IO & Ensurable Systems: Cardano Maintenance Initiative

{
  "schema_version": "1.2.0",
  "id": "onchain-io-ensurable-cardano-maintenance",
  "ingestion": {
    "ingested_at": "2026-05-11T15:20:00Z",
    "ingested_by": "claude-opus-4.7",
    "source_documents": [
      "https://www.cardanocube.com/governance/gov_actions/gov_action1w0shrfxqwv95kk0v4cn34wylz25a2cmqkq5jpc0e2yrahhqava3qx4njfhm",
      "https://ipnso-com.ipns.dweb.link/?cid=QmYKV7vbX9pwNxst2qWpmtM2k6LRJB4NKKNFJSQyh7zojz",
      "https://momentum.cardano.iog.io/",
      "https://ensurable.systems"
    ],
    "extraction_notes": "On-chain governance action currently in voting (submitted Apr 22 2026, expires May 24 2026). Tx Ref shares root with the DevEx Initiative (73e171a4...6762#3 vs #0) — same submitting batch. LIVE VOTING SIGNAL: failing — Yes 347.67M ADA vs No 5.44B ADA. Slightly better Yes than DevEx Initiative but still far below threshold. 1 CC yes / 6 not voted. ₳62,134,630 is the LARGEST single ask in the corpus so far — ~17.8% of the entire 350M NCL on its own. Same USD peg ($0.24) and admin model as other IO 2026 proposals. Ensurable Systems verified as a real specialist company led by Kevin Hammond and Dr. Philipp Kant (both ex-IOG, well-known Cardano protocol engineers); already working on Tachys consensus with Well-Typed and PNSol."
  },
  "source": {
    "channels": [
      "onchain"
    ],
    "hydra_id": null,
    "onchain_tx_hash": "73e171a4c0730b4b59ecae271ab89f12a9d56360b02920e1f95107dbdc1d6762",
    "onchain_action_id": "gov_action1w0shrfxqwv95kk0v4cn34wylz25a2cmqkq5jpc0e2yrahhqava3qx4njfhm"
  },
  "identity": {
    "title": "IO & Ensurable Systems: Cardano Maintenance Initiative",
    "proposer_name": "Input Output (IO) & Ensurable Systems",
    "proposer_id": "io-research",
    "proposer_type": "coalition",
    "proposer_url": "https://www.iog.io",
    "doxxed": true,
    "primary_contact": "Kevin Hammond (Ensurable Systems); IO leadership not specifically named in proposal",
    "team_size_disclosed": null,
    "team_size_disclosed_note": "'Cross-functional team spanning all nine component areas' plus AWS infrastructure. Specific FTE count not disclosed. ₳45.98M of ₳62.1M budget (74%) is development. Ensurable Systems is a specialist consultancy run by Kevin Hammond and Dr. Philipp Kant (both ex-IOG protocol engineers)."
  },
  "classification": {
    "official_pillar_primary": [
      "Infrastructure & Research Excellence",
      "Ecosystem Sustainability & Resilience"
    ],
    "official_pillar_secondary": [
      "Adoption & Utility",
      "Governance"
    ],
    "official_pillar_confidence": "stated",
    "working_category_suggestion": "Core Infrastructure",
    "working_category_confidence": "high",
    "tags": [
      "maintenance",
      "core-protocol",
      "node",
      "plutus-core",
      "db-sync",
      "ci-cd",
      "disaster-recovery",
      "cip-135",
      "cardano-blueprint",
      "security",
      "monitoring",
      "qa",
      "release-management",
      "ensurable-systems",
      "incident-response"
    ]
  },
  "ask": {
    "ada_amount": 62134630,
    "ada_amount_note": "LARGEST single ask in the corpus so far. Budget breakdown: Development ₳45,979,626 (74%), Infrastructure ₳6,213,463 (10%), Engagement ₳3,728,078 (6%), Operations ₳2,485,385 (4%), Security & Audits ₳1,242,693 (2%), Others ₳1,242,693 (2%), Governance ₳621,346 (1%), Legal ₳621,346 (1%). Intersect 3% admin fee covered within budget.",
    "usd_amount": 14912311,
    "usd_peg_price": 0.24,
    "pegged": true,
    "currency_basis": "usd_pegged",
    "usd_peg_vs_market": "conservative",
    "implied_buffer_pct": -8,
    "duration_months": 9,
    "milestone_count": 9,
    "milestone_payments_disclosed": false,
    "milestone_schedule_disclosed": "names_only",
    "raw_ask_text": "Total Treasury Ask: ₳62,134,630. USD figures ($14,912,311) are provided for reference only, based on an ADA/USD rate of 0.24. All amounts in this proposal are denominated in ada (₳). All funds not disbursed by the end of the delivery period will be returned to the Cardano Treasury. All deliverables are continuous and run for the full duration (Q3 2026 to Q1 2027). There is no sequential phasing or quarterly gating: maintenance activities are ongoing and parallel."
