{ "@context": { "@language": "en-us", "CIP100": "https://github.com/cardano-foundation/CIPs/blob/master/CIP-0100/README.md#", "CIP136": "https://github.com/cardano-foundation/CIPs/blob/master/CIP-0136/README.md#", "hashAlgorithm": "CIP100:hashAlgorithm", "body": { "@id": "CIP136:body", "@context": { "references": { "@id": "CIP100:references", "@container": "@set", "@context": { "GovernanceMetadata": "CIP100:GovernanceMetadataReference", "Other": "CIP100:OtherReference", "label": "CIP100:reference-label", "uri": "CIP100:reference-uri", "RelevantArticles": "CIP136:RelevantArticles" } }, "summary": "CIP136:summary", "rationaleStatement": "CIP136:rationaleStatement", "precedentDiscussion": "CIP136:precedentDiscussion", "counterargumentDiscussion": "CIP136:counterargumentDiscussion", "conclusion": "CIP136:conclusion", "internalVote": { "@id": "CIP136:internalVote", "@container": "@set", "@context": { "constitutional": "CIP136:constitutional", "unconstitutional": "CIP136:unconstitutional", "abstain": "CIP136:abstain", "didNotVote": "CIP136:didNotVote", "againstVote": "CIP136:againstVote" } } } }, "authors": { "@id": "CIP100:authors", "@container": "@set", "@context": { "did": "@id", "name": "http://xmlns.com/foaf/0.1/name", "witness": { "@id": "CIP100:witness", "@context": { "witnessAlgorithm": "CIP100:witnessAlgorithm", "publicKey": "CIP100:publicKey", "signature": "CIP100:signature" } } } } }, "hashAlgorithm": "blake2b-256", "body": { "govActionId": "gov_action1dmwlfuwm45r0x2d2d96r2kwyjv9hk6ylzmq8xpsay2xecesn6xwqqdlv55z", "summary": "Tingvard judges the “Cardano Strategic Copper Reserve | ₳22M RWA Tokenization” Treasury Withdrawal governance action unconstitutional.", "rationaleStatement": "This governance action requests 22,000,000 ADA from the Cardano Treasury to Toto Finance Inc. to acquire COMEX Grade 1 copper cathodes, tokenize them as CuTT, hold the copper for 18 to 24 months, and return the net sale proceeds and unspent or unearned balances to the Cardano Treasury by month 36.\n\nThis action is properly framed as a Treasury Withdrawals action and must therefore be assessed under Article II, Section 6 and Article II, Section 7 of the Constitution, together with the applicable treasury guardrails in Appendix I.\n\nTingvard’s assessment is based on the governance action metadata anchored on-chain, whose content is verified by its on-chain hash. The referenced proposal PDF is not hashed in the metadata and is hosted on the same website as the anchor. Tingvard has therefore used it only to corroborate the anchored metadata. Terms that appear only in the PDF, including its milestone schedule, dual authorisation controls, 90-day refund provision and audit sub-cap, have not been treated as terms of the action.\n\nThe proposal satisfies Article II, Section 6, §2. It includes a title, abstract, motivation, rationale and a reference to supporting material.\n\nThe proposal satisfies Article II, Section 7, §1. It identifies the purpose of the withdrawal, a delivery period of up to 36 months, five cost categories adding up to the full 22,000,000 ADA (copper, execution, an operating and assurance envelope, development and project management, and independent oversight), and the circumstances under which funds are to be returned to the Treasury.\n\nThe proposal satisfies Article II, Section 7, §2 by stating that Toto Finance has received no ada from the Cardano Treasury within the last 24 months.\n\nThe proposal satisfies Article II, Section 7, §3 and TREASURY-01a and TREASURY-02a. The applicable Net Change Limit of 500,000,000 ADA covering epochs 613 to 713 has been agreed on-chain, and the enacted withdrawals in that period leave sufficient remaining capacity for this request. The withdrawal is denominated in ada, satisfying TREASURY-03a.\n\nThe proposal satisfies Article II, Section 7, §4, with a concern. It allocates funds for independent annual physical and financial audits and for reserve and token-supply reporting within a 3,533,859 ADA operating and assurance envelope, and reserves 660,000 ADA for independent oversight. However, the audit allocation shares a single ceiling with warehouse and insurance costs and with Toto Finance’s own disclosed margin of up to 30% on third-party invoices.\n\nThe constitutional defects are found under Article II, Section 6, §1, Article II, Section 7, §5 and Article II, Section 7, §6. Each is sufficient on its own to render the action unconstitutional.\n\nArticle II, Section 6, §1 requires a URL hosting a document that outlines the proposed governance action, and the hash of that document. It further requires that “The document hosted by such a URL shall be immutable and incapable of being altered after submission”.