{ "@context": { "@language": "en-us", "CIP100": "https://github.com/cardano-foundation/CIPs/blob/master/CIP-0100/README.md#", "CIP129": "https://github.com/cardano-foundation/CIPs/blob/master/CIP-0129/README.md#", "CIP136": "https://github.com/cardano-foundation/CIPs/blob/master/CIP-0136/README.md#", "hashAlgorithm": "CIP100:hashAlgorithm", "body": { "@id": "CIP136:body", "@context": { "govActionId": "CIP129:governance-action-identifiers", "references": { "@id": "CIP100:references", "@container": "@set", "@context": { "GovernanceMetadata": "CIP100:GovernanceMetadataReference", "Other": "CIP100:OtherReference", "label": "CIP100:reference-label", "uri": "CIP100:reference-uri", "RelevantArticles": "CIP136:RelevantArticles" } }, "summary": "CIP136:summary", "rationaleStatement": "CIP136:rationaleStatement", "precedentDiscussion": "CIP136:precedentDiscussion", "counterargumentDiscussion": "CIP136:counterargumentDiscussion", "conclusion": "CIP136:conclusion", "internalVote": { "@id": "CIP136:internalVote", "@container": "@set", "@context": { "constitutional": "CIP136:constitutional", "unconstitutional": "CIP136:unconstitutional", "abstain": "CIP136:abstain", "didNotVote": "CIP136:didNotVote", "againstVote": "CIP136:againstVote" } } } }, "authors": { "@id": "CIP100:authors", "@container": "@set", "@context": { "did": "@id", "name": "http://xmlns.com/foaf/0.1/name", "witness": { "@id": "CIP100:witness", "@context": { "witnessAlgorithm": "CIP100:witnessAlgorithm", "publicKey": "CIP100:publicKey", "signature": "CIP100:signature" } } } } }, "hashAlgorithm": "blake2b-256", "body": { "govActionId": "gov_action1dmwlfuwm45r0x2d2d96r2kwyjv9hk6ylzmq8xpsay2xecesn6xwqqdlv55z", "summary": "Ace Alliance finds the proposed \"Cardano Strategic Copper Reserve | ₳22M RWA Tokenization\" Treasury Withdrawals Governance Action Unconstitutional under Article II.6.1 and Article II.7.6. Rationales are archived at https://github.com/ace-alliance/ace-voting/", "rationaleStatement": "A [PDF version][pdf-link] of this rationale is also made available.\n\n[pdf-link]: ipfs://bafkreih7kwpkype374sjjzv4p3fgi2ir323plprz32arijljekevvftdp4\n\n\"Cardano Strategic Copper Reserve | ₳22M RWA Tokenization\" (gov_action1dmwlfuwm45r0x2d2d96r2kwyjv9hk6ylzmq8xpsay2xecesn6xwqqdlv55z) is a Treasury Withdrawals Governance Action and is therefore governed by both the general proposal standards in Article II.6 and the additional Treasury Withdrawal standards in Article II.7. The Action seeks 22,000,000 ada for Toto Finance Inc., a United States company named as both the recipient and the accountable administrator, to acquire COMEX Grade 1 copper cathodes held in a COMEX-approved warehouse, tokenize that copper as CuTT on Ethereum, and lock the Treasury-funded tranche in a bridge escrow backing a matching Cardano representation. After a hold of 18 to 24 months the copper is to be sold, and the net sale proceeds together with any unused or unearned budget are to be returned to the Cardano Treasury by month 36. The ask comprises 14,724,409 ada for copper, 441,732 ada for execution, a 3,533,859 ada operating and assurance envelope, 2,640,000 ada for Toto Finance technology and project management, and 660,000 ada for independent administration and oversight. The on-chain withdrawal destination is stake1uxmfznssgltfuakxlluxdecmu9wwd48kw0pz0qhugaxyjyguc0tax. We state at the outset what this rationale is and is not: it is a finding about the constitutional form of this governance action and the status of its withdrawal destination, and it is not a judgment on the merits of real world asset tokenization, the copper thesis, or the commercial terms of the program, all of which are for the Cardano Community and its DReps.\n\nUnder Article II.6.1, all governance actions \"shall follow a standardized and legible format before being recorded or enacted on-chain\", and the required format includes a URL hosting a context document together with the hash of that document, where \"The document hosted by such a URL shall be immutable and incapable of being altered after submission\". This Action anchors its metadata at a plain HTTPS URL on the proposer's own web domain, served through a commercial web hosting platform. We investigated before reaching a conclusion. As of our review, the document at that URL is live and its blake2b-256 hash, which we computed ourselves from the retrieved document, exactly matches the hash b2bdccb6d772bae43613612a745ed19f80ba4692c0e1616a2e61606d379953c0 recorded on-chain, so we do not find that any alteration has occurred. The constitutional distinction, however, is not whether the document has been altered, nor who operates the hosting. A URL that embeds the hash of the document it names, such as a content addressed IPFS URI or a commit hash URL, is self verifying and immutable in the constitutional sense: the identifier itself commits to the content, so what the URL names can never change, it can at most become unavailable. A location addressed URL names a place rather than a content commitment. Nothing in this Action's URL binds it to this document; whatever the publisher places at that location answers to the same URL. The hosting server itself reports that the file was last modified at 18:44 UTC on 15 October 2026, roughly seventeen hours after the submission transaction was recorded at 01:01 UTC that day. Because the hash still matches, we draw no inference of alteration from that timestamp; we note it only because it illustrates that the document at this location remains under the ongoing control of its publisher and is therefore capable of being altered after submission. The full proposal document referenced from the metadata is hosted the same way. This Action does not meet the format that Article II.6.1 requires.