  },
  "treasury_return": {
    "has_return_clause": true,
    "mechanisms": [
      {
        "type": "unspent_funds",
        "trigger": "Funds undisbursed at end of delivery period OR partial delivery / scope reduction",
        "deadline": "End of delivery period (Q1 2027)",
        "excluded_costs": [],
        "estimated_return_pct": null,
        "estimated_return_pct_note": "Proportional to undelivered scope"
      }
    ],
    "treasury_favourability": "moderate",
    "treasury_favourability_confidence": "high",
    "treasury_favourability_note": "Standard IO 2026 return language — proportional return on partial delivery is stronger than typical 'unspent contingency only' clauses. ADA-denominated (USD reference only) so no price-peg surplus mechanism. No revenue share. Maintenance is continuous so 'partial delivery' is operationally fuzzy — the proportional refund mechanism is harder to invoke than for milestone-based work.",
    "treasury_favourability_set_by": "ai",
    "raw_return_text": "All funds not disbursed by the end of the delivery period will be returned to the Cardano Treasury. A final reconciliation will be published as part of the oversight reporting cycle. In the event of partial delivery or scope reduction, unspent funds associated with cancelled or reduced deliverables will be returned proportionally."
  },
  "lifecycle": {
    "pipeline_state": "onchain_live",
    "hydra_submitted_at": null,
    "hydra_close_at": null,
    "hydra_support_pct": null,
    "onchain_submitted_at": "2026-04-22T00:00:00Z",
    "onchain_vote_close_at": "2026-05-24T00:00:00Z",
    "onchain_result": null,
    "status_last_checked_at": "2026-05-11T15:20:00Z"
  },
  "links": {
    "hydra_url": null,
    "adastat_url": "https://adastat.net/governances/73e171a4c0730b4b59ecae271ab89f12a9d56360b02920e1f95107dbdc1d676203",
    "ipfs_cid": "QmYKV7vbX9pwNxst2qWpmtM2k6LRJB4NKKNFJSQyh7zojz",
    "ipfs_gateway_url": "https://ipnso-com.ipns.dweb.link/?cid=QmYKV7vbX9pwNxst2qWpmtM2k6LRJB4NKKNFJSQyh7zojz",
    "github_url": null,
    "website_url": "https://www.iog.io",
    "forum_thread_url": null,
    "other": [
      {
        "label": "IO Momentum portfolio overview",
        "url": "https://momentum.cardano.iog.io/"
      },
      {
        "label": "Ensurable Systems",
        "url": "https://ensurable.systems"
      },
      {
        "label": "IO treasury proposals 5-minute overview",
        "url": "https://www.iog.io/news/io-treasury-proposals-the-5-minute-overview"
      }
    ]
  },
  "content": {
    "abstract": "Continuous core maintenance and operational support from Q3 2026 through Q1 2027. Covers nine functional areas: bug fixing & security reviews, CI/CD & infrastructure operations (incl. disaster recovery per CIP-135), mainnet & mempool monitoring, the Cardano Blueprint documentation project, open-source community support, performance analysis & optimisation, QA & release sign-off, full node release management with L1/L2/L3 incident response, and component maintenance across Plutus Core, DB-Sync, guardrails scripts, APIs, and CLI tools. IO collaborates with Ensurable Systems to distribute infrastructure stewardship.",
    "problem_statement": "Operating a production blockchain at Cardano's scale requires continuous investment in maintenance, testing, security, and infrastructure that goes far beyond feature development. Every other initiative within the ecosystem depends on this foundation: new features can only be safely delivered on a well-maintained platform. Maintenance is continuous and non-discretionary — without uninterrupted support, bugs escalate, releases go untested, and infrastructure resilience degrades. This proposal covers the period immediately following the current budget cycle.",
