Implement CellScript 0.26 dynamic Cell batching

Author: a19q3

BRANCHES.md

@@ -1,8 +1,19 @@
 # Branch Context
 
+## nightly-0.26
+
+`nightly-0.26` is the active consensus-runtime development line for bounded
+Cell-group consumption and bounded output-plan correspondence. The first
+supported shape is deliberately limited to exact Type Script groups with a
+compile-time cardinality bound, canonical Molecule decoding, deterministic
+group-relative order, and independently checked machine evidence. Treat the
+line as non-production until the positive CKB-VM/stateful fixtures, mutation
+checks, resource measurements, independent security review, and the `dev`,
+`ci`, and `backend` gates agree.
+
 ## nightly-0.25
 
-`nightly-0.25` is the active language-completeness development line. It adds
+`nightly-0.25` is the language-completeness predecessor. It adds
 bounded value generics, explicit visibility and package interfaces, exhaustive
 IR-surface classification, and the typed-semantics v2 / lowering-record v3
 boundary. Treat it as merge-ready only when compiler, independent checker,

CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.26.0 - Unreleased
+
+- Implement the first bounded consensus-runtime contracts. Fixed-width
+  `BoundedCellSet<Resource, N>` now scans the exact current Type Script
+  `GroupInput`, checks role, exact data size, runtime cardinality including an
+  `N + 1` probe, and executes predicates once per element. Fixed-width
+  `BoundedList<Plan, N>` now uses the versioned `CSBPLv1\0` Molecule FixVec
+  witness plan and verifies one canonical `GroupOutput` per element, including
+  complete data, exact lock, declared capacity floor, predicate execution, and
+  final count. Bounded bodies admit only pure predicates, one create template,
+  and numeric outer `+=` accumulators. Dynamic layouts, other sources, custom
+  identities, incomplete templates, and implicit lock/capacity policy remain
+  fail-closed.
+
+- Add production-policy and real CKB-VM coverage for zero/one/N/N+1 inputs,
+  malformed codecs and cell data, predicate failures, output
+  count/order/data/lock/capacity mismatches, and typed/machine artifact
+  mutations. Add checked `.cell` examples for variable-cardinality claims,
+  1–16 order settlement, fragmented Cell merging, and bridge/rollup batches.
+  Advance compile metadata to schema 62, constraints metadata to schema 3,
+  verified lowering records to v4, and typed semantics to v3.
+
 ## 0.25.0 - Unreleased
 
 - Rebase the 0.25 development line on the complete 0.24 trust boundary,
@@ -995,7 +1017,7 @@
   invalid `extend_from_slice` element types, and unrefined `Vec::new()` slice
   extension cases fail at compile time instead of drifting into hidden runtime
   paths.
-- Add `examples/language/order_book.cell` as a non-production language example
+- Add `examples/language/collections/order_book.cell` as a non-production language example
   for local stack-backed order vectors.
 - Add the CKB release-gate wrapper script and document the difference between
   quick compile-only evidence and full production acceptance.

CODING_STYLE.md

@@ -28,6 +28,20 @@ project contract.
   short reason; crate-wide or module-wide clippy allowances are only for
   documented legacy or transition boundaries.
 
+## CellScript Example Organization
+
+- Organize `examples/language/` by semantic purpose: `core`, `ckb`,
+  `ownership`, `verification`, `collections`, or `batches`.
+- A `.cell` filename must describe behavior and must not contain a release or
+  version marker. The native source-policy gate checks tracked and untracked
+  CellScript sources and rejects forms such as `v0_26_batch.cell`,
+  `contract-v1.cell`, and `token_0.26.0.cell`.
+- Keep release history in `CHANGELOG.md` and release notes. Do not encode it in
+  source paths, module names, fixture identities, or user-facing example names.
+- When moving an example, update its module declaration, documentation links,
+  embedded fixtures, website references, and production-evidence inventory in
+  the same change.
+
 ## On-Chain Registry Script Rules
 
 `contracts/registry-type-script` is an independent `no_std` CKB Script crate.