\n\nThe anchor is hosted at an ordinary website URL controlled by the proposer, whose content can be changed after submission. The website was redeployed approximately 17 hours after the action was submitted, which illustrates that capacity. The anchor file still matches its on-chain hash, and Tingvard does not find that its content has changed. Article II, Section 6, §1, however, requires the hosted document to be immutable and incapable of being altered after submission, not merely unaltered. A matching hash shows whether a document has changed; it does not make it incapable of change. If a matching hash were sufficient, the requirement of immutability would add nothing to the requirement to provide the hash. The proposal itself instructs that the final documents be published “at immutable URLs” before submission, and this was not done.\n\nTingvard therefore finds that the action fails to satisfy Article II, Section 6, §1.\n\nArticle II, Section 7, §5 requires a Treasury Withdrawals action to designate one or more administrators responsible for monitoring how the funds are used and ensuring the deliverables are achieved.\n\nIn form, this requirement is met. The proposal names Toto Finance Inc. as the “named accountable project administrator” for the full term.\n\nIn substance, it is not met. Toto Finance is at once the Treasury Withdrawal Recipient, the administrator, the legal owner of the copper, the tokenization operator, the sole controller of the receiving wallet, and the payee of 2,640,000 ADA in development and project-management fees and of a margin on operating invoices. The proposal states that “A Toto-controlled receiving wallet is NOT independent escrow”. It states that the independent oversight provider “is to be appointed”, that a PwC member firm “is preferred but not engaged”, and that “PwC and Intersect are NOT on-chain recipients, current custodians or confirmed project partners”.\n\nThe wording of Article II, Section 7, §5 does not expressly require an administrator to be independent of the recipient. However, as Tingvard held in the “Eternl: Path to Sustainability - v2” ruling, the administrator role has a specific constitutional function, and it must have substance. Where the recipient is also the sole administrator and no independent check exists when the funds are withdrawn, the requirement is reduced to self-certification.\n\nEvery independent safeguard in this proposal is prospective. The oversight provider is unnamed and unengaged. The milestone acceptance on which the 2,640,000 ADA fee depends is to be performed by a party that has not been designated. There is no escrow, no multi-signature control and no external party with authority over the funds at the point of withdrawal. As Tingvard held in the “Alchemy by Sundial x Charms” ruling, a suggested or conditional administrator is not enough. The same reasoning applies to an independent oversight function that the action describes but does not designate.\n\nThis is especially material given the size of the request, which is more than nine times that of the self-administered proposal Tingvard found unconstitutional in June 2026, and given that a substantial part of the funds flows to the administrator itself.\n\nTingvard therefore finds that the proposal may satisfy the word “administrator” in a narrow formal sense, but fails to satisfy the substance and purpose of Article II, Section 7, §5.\n\nArticle II, Section 7, §6 requires that any ada held by an administrator prior to further disbursement to the Treasury Withdrawal Recipient be kept in separate accounts auditable by the Cardano Community, and that such accounts shall not be delegated to an SPO but must be delegated to the predefined abstain voting option.\n\nThis requirement is engaged. The proposal designates Toto Finance as administrator and states that it will hold “undisbursed Treasury ADA”. From those funds, amounts are to be paid out over the programme, including 2,640,000 ADA payable to Toto Finance itself upon milestone acceptance. As Tingvard held in the “Governance Incentives Framework 2026” ruling, the custody requirements cannot be avoided by directing an ongoing programme’s funds straight to an account controlled by the proposer. The proposal itself accepts that the no-SPO-delegation and abstain requirements apply.