    "proposed_solution": "Cross-functional team delivering nine continuous workstreams in parallel (no quarterly gating): (1) Node Bugfixing & Architecture, (2) DevOps & Infrastructure including CIP-135 disaster recovery, (3) Mainnet & global mempool Monitoring, (4) Cardano Blueprint Documentation, (5) Open Source Support, (6) Performance analysis & optimisation incl. distributed cluster operations, (7) QA, E2E testing, conformance testing & release sign-off (with AI-supported analysis), (8) Release Management & L1/L2/L3 incident response, (9) Component Maintenance covering Plutus Core, DB-Sync, libsodium, guardrails scripts, CC identity scripts, APIs, CLI. Collaboration with Ensurable Systems distributes stewardship.",
    "deliverables": [
      "Continuous bug fixes and hot fixes for the Cardano node",
      "Architectural security reviews",
      "CI/CD system maintenance, OS/platform compatibility updates",
      "Disaster recovery playbook execution per CIP-135",
      "Bootstrap relay operations for Mainnet",
      "Mainnet monitoring data published for oversight and community",
      "Global mempool monitoring (congestion data, fee estimation)",
      "Cardano Blueprint: implementation-independent specifications for consensus, network, ledger, Plutus",
      "GitHub issue triage and external contribution review",
      "Systematic ledger performance analysis + system-level node optimisations (block production, diffusion, timeliness)",
      "Tracing/logging/metrics maintenance + distributed cluster benchmarking",
      "Unit, property, E2E, conformance test maintenance + release sign-off (with AI-supported analysis)",
      "Cardano Node release process management",
      "L1/L2/L3 incident management with on-call support",
      "Security Council collaboration for swift threat identification + regular security audits",
      "Plutus Core interpreter updates and language version maintenance",
      "DB-Sync consistency maintenance",
      "Cardano High Assurance tools maintenance",
      "DB Synthesizer maintenance",
      "libsodium and other third-party library maintenance",
      "Guardrails script and CC identity script maintenance",
      "Cardano API + CLI maintenance",
      "CDDL specification maintenance"
    ],
    "milestones": [
      {
        "name": "Node Bugfixing & Architecture (continuous)",
        "deliverable": "Hot fixes, security reviews, public delivery reporting",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "DevOps & Infrastructure (continuous)",
        "deliverable": "CI/CD, CIP-135 disaster recovery, bootstrap relays, testnets",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "Monitoring (continuous)",
        "deliverable": "Mainnet + global mempool monitoring",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "Documentation (continuous)",
        "deliverable": "Cardano Blueprint specifications",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "Open Source (continuous)",
        "deliverable": "GitHub triage, external contribution review",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "Performance (continuous)",
        "deliverable": "Ledger analysis, optimisations, tracing, cluster operations",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "QA (continuous)",
        "deliverable": "Unit/property/E2E/conformance testing, release sign-off",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "Release, Support & Security (continuous)",
        "deliverable": "Node releases, L1/L2/L3 incident response, Security Council collaboration",
        "ada_release": null,
        "deadline": null
      },
      {
        "name": "Components (continuous)",
        "deliverable": "Plutus Core, DB-Sync, libsodium, guardrails, APIs, CLI",
        "ada_release": null,
        "deadline": null
      }
    ],
    "team": [
      {
        "name": "Kevin Hammond",
        "role": "Ensurable Systems — protocol engineering specialist partner",
        "background": "Ex-IOG, ex-Heriot-Watt University professor and global head of department. Also working on Tachys consensus with Well-Typed/PNSol/Apex Fusion."
      },
      {
        "name": "Dr. Philipp Kant",
        "role": "Ensurable Systems",
        "background": "Ex-IOG protocol researcher. Also working on Tachys / Ouroboros family protocols."
