TSUNAGI Roadmap
Deterministic Infrastructure Development Phases
ASY
Each phase builds on the foundations established by its predecessors. A phase is complete when its verification criteria are satisfied, not when a deadline arrives. Phases are ordered by dependency, not by calendar.
The foundational phase established the core architecture: a deterministic Cardano node written entirely in Zig, capable of following the chain, maintaining a live UTxO set, and verifying its own ledger transitions at runtime.
- Zig-only architecture — Single static binary with two external library dependencies (LMDB, libsodium). No runtime interpreter, garbage collector, or dynamic framework.
- Deterministic ledger pipeline — Modular state machine separating delta extraction, state application, undo management, and pipeline orchestration into independently testable components.
- Shadow ledger verification — Independent memory-only pipeline instance processing identical deltas on every block, with per-block undo-depth parity checking.
- Replay harness — Offline execution driver for recorded block sequences, enabling deterministic regression testing and cross-build verification.
- Preview network validation — Zero shadow mismatches, zero apply errors, and zero rollback errors across all sessions.
Verification Criteria
- Shadow parity maintained across all observed blocks
- Replay harness produces bitwise reproducible results across executions
- All inline tests pass under the leak-detecting allocator
- Release build compiles without warnings
The persistence phase connected the deterministic pipeline to durable storage, enabling the node to retain UTxO state across restarts and bootstrap from pre-computed snapshots.
- LMDB truth mode — Three-stage persistence: preflight scan, atomic LMDB write, automatic memory fallback with shadow-write convergence. Three operational modes (memory_only, lmdb_truth, lmdb_native).
- Snapshot bootstrap system — TSF2 format with Blake2b-256 integrity digest and Ed25519 signature attestation.
- State digest verification — CLI command for Blake2b-256 digest over the complete LMDB UTxO set.
- Preflight coverage diagnostics — Read-only LMDB scan counting consumed inputs present before write transactions are opened.
- Storage reliability — Transaction abort on write failure, shadow-write convergence, bounded undo stack with correct memory reclamation.
Verification Criteria
- LMDB truth mode operates with zero data loss across process restarts
- Snapshot export-import round-trip preserves state digest
- Preflight diagnostics accurately report coverage ratios
- Shadow-write mechanism demonstrates measurable convergence
The observability phase embedded structured health evaluation, integrity verification, and automated stabilization directly into the node binary.
- KAGAMI diagnostics — JSON health snapshots, human-readable reports, and continuous telemetry streams.
- YAMORI guardian monitor — Seven structured checks with event memory and safe-mode engagement.
- TATE fragment defense — Fragment ancestry verification, coverage evaluation, and operator recommendations.
- KURA stabilization layer — Automated artifact maintenance with retention policy enforcement.
- BAEY self-healing loop — Build-Analyze-Evolve-Yield operational cycle.
Verification Criteria
- KAGAMI snapshots accurately reflect node state at capture time
- YAMORI threshold crossings trigger appropriate event records
- TATE detects fragment ancestry breaks within one evaluation cycle
- KURA stabilization runs complete without operator intervention
Reducing the operational burden for stake pool operators and relay infrastructure administrators deploying TSUNAGI nodes.
- SPO-friendly relay deployment — Streamlined workflow with sensible defaults for common deployment scenarios.
- Lightweight node runtime — Memory footprint and startup time optimization for resource-constrained environments.
- Deterministic observability tools — Operator-facing CLI commands producing structured, actionable output.
- Automated artifact stabilization — End-to-end automation of fragment sealing, snapshot refresh, and coverage maintenance.
Verification Criteria
- Node operates within defined memory bounds under sustained synchronization
- Operator can assess node health from CLI output without external tools
- Artifact stabilization maintains serving readiness across restart cycles
- Deployment requires no configuration beyond network selection and peer address
Positioning the deterministic pipeline and supporting infrastructure as a platform for blockchain state machine research.
- Deterministic replay validation — Expanded replay corpus covering edge cases, epoch boundaries, and extended rollback sequences.
- Alternative storage engines — Evaluation of storage backends beyond LMDB using the five-operation transactional interface.
- Experimental node configurations — Multi-pipeline instantiation for differential analysis on identical block streams.
- Advanced observability tooling — UTxO set analytics, transaction pattern analysis, and long-duration operational trend reporting.
Verification Criteria
- Replay corpus covers all Cardano eras and known edge cases
- At least one alternative storage backend passes shadow verification
- Multi-pipeline configuration produces comparable results to single-pipeline
- Observability extensions operate without measurable synchronization impact
Extending TSUNAGI's contributions beyond a single node to the broader blockchain infrastructure landscape.
- Long-term independent Cardano implementation — Sustained mainnet operation with continuous shadow verification and periodic cross-node digest comparison.
- Research collaboration — Exchange of replay corpora, verification methodologies, and operational experience.
- Cross-chain UTxO experimentation — Abstract UTxO types as a common execution substrate for multiple blockchain families.
- Infrastructure resilience through client diversity — Production-quality alternative for network participants.
Verification Criteria
- Sustained mainnet operation with zero state divergence
- Published verification methodology available for community use
- At least one cross-chain pipeline processing non-Cardano block data
- Documented protocol specification feedback from independent implementation
Guiding Principles
- Forward-only progress. Each phase builds on verified foundations. No phase compromises the guarantees established by its predecessors.
- Evidence before claims. Capabilities are validated through measured results before being documented as complete.
- Determinism is non-negotiable. No phase introduces non-deterministic behavior into the ledger pipeline.
- Operator clarity over developer convenience. Design decisions favor operational transparency over implementation abstraction.
- Minimal dependencies. New capabilities are implemented within the existing dependency set unless a compelling case exists.
Let It Run. Let It Resolve.
Let It Run. Let It Resolve.
tsunagi.tech · Independent Cardano infrastructure research · 2026