrade tooling. Existing authorized access keys keep working.
53
54
54
55
## Supporting new features
55
56
@@ -61,7 +62,7 @@ See [Virtual addresses for TIP-20 deposits](/protocol/tip20/virtual-addresses) f
61
62
62
63
### Signature verification precompile
63
64
64
-
[TIP-1020](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1020.md) is additive — existing verifier setups keep working. Teams that want a standard onchain verification surface can adopt the precompile instead of maintaining custom verifier contracts. See the [Signature Verification with Foundry](/sdk/foundry/signature-verifier) guide.
65
+
[TIP-1020](https://tips.sh/1020) is additive — existing verifier setups keep working. Teams that want a standard onchain verification surface can adopt the precompile instead of maintaining custom verifier contracts. See the [Signature Verification with Foundry](/sdk/foundry/signature-verifier) guide.
65
66
66
67
## Compatible SDK releases
67
68
@@ -75,11 +76,7 @@ Tempo's broader tooling ecosystem is available in [Developer tools](/quickstart/
The Accounts SDK and `wallet_authorizeAccessKey` docs still describe the legacy pre-T3 access-key shape. Until their T3 support lands, use the protocol specs and the T3-compatible SDK releases above for the post-T3 `authorizeKey(...)` ABI.
80
-
:::
81
-
82
79
## Related docs
83
80
-[Virtual addresses for TIP-20 deposits](/protocol/tip20/virtual-addresses)
Copy file name to clipboardExpand all lines: src/pages/protocol/upgrades/t4.mdx
+16-11Lines changed: 16 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,35 +8,40 @@ description: Details and timeline for the T4 network upgrade, including consensu
8
8
This page summarizes T4 scope.
9
9
10
10
:::info[T4 status]
11
-
T4 is active on both Moderato (testnet) and Presto (mainnet).
11
+
T4 is active on both testnet and mainnet.
12
12
:::
13
13
14
14
## Timeline
15
15
16
16
| Network | Date | Timestamp |
17
17
|---------|------|-----------|
18
-
|Moderato (testnet)| May 14, 2026 4pm CEST |`1778767200`|
19
-
|Presto (mainnet)| May 18, 2026 4pm CEST |`1779112800`|
18
+
|Testnet| May 14, 2026 4pm CEST |`1778767200`|
19
+
|Mainnet| May 18, 2026 4pm CEST |`1779112800`|
20
20
21
-
Node operators needed to upgrade to the T4-compatible release (v1.7.0, released May 11, 2026 4pm CEST) before the Moderato activation timestamp.
21
+
Node operators needed to upgrade to the T4-compatible release (v1.7.0, released May 11, 2026 4pm CEST) before the testnet activation timestamp.
22
22
23
23
## Overview
24
24
25
-
T4 is Tempo's current network upgrade. It introduced the following changes:
26
-
- Embedding consensus context into the block header to unlock deferred verification and reduce finalization latency ([TIP-1031](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1031.md))
27
-
- A bundle of T4 bug fixes and security hardening (https://tips.sh/1046)
25
+
T4 introduced the following changes:
26
+
- Embedding consensus context into the block header to unlock deferred verification and reduce finalization latency ([TIP-1031](https://tips.sh/1031))
27
+
- A bundle of bug fixes and security hardening ([TIP-1046](https://tips.sh/1046))
28
28
29
29
## Compatible SDK releases
30
30
31
-
T4-compatible SDK releases will be listed here as they ship.
See [Developer tools](/quickstart/developer-tools) for the broader SDK ecosystem.
32
37
33
38
## Related docs
34
39
-[Network upgrades and releases](/guide/node/network-upgrades)
35
-
-[TIP-1031: Embed Consensus Context in the Block Header](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1031.md)
36
-
-[TIP-1046: T4 Hardfork Meta TIP](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1046.md)
40
+
-[TIP-1031: Embed Consensus Context in the Block Header](https://tips.sh/1031)
41
+
-[TIP-1046: T4 Hardfork Meta TIP](https://tips.sh/1046)
37
42
38
43
## Feature TIPs
39
44
40
45
### TIP-1031: Embed Consensus Context in the Block Header
41
46
42
-
[TIP-1031](https://github.com/tempoxyz/tempo/blob/main/tips/tip-1031.md) adds an optional `Context` field (epoch, view, parent view, leader) as the last field of `TempoHeader`. This commits consensus metadata to the block hash so Tempo blocks implement Commonware's `CertifiableBlock` trait, enabling deferred verification (optimistic notarization with async background verification) and reduced finalization latency. Pre-activation headers are unchanged; post-activation headers require the field and validators reject mismatched context.
47
+
[TIP-1031](https://tips.sh/1031) added an optional `Context` field (epoch, view, parent view, leader) as the last field of `TempoHeader`. This commits consensus metadata to the block hash so Tempo blocks implement Commonware's `CertifiableBlock` trait, enabling deferred verification (optimistic notarization with async background verification) and reduced finalization latency. Pre-T4 headers are unchanged; post-T4 headers require the field, and validators reject mismatched context.
Copy file name to clipboardExpand all lines: src/pages/protocol/upgrades/t5.mdx
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,18 +7,18 @@ description: Details and timeline for the T5 network upgrade, including the ensh
7
7
8
8
T5 is Tempo's next network upgrade. It introduces an enshrined TIP-20 reserve channel precompile for MPP and similar session-based payment flows, payment lane classification in consensus, DEX improvements (same-tick flip orders and persistent order IDs across flips), multihop FeeAMM routing, an on-chain `logoURI` field for TIP-20 tokens, an Implicit Approvals List for gas-efficient internal transfers, and a witness digest binding for one-signature key authorization flows.
9
9
10
-
:::info[T5 is not live yet]
11
-
The features described on this page are scheduled for T5 and are not active on Moderato or Presto yet. They only become live once the T5 activation timestamps are reached.
10
+
:::info[T5 status]
11
+
T5 is not yet active on testnet or mainnet. The features described on this page become live at the activation timestamps below.
12
12
:::
13
13
14
14
## Timeline
15
15
16
16
| Network | Date | Timestamp |
17
17
|---------|------|-----------|
18
-
|Moderato (testnet)| June 3, 2026 | TBD |
19
-
|Presto (mainnet)| June 9, 2026 | TBD |
18
+
|Testnet| June 3, 2026 | TBD |
19
+
|Mainnet| June 9, 2026 | TBD |
20
20
21
-
Node operators must upgrade to the T5-compatible release (v1.8.0, targeted for May 27, 2026) before the Moderato activation timestamp.
21
+
Node operators must upgrade to the T5-compatible release (v1.8.0, targeted for May 27, 2026) before the testnet activation timestamp.
22
22
23
23
## Overview
24
24
@@ -32,7 +32,7 @@ T5 introduces the following changes:
32
32
- An Implicit Approvals List enabling listed precompiles to pull TIP-20 tokens without a prior approval ([TIP-1035](https://tips.sh/1035))
33
33
- A witness digest field in key authorizations to bind one signature to an application challenge ([TIP-1053](https://tips.sh/1053))
34
34
35
-
**Action required for node operators:** Upgrade to v1.8.0 before the Moderato activation timestamp. Non-upgraded nodes will fall out of consensus.
35
+
**Action required for node operators:** Upgrade to v1.8.0 before the testnet activation timestamp. Non-upgraded nodes will fall out of consensus.
0 commit comments