      }
    ],
    "risks_disclosed": [
      "Technical (Medium likelihood, Medium impact): increased maintenance burden from features delivered by sibling proposals (Leios, Peras) consuming more capacity than budgeted",
      "External (Low likelihood, Medium impact): infrastructure costs increase beyond budget due to cloud provider pricing changes or testnet/monitoring scope expansion"
    ]
  },
  "metadata": {
    "open_source": "yes",
    "open_source_url": null,
    "has_prior_funding": true,
    "prior_funding_sources": [
      "IO/affiliated entities total Treasury allocation: ₳130,708,860 across multiple projects; ₳78,459,777 withdrawn to date",
      "Workstreams: Blockfrost (₳1.14M, 88%), Catalyst (₳3.10M, 60%), IOE (₳47.16M, 49%), IOR (₳26.84M, 100%), Governance (₳227K, 38%)"
    ],
    "has_prior_delivery": true,
    "prior_delivery_evidence": "IO is the core maintainer of the Cardano Haskell node since launch. Ensurable Systems team (Kevin Hammond, Philipp Kant) are ex-IOG with extensive protocol engineering history. Active separate work on Tachys consensus protocol (in collaboration with Well-Typed, PNSol, Apex Fusion).",
    "admin_model": "intersect",
    "administrator_name": "Intersect",
    "oversight_committee": [
      "Sundae Labs",
      "Cardano Foundation",
      "DQuadrant",
      "Xerberus",
      "NMKR"
    ],
    "administration_fee_pct": 3,
    "duplicate_of_existing_solution": {
      "value": "no",
      "confidence": "high",
      "set_by": "ai"
    },
    "duplicate_notes": "Cardano node maintenance is uniquely IO's role since launch. Amaru (Rust node implementation by TxPipe) is an alternative implementation, not a maintenance competitor — and Amaru depends on this proposal's Cardano Blueprint deliverable for implementation-independent specifications. Well-Typed historically contributed to Haskell tooling but not as a maintenance owner. The 'partial' overlap (Plutus Core, ledger, networking) is the same codebase maintained by the same team, not a duplicate effort."
  },
  "relationships": {
    "bundle_with": [
      "onchain-cardano-vision-2026",
      "onchain-io-developer-experience-initiative",
      "onchain-io-consensus-initiative",
      "onchain-io-cardano-upgrades",
      "onchain-io-midgard-l2",
      "onchain-io-cardano-high-assurance"
    ],
    "supersedes": [],
    "competes_with": [],
    "depends_on": [],
    "notes": "Part of the IO Momentum 2026 portfolio: $46.8M total slate. CV26 explicitly scoped OUT 'mainnet and global mempool monitoring, fee estimation, ledger performance analysis, node optimisation, benchmarking for releases and hard forks, distributed cluster operations' — those scope-outs belong in THIS proposal. Confirmed sibling proposals from search: IO Consensus Initiative (Leios/Peras, led by Carlos Lopez De Lara + Sebastian Nagel), IO + Midgard Labs L2 (led by Sharan Konerira), Cardano High Assurance (formal verification, led by Stefano Leone + Romain Soulat with Lantr/Harmonic Labs/SAIB/Midgard Labs/No.Witness Labs/TxPipe consortium). Combined IO 2026 portfolio is $46.8M / ~₳195M at $0.24 — significant NCL pressure."
  },
  "community_signals": {
    "comment_count": 0,
    "notable_objections": [],
    "notable_endorsements": [],
    "forum_thread_urls": [],
    "live_voting_state": {
      "as_of": "2026-05-11",
      "drep_yes_ada": 347670000,
      "drep_no_ada": 5440000000,
      "drep_explicit_no_ada": 34500000,
      "drep_no_confidence_ada": 201000000,
      "drep_not_voted_ada": 5210000000,
      "drep_abstain_ada": 71400000,
      "drep_auto_abstain_ada": 8900000000,
      "drep_total_active_stake_ada": 14940000000,
      "cc_yes": 1,
      "cc_no": 0,
      "cc_not_voted": 6,
      "interpretation": "FAILING. Total No ~15.6x Yes. Notably, Explicit No is only 34.5M (vs 428M on the DevEx Initiative) — most of the No is 'Not Voted' (5.21B). DReps may be holding off / abstaining rather than explicitly opposing. The much larger ask (₳62M vs ₳3.6M) but lower Explicit No suggests DReps see maintenance as necessary but are uncomfortable with the size or with IO as sole steward. Yes vote 2x the DevEx Initiative's Yes, suggesting somewhat more buy-in."