\n\nThe proposal itself instructs that, before actual submission, the final document and its CIP-108 metadata be published \"at immutable URLs\" and the hash verified; the Action as submitted anchors to a location addressed URL instead. Content addressed hosting that satisfies the requirement is freely and widely available, and the on-chain governance ecosystem, including this Committee's own publications, uses it as a matter of course. Because the anchor URL is fixed in the on-chain governance action, this defect cannot be cured during the life of the Action; the remedy is resubmission in compliant form. The metadata otherwise supplies the title, abstract, motivation, rationale, and supporting reference that Article II.6.2 requires.\n\nThe remaining provisions of Article II.7 that bear on the terms of the withdrawal are met. Under Article II.7.1, Treasury Withdrawals \"must specify the terms of the withdrawal,\" including \"the purpose of the withdrawal, the period for delivery of proposed activities which the withdrawal shall be used for, the relevant costs and expenses of the proposed activities, circumstances under which the withdrawal might be refunded to the Cardano Treasury.\" Each is specified: the purpose of acquiring, tokenizing, holding, and liquidating a verified copper reserve; a program period ending at month 36; costs itemized across five categories summing to the amount recorded on-chain; and refund circumstances under which net sale proceeds and unused or unearned budgets are returned to the Treasury. The disclosure requirement of Article II.7.2 is met expressly: Toto Finance states that it has received no ada from the Cardano Treasury within the preceding 24 months. A Net Change Limit of 500,000,000 ada is in force for the period spanning epochs 613 through 713, agreed by the DReps at the greater-than-50-percent active voting stake threshold TREASURY-01a requires, and this withdrawal does not cause that limit to be exceeded, on its own or in aggregate with the withdrawals enacted within the window at the time of this review, satisfying Article II.7.3 and TREASURY-02a. The withdrawal is denominated in ada as TREASURY-03a requires.\n\nUnder Article II.7.4, which requires \"an allocation of ada as a part of such funding request to cover the cost of periodic independent audits and the implementation of oversight metrics as to the use of such ada,\" the operating and assurance envelope expressly covers physical and financial audits and security reviews, the separate 660,000 ada allocation funds an independent professional oversight provider paid only for accepted services, and the proposal commits to public audits and reserve reconciliations reporting all funds, related-party fees, and Treasury returns. Neither the auditors nor the oversight provider has yet been engaged. Naming them only after the withdrawal is not advisable practice, because it leaves DReps to vote without knowing who will verify the use of the funds. Article II.7.4, however, does not require that an auditor be named; it requires that ada be set aside \"to cover the cost of periodic independent audits\", and this proposal does so. On the record before us, that is sufficient. Under Article II.7.5, Treasury Withdrawals \"shall designate one or more administrators responsible for monitoring how the funds are used, and ensuring the deliverables are achieved,\" and the proposal designates Toto Finance as the accountable administrator. Self-administration is not by itself unconstitutional, and the designated administrator exists at the moment of withdrawal, which satisfies Article II.7.5.\n\nUnder Article II.7.6, \"Any ada received from a Cardano Blockchain treasury withdrawal, so long as such ada is being held by an administrator prior to further disbursement to the Treasury Withdrawal Recipient, must be kept in one or more separate accounts that can be audited by the Cardano Community, and such accounts shall not be delegated to an SPO but must be delegated to the predefined abstain voting option.\" The provision is engaged here. Toto Finance is the designated administrator, and the withdrawn ada is to be held at the destination and disbursed over a period of up to 36 months to copper sellers, warehouse and insurance providers, auditors, the oversight provider, and Toto Finance itself against accepted milestones. The proposal itself commits Toto Finance to hold undisbursed Treasury ada in segregated, publicly auditable accounts and to \"comply with applicable Abstain governance delegation and no-SPO-delegation requirements\". We verified the destination on-chain. It is a key-hash stake address (CIP-19 mainnet header byte 0xe1). It was registered in epoch 661, in a transaction recorded roughly two minutes before the governance action was submitted, and in that same transaction it was delegated both to the predefined always-abstain DRep and to the stake pool pool17ahr5ygy48vpdfnatqn2z4wfu2te4quapk2yx3k50ce6kd7feg0, a third-party pool. The abstain prong is satisfied. The SPO prong is not: the account that is to receive and hold 22,000,000 ada pending disbursement is delegated to a stake pool, which Article II.7.6 forbids in terms. On the record before us, the withdrawal destination does not meet Article II.7.6.