DCG builder reference

Generated from dcg-unified-v1.md (spec: to be published), revision 7, dated 2026-09-25.

Specification SHA-256: 1358c31e2f947cc99eff3e63b5381d370c7853fcd50ea9516ea4f3455f788185

This page is generated from the unpublished protocol specification and should not be edited by hand.

The mainnet alpha program addresses are in the quickstart. This reference describes wire and account mechanics, not model quality.

Instruction tags

The unified-format allocation is parsed from specification §10. CloseResponseV5 is parsed from §7.4 because revision 6 added it there.

Reused response and ruling tags

The unified specification reuses these existing tags for DCR1 v5. Tag 119 never applies to a v5 challenge.

Existing PT2S setup tags

The unified specification starts from a sealed PT2S. These unchanged tags remain outside the v5 lifecycle.

Account index

Account and wire layouts

The text blocks below are extracted from the normative specification.

DCF1 configuration account

  0  magic "DCF1"
  4  version:u16 = 1
  6  reserved:u16 = 0
  8  admin[32]                    rotates every role; zero = the config is frozen
 40  registry_authority[32]       signs tags 156-158; zero = no new registries
 72  template_seal_authority[32]  signs tag 176; zero = no new approvals or revocations
104  created_slot:u64
112  rotations:u32                successful ConfigSetAuthority count
116  reserved[12] = 0
128  end

DTA1 template approval

  0  magic "DTA1"
  4  version:u16 = 1
  6  state:u8           1 approved, 2 revoked
  7  zero:u8
  8  PT2S[32]
 40  PT2S_sha256[32]    SHA-256 of the whole sealed PT2S account data (as DEA2 104)
 72  sealer[32]         the template-seal authority that last wrote it
104  slot:u64
112  end

DRP2 registry header

  0  magic "DRP2"
  4  version:u16 = 2
  6  flags:u16            bit 0 frozen; other bits zero
  8  epoch:u32            = EPOCH (4 for the re-key image)
 12  registry_id:u32
 16  row_count:u32        1..=64
 20  rows_written:u32
 24  authority[32]        the compiled registry authority
 56  machine_name[64]     an accepted machine name, NUL-padded: "basanos/qwen35-4b-a16/1" (Q12)
                          or, revision 6.1, "basanos/qwen35-4b-a16/2" (V7)
120  census_digest[32]    nonzero
152  table_root[32]       zero until frozen
184  zero[8]
192  rows[row_count][64]  strictly ascending by form_id

DRP2 registry row

  0  form_id:u16          nonzero; 0xF001 = RS1 summary pseudo-form
  2  respond_path:u8      0 none, 1 generic respond
  3  witness_kind:u8      0 routed, 1 DWW1 rows, 2 position-table row, 3 model tensors
  4  max_reads:u16
  6  max_writes:u16
  8  max_read_bytes:u32
 12  max_write_bytes:u32
 16  max_payload_bytes:u32
 20  execute_cu:u32       0 = unmeasured
 24  respond_cu:u32       0 = unmeasured
 28  measured_position:u32   provenance only
 32  measured_entry:u32      provenance only
 36  row_version:u8       = 2
 37  max_rs1_height:u8    0..=19
 38  reserved:u16 = 0
 40  max_range_slots:u32
 44  position_limit:u32   nonzero; instances need p < position_limit
 48  measured_positions:u32  provenance: P of the censused document
 52  reserved[12] = 0

DEA2 class-admission record

  0  magic "DEA2"
  4  version:u16 = 2
  6  flags:u16            bit 0 complete; other bits zero
  8  registry[32]         DRP2 address
 40  table_root[32]       the frozen DRP2 root at begin
 72  PT2S[32]
104  PT2S_sha256[32]      SHA-256 of the whole sealed PT2S account data
136  position_count:u32   P
140  base_classes:u32     B
144  generated_classes:u32  L · G
148  admitted:u32
152  n_max:u32
156  rs1_height:u8        H
157  zero[35]
192  bitmap, ⌈(B + L·G)/8⌉ bytes; bit i = class i admitted