    }
  },
  "ecosystem_demand": {
    "evidence_level": "strong",
    "evidence_level_confidence": "high",
    "evidence_level_set_by": "ai",
    "active_users_known": true,
    "active_users_examples": [
      {
        "name": "All Cardano stake pool operators",
        "kind": "user",
        "url": null
      },
      {
        "name": "All Cardano DApp developers",
        "kind": "user",
        "url": null
      },
      {
        "name": "Intersect Security Council (named collaborator)",
        "kind": "integrator",
        "url": null
      },
      {
        "name": "Amaru node implementation (depends on Cardano Blueprint)",
        "kind": "integrator",
        "url": null
      }
    ],
    "developer_demand_signals": [
      "Cardano mainnet has been live since 2017 — continuous maintenance is the load-bearing requirement, not an optional improvement",
      "CIP-135 disaster recovery is an existing standard the proposal implements",
      "Upcoming hard forks (Leios, Peras, Van Rossem) all require maintenance capacity to ship",
      "Sibling proposals (CV26, Consensus Initiative, L2) explicitly depend on this proposal's foundation",
      "The Cardano Blueprint deliverable directly enables alternative node implementations (Amaru), supporting the 2030 KPI for client diversity"
    ],
    "adoption_risk_notes": "Demand is structural — every Cardano user, operator, and developer depends on this work. The question is not 'is this needed' but 'is IO the right organisation, and is ₳62M the right amount'. The 'failing live vote' is likely driven by NCL pressure (this proposal alone is ~18% of the 350M NCL) rather than doubt about the work itself."
  },
  "incumbents": {
    "has_existing_solution": "no",
    "has_existing_solution_confidence": "high",
    "has_existing_solution_set_by": "ai",
    "existing_solutions": [
      {
        "name": "Amaru (Rust node by TxPipe)",
        "url": null,
        "status": "in_progress",
        "overlap": "partial",
        "notes": "Alternative node implementation, not a maintenance competitor for the Haskell reference node. Amaru depends on the Cardano Blueprint deliverable IN this proposal for implementation-independent specifications. Separately funded via its own ₳10,142,000 governance action."
      },
      {
        "name": "Well-Typed LLP",
        "url": null,
        "status": "maintained",
        "overlap": "partial",
        "notes": "Historically contributed to Haskell tooling and protocol research. Currently working with Ensurable Systems on Tachys consensus. Could theoretically contribute to maintenance but not currently positioned as a maintenance owner."
      }
    ],
    "differentiation_claim": "IO has been the Cardano node's maintainer since launch. This proposal extends that responsibility with Ensurable Systems as a specialist partner, fulfilling the IO 2026 stated direction of distributing infrastructure stewardship across the Cardano ecosystem. No other organisation is currently positioned to take over node maintenance.",
    "differentiation_credibility": "high"
  },
  "risk_flags": {
    "aggressive_peg": false,
    "self_administered_no_oversight": false,
    "incumbent_already_delivering": false,
    "no_evidence_of_demand": false,
    "competes_with_in_batch": false,
    "concentration_risk": true,
    "failing_live_vote": true,
    "ncl_pressure": true
  },
  "risk_flags_note": "concentration_risk: largest ask in IO 2026 portfolio, ~18% of 350M NCL on its own. ncl_pressure: combined IO 2026 portfolio is ~$46.8M / ~₳195M (~56% of the full NCL window at $0.24 peg). failing_live_vote: explicit No is unusually LOW (34.5M ADA) compared to total No — most opposition is 'Not Voted', suggesting DReps may be deferring rather than rejecting outright. Worth tracking if the vote shifts in the final 2 weeks before May 24 expiry.",
  "_meta": {
    "title": "IO & Ensurable Systems: Cardano Maintenance Initiative",
    "proposer": "Input Output (IO) & Ensurable Systems"
  }
}