\n\nThe withdrawal destination identified in the action is a key-hash stake account controlled by Toto Finance. It is delegated to the predefined abstain voting option, but it is also delegated to a stake pool (pool17ahr5ygy48vpdfnatqn2z4wfu2te4quapk2yx3k50ce6kd7feg0). Tingvard confirmed this delegation on-chain at epoch 662, after submission. The same stake credential is also used by Toto Finance’s general payment address disclosed in the metadata, so the account is not a dedicated account established for the treasury funds.\n\nA statement that the recipient will comply with the custody requirements does not satisfy Article II, Section 7, §6 where the account identified in the action does not comply. Tingvard therefore finds that the action fails to satisfy Article II, Section 7, §6.\n\nTingvard has considered Article I, Section 1, Tenets 7 through 10. The fee structure, copper price exposure, ADA/USD exposure, bridge risk and the possible use of the proposer’s own TOTO token in settlement are disclosed. Tingvard does not find a clear, objective failure under the Tenets on these points.", "precedentDiscussion": "This decision establishes how Tingvard applies Article II, Section 6, §1 to the hosting of governance action documents. The requirement that the hosted document be “immutable and incapable of being altered after submission” is met only where the URL cannot serve different content after submission. That is the case for content-addressed storage, such as IPFS, and for a URL pinned to a full commit hash. It is not met by a branch URL, a tag or release URL, or an ordinary website, even where the document currently matches its on-chain hash. The question is whether the document can be altered, not whether it has been. The unavailability of a document, for example where content-addressed storage is no longer served, is a separate question that this decision does not address.\n\nAs Tingvard held in the “Cardano DeFi Liquidity Budget - Withdrawal 1” ruling of January 2026, the Constitutional Committee has no authority to apply grandfathering or transition rules, and must apply the Constitution as written. The immutability requirement has been part of the Constitution since its current version was enacted, and Tingvard has not voted constitutional on any action whose anchor fails it.\n\nThis decision is consistent with prior Tingvard assessments that treat the requirements of Article II, Section 7 as substantive constitutional safeguards, not as formal wording exercises.\n\nIt applies the reasoning in “Eternl: Path to Sustainability - v2” to a materially larger withdrawal. Where the recipient is also the sole administrator and controls the funds alone, Article II, Section 7, §5 requires an independent check or control layer that exists at the point of withdrawal. Promising to appoint one later is not sufficient, as Tingvard held in the “Alchemy by Sundial x Charms” ruling.\n\nIt also confirms the custody reasoning in “Governance Incentives Framework 2026”. Article II, Section 7, §6 is assessed against the account identified in the action. Delegation to the predefined abstain voting option does not cure delegation to an SPO. Both conditions must be met.\n\nSupporting documents that an action relies on should be referenced with their own hash. Tingvard gives no weight to terms that appear only in unhashed, mutable supporting documents.\n\nThis decision also preserves the distinction between constitutional review and policy review. Whether the Cardano Treasury should hold physical copper, whether real-world asset tokenization is a strategic priority, whether the fee levels are proportionate, and whether the copper price, exchange rate and bridge risks are acceptable are questions for DReps and ada owners. The CC assessment is limited to whether the action conflicts with the Constitution.", "counterargumentDiscussion": "One possible counterargument is that the anchor file matches its on-chain hash, so its content is already fixed, and that hosting is a technicality where nothing has changed.\n\nTingvard does not accept this. The hash is already required by Article II, Section 6, §1. The further requirement that the hosted document be immutable and incapable of being altered must therefore mean something more. A hash allows a change to be detected; it does not prevent the document at the URL from being replaced. A proposer-controlled URL leaves the authoritative text in the proposer’s hands throughout the voting period and after enactment. Tingvard’s finding does not depend on any alteration having occurred.\n\nAnother possible counterargument is that Tingvard has not previously treated website hosting as a defect, and that applying the requirement now gives proposers no notice.