Cargo.lock

@@ -21,7 +21,7 @@ resolver = "3"
 
 [package]
 name = "cellscript"
-version = "0.25.0"
+version = "0.26.0"
 edition = "2024"
 rust-version = "1.97.1"
 autobins = false
@@ -84,7 +84,7 @@ blake2b_simd = "1.0"
 toml = "0.8"
 hex = "0.4"
 semver = "1.0"
-cellscript-artifact-checker = { version = "=0.25.0", path = "crates/cellscript-artifact-checker" }
+cellscript-artifact-checker = { version = "=0.26.0", path = "crates/cellscript-artifact-checker" }
 
 indexmap = "=2.2.6"
 

Cargo.toml

@@ -427,14 +427,17 @@ action burn(token: Token) {
 | `examples/amm_pool.cell` | TypeHash-bound shared pool state and swap/liquidity effects |
 | `examples/launch.cell` | Mint-authority bootstrap and launch/pool composition patterns |
 
-Non-production language examples live under `examples/language/`. They compile
-and exercise compiler/tooling surfaces, but they are not part of the seven-file
-CKB production acceptance matrix. `registry.cell` covers bounded local
+Non-production language examples are classified by behavior under
+[`examples/language/`](examples/language/README.md). They compile and exercise
+compiler/tooling surfaces, but they are not part of the seven-file CKB
+production acceptance matrix. `collections/registry.cell` covers bounded local
 `Vec<Address>` / `Vec<Hash>` helpers; `examples/registry.cell` keeps that
-surface available from the top-level examples directory. `examples/language/order_book.cell` is a
-local stack-backed order-vector sketch and does not claim persistent order-book
-semantics. The v0.14 language examples cover CKB source/witness, capacity/time,
-TYPE_ID, Spawn/IPC, and dynamic BLAKE2b surfaces as compiler/tooling examples.
+surface available from the top-level examples directory.
+`examples/language/collections/order_book.cell` is a local stack-backed
+order-vector sketch and does not claim persistent order-book semantics. The
+`ckb/` examples cover source/witness, capacity/time, TYPE_ID, Spawn/IPC, and
+dynamic BLAKE2b surfaces. `.cell` filenames describe semantics and never encode
+a release version.
 
 ## Comparison
 
@@ -497,7 +500,6 @@ or CellFabric intent engine.
 - [BIP340 verifier CellDep ABI](docs/CELLSCRIPT_SIGNATURE_VERIFIER_ABI.md)
 - [Collections support matrix](docs/CELLSCRIPT_COLLECTIONS_SUPPORT_MATRIX.md)
 - [Output bindings](docs/CELLSCRIPT_OUTPUT_BINDINGS.md)
-- [Historical signature-direction execution plan](docs/archive/0.13/CELLSCRIPT_SIGNATURE_DIRECTION_EXECUTION_PLAN.md)
 - [CKB target profile tutorial](docs/wiki/Tutorial-05-CKB-Target-Profiles.md)
 - [CKB deployment manifest](docs/CELLSCRIPT_CKB_DEPLOYMENT_MANIFEST.md)
 - [Spore and RGB++ interoperability boundaries](docs/wiki/Spore-and-RGBPP-Interop-Boundaries.md)
@@ -622,7 +624,7 @@ CKB cycle/capacity estimates.
 | Module | What it does |
 |---|---|
 | **Stdlib** (`stdlib/`) | Built-in functions and compiler-recognized patterns that lower to explicit verifier effects: lifecycle helpers such as `std::lifecycle::transfer`, `std::receipt::claim`, and `std::lifecycle::settle`; cell metadata helpers such as `std::cell::preserve_type`, `std::cell::preserve_lock`, and `std::cell::preserve_capacity`; plus ckb-vm syscall/runtime helpers. Module-injected, not linked separately. |
-| **Collections** (`stdlib/collections.rs`) | Compiler-recognized stack-backed `Vec<T: FixedWidth>` lowering remains supported for verifier-local values, including `new`, `with_capacity`, `capacity`, `push`, `extend_from_slice`, `len`, `is_empty`, indexing, `first`, `last`, `contains`, `set`, `remove`, `pop`, `insert`, `reverse`, `truncate`, `swap`, and `clear`. Generated allocation-backed collection symbols are fail-closed and are not a production allocator ABI. Cell-backed collection ownership remains unsupported. |
+| **Collections** (`stdlib/collections.rs`) | Compiler-recognized stack-backed `Vec<T: FixedWidth>` lowering supports verifier-local values. The 0.26 bounded Cell runtime additionally supports fixed-width `BoundedCellSet<T, N>` over the exact current Type Script `GroupInput` and `BoundedList<P, N>` through the versioned plan-to-`GroupOutput` verifier; see the [support matrix](docs/CELLSCRIPT_COLLECTIONS_SUPPORT_MATRIX.md). Dynamic element layouts, other Cell sources, and generated allocation-backed helpers remain fail-closed. |
 
 ### Tooling Surface
 
@@ -726,7 +728,7 @@ policy defaults:
 [package]
 edition = "2026"
 name = "token"
-version = "0.25.0"
+version = "0.26.0"
 entry = "src/main.cell"
 source_roots = ["src"]