\n\nOnly the Treasury Withdrawal guardrails in Appendix I.3 are engaged, and each is addressed above; the parameter, hard-fork, no-confidence, constitution, and committee guardrail groups are not engaged by a Treasury Withdrawals action.", "precedentDiscussion": "None", "counterargumentDiscussion": "A reviewer might argue that the on-chain anchor hash cryptographically pins the content of the document, so that any post-submission alteration would be immediately evident to any verifier, the community retains verbatim copies, and the purpose of Article II.6.1 is therefore served on these facts. We acknowledge that this argument has force. We reject that view on these facts. The constitutional text does not ask for tamper evidence; it requires that the hosted document be \"immutable and incapable of being altered after submission\", and a hash recorded elsewhere on-chain cannot prevent the document at the URL from being altered, it can only reveal that it has been. The requirement carries particular weight for a Treasury Withdrawal. The terms that Article II.7.1 requires, including here the obligation to return net sale proceeds and unused budgets by month 36, live in the off-chain document, and it is that document against which the community will later hold the recipient to account. Reading \"immutable\" to mean \"tamper evident\" would rewrite a provision the community deliberately strengthened and permit every future withdrawal to anchor its terms at a location whose content is alterable at will. The requirement is modest, self verifying alternatives were freely available, and the proposal itself recognized the need for them.\n\nA reviewer might further argue that Article II.7.6 is not engaged at all, because the provision speaks of ada \"being held by an administrator prior to further disbursement to the Treasury Withdrawal Recipient\", and here the withdrawal is paid directly to the recipient. We acknowledge that the text distinguishes administrator from recipient, and that where funds pass directly to a recipient with no administrator custody, the holding obligations of Article II.7.6 may not arise. We reject that view on these facts. The proposal designates Toto Finance as the accountable administrator, the ada received at the destination is held there pending staged disbursement to third parties over up to 36 months, and the proposal itself accepts that the no-SPO-delegation requirement applies to those holdings. A reading under which a proposer escapes Article II.7.6 by naming itself as both recipient and administrator would turn the provision's safeguards into an option exercisable by the very party they are meant to bind, and the Constitution does not support that construction.\n\nA reviewer might also argue that the stake pool delegation is a curable defect, because the proposer can remove the pool delegation before enactment by deregistering and re-registering the stake credential with abstain delegation only, and that the Committee should not find a governance action unconstitutional on a condition the proposer can still correct. This argument has real force, and we acknowledge that the delegation, unlike the anchor, can be corrected within the life of the Action. We reject that view on these facts. We assess the governance action as it stands, and the pool delegation was not an inherited condition but was made in the same transaction that registered the account, minutes before submission. Should the delegation be corrected, the finding under Article II.7.6 may be revisited on the corrected record. The finding under Article II.6.1 would remain, and it is independently sufficient.", "conclusion": "Ace Alliance finds the proposed \"Cardano Strategic Copper Reserve | ₳22M RWA Tokenization\" Treasury Withdrawals Governance Action Unconstitutional under Article II.6.1 and Article II.7.6.", "internalVote": { "constitutional": 0, "unconstitutional": 5, "abstain": 0, "didNotVote": 0, "againstVote": 0 }, "references": [ { "@type": "RelevantArticles", "label": "Cardano Constitution", "uri": "ipfs://bafkreieyuknozbtewyurfqoagvplvykadn6a4u6wglupavdz46bbsnnl6e" }, { "@type": "GovernanceMetadata", "label": "Proposal Metadata Anchor URI", "uri": "https://totofinance.com/cardano-treasury-proposal-strategic-tokenized-copper-reserve/data.jsonld" }, { "@type": "GovernanceMetadata", "label": "Proposal Metadata Anchor Hash", "uri": "b2bdccb6d772bae43613612a745ed19f80ba4692c0e1616a2e61606d379953c0" }, { "@type": "Other", "label": "Full Treasury Proposal (PDF)", "uri": "https://totofinance.com/cardano-treasury-proposal-strategic-tokenized-copper-reserve/Cardano_Toto-Finance_Tokenized_Copper_CuTT_Treasury_Proposal.pdf" }, { "@type": "Other", "label": "Withdrawal Destination Registration and Delegation Transaction", "uri": "https://cardanoscan.io/transaction/ecd7e0b7fad8a9869dbb3aac75a45daecd44335b275264f3e78ccf98328ddb06" } ] }, "authors": [ { "name": "Ace Alliance" } ] }