\n\nTingvard has not previously voted constitutional on any action whose anchor could be altered, and the absence of an earlier ruling is not a ruling to the contrary. The requirement is in the text of the Constitution, and the Constitutional Committee cannot create transition rules. The proposal itself recognised that the final documents should be published at immutable URLs.\n\nA further counterargument is that the proposal names Toto Finance as administrator for the full term, and that Article II, Section 7, §5 does not expressly require independence.\n\nTingvard accepts that the wording is neutral on independence. The designation is unconditional, which distinguishes this action from the “Cardano dOSPO and OMF Program” and “Alchemy by Sundial x Charms” actions. However, as set out in the “Eternl: Path to Sustainability - v2” ruling, the administrator role must be read in light of its function within Article II, Section 7 as a whole. Here the recipient would monitor its own spending, including the fees it pays itself, without any independent party being in place.\n\nAnother possible counterargument is that the proposal funds an independent oversight provider, requires milestone acceptance, and makes copper acquisition and minting subject to legal, custody and audit controls.\n\nTingvard acknowledges that this is the strongest argument on the administrator question. However, those controls are described as conditions to be put in place after enactment. The oversight provider is not engaged, the milestone acceptor is not named, and the controls are not enforceable by any third party at the point of withdrawal. The 660,000 ADA oversight budget funds a function that the action does not designate. As Tingvard held in the “Governance Incentives Framework 2026” ruling, funding an oversight function is not equivalent to designating the party accountable for performing it.\n\nA further counterargument is that Article II, Section 7, §6 applies only to ada held by an administrator before disbursement to a separate recipient, and that it is therefore not engaged where the recipient and the administrator are the same entity.\n\nTingvard does not accept this interpretation. The action itself describes undisbursed treasury funds held by Toto Finance in its role as administrator and later paid out against milestones, including to Toto Finance itself. Reading Article II, Section 7, §6 as inapplicable because one entity holds both roles would remove the custody safeguards from exactly the structure in which they matter most.\n\nA final counterargument is that the stake pool delegation of the destination account could be changed before enactment.\n\nTingvard notes that this defect could be cured on-chain without a new governance action. However, curing Article II, Section 7, §6 alone would not change Tingvard’s vote, because the defects under Article II, Section 6, §1 and Article II, Section 7, §5 are fixed in the action and cannot be cured within it.", "conclusion": "Tingvard finds the “Cardano Strategic Copper Reserve | ₳22M RWA Tokenization” Treasury Withdrawal governance action unconstitutional.\n\nThe proposal states a clear purpose, delivery period, costs, refund circumstances and prior funding disclosure, and fits within the applicable Net Change Limit. However, it does not satisfy Article II, Section 6, §1, because the anchored document is hosted at a URL whose content can be altered after submission. It does not satisfy Article II, Section 7, §5, because the recipient is its own sole administrator and every independent check on the use of the funds is yet to be appointed. It does not satisfy Article II, Section 7, §6, because the withdrawal destination is delegated to an SPO. Each of these defects is sufficient on its own.\n\nA resubmitted action would need to be anchored on content-addressed storage or at a commit-pinned URL, with its supporting documents referenced by hash. It would also need to designate an engaged independent administrator, or an equivalent escrow or control arrangement, in place from enactment, and to direct the funds to a dedicated account that is delegated only to the predefined abstain voting option.\n\nTingvard therefore judges this governance action unconstitutional.", "internalVote": { "constitutional": 0, "unconstitutional": 4, "abstain": 0, "didNotVote": 1, "againstVote": 0 }, "references": [ { "@type": "RelevantArticles", "label": "Cardano Blockchain Ecosystem Constitution", "uri": "ipfs://bafkreieyuknozbtewyurfqoagvplvykadn6a4u6wglupavdz46bbsnnl6e" } ] }, "authors": [ { "name": "Tingvard", "imageUrl": "ipfs://QmPkHXdK6GLtDNyyKFBWRwARFEy9TPFcbpDganixmRXwWJ" } ] }