DPD2 descriptor preimage

"basanos/dcg-unified-descriptor/4"        32 ASCII bytes (rev 7; /3 is the rev-4..6 program identity)
unified_version:u16 = 2
storage_mode:u8 = 1                       ROOT_ONLY (Q6)
commitment_version:u8 = 3                 §8
position_count:u32                        P
segment_count:u16                         1..=128 (rev 2)
family_count:u16                          F, 1..=24 (rev 2; was 1..=64)
rs1_height:u8                             H = ⌈log2 P⌉
pt2p_compiler_version:u8                  pinned profile of PWR1 (pt2p_compiler.py)
reserved:u16 = 0
total_entries:u64                         Σ_{p<P} entry_count(p)
dispute_terms[96]                         DDT2 (rev 7, §6.8): every dispute, settlement and retention term of the run
run_binding[160]                          DRB1 (rev 4, §6.10): executor, request binding, seed, outputs
clause12_v4[43]                           the PT2S's (P, segment count, PWR1 digest)
definition_sha256[32]                     the PT2S's
base_digest[3][32]                        routes, geometry, payloads (= PWR1 bytes 40..136)
model_root[32]                            nonzero
position_table_root[32]                   nonzero
prompt_commitment[32]                     nonzero
registry_epoch:u32
registry[32]                              DRP2 address
registry_table_root[32]
dfs2_sha256[32]                           SHA-256 of the DFS2 body

DCM2 v6 document header

   0  magic "DCM2"
   4  version:u16 = 6
   6  flags:u16             1 armed, 2 finalized, 4 refuted, 8 closed, 16 ROOT_ONLY, 32 sealed;
                            16|32 always set; other bits zero
   8  descriptor[32]        DPD2 digest
  40  authority[32]         executor = init signer
  72  position_count:u32    P
  76  segment_count:u16
  78  reserved:u16 = 0
  80  reserved:u32 = 0      (v1 entries_per_position)
  84  positions_complete:u32 roots landed so far (LandPositionRoots)
  88  entries_complete:u64  0 until FinalizeDocumentV5 sets it to total_entries (rev 2)
  96  document_root[32]     final v3 prefix root; zero until finalized
 128  open_challenges:u32
 132  challenger_wins:u32  every ruling for a challenger, by any path (§7.9); rev 1–3 named it
                            refuted_positions (it counts rulings, so one position may count twice)
 136  finalize_slot:u64
 144  dispute_deadline:u64  LSD1 at FinalizeDocumentV5
 152  prefix_root[32]       v3 prefix root after positions_complete positions (batch end)
 184  challenge_window_slots:u64   = DDT2 bytes 8..16 (LSD1 reads it here)
 192  total_entries:u64
 200  PT2S[32]
 232  PT2S_sha256[32]
 264  model_root[32]
 296  position_table_root[32]
 328  prompt_commitment[32]
 360  registry[32]          DRP2
 392  registry_table_root[32]
 424  DEA2[32]
 456  DFS2[32]              the DFS2 table account (rev 1: DFR1)
 488  family_table_digest[32]   zero until FinalizeDocumentV5; then SHA256(rs1-table | descriptor | F | roots)
 520  registry_epoch:u32
 524  family_count:u16
 526  rs1_height:u8
 527  commitment_version:u8 = 3
 528  peak_count:u8         0..=32
 529  executor_bond_state:u8   rev 3: 0 none (bond 0), 1 held, 2 paid on refutation, 3 returned at close
 530  reserved[6] = 0
 536  peaks[32] × 40        level:u8 | zero[3] | first:u32 | digest[32]; unused slots zero
1816  dispute_terms[96]     DDT2 (§6.8), written at init, never changed
1912  run_binding[160]      DRB1 (§6.10), written at init, never changed; seed at 2,016
2072  end

DFS2 family-slot account

  0  magic "DFS2"
  4  version:u16 = 1
  6  flags:u16 = 0
  8  descriptor[32]
 40  family_count:u16   F, 1..=24
 42  rs1_height:u8      H
 43  zero:u8
 44  body_len:u32
 48  DFS2 body (§6.2)

DDT2 run terms

  0  magic "DDT2"
  4  version:u16 = 1
  6  reserved:u16 = 0
  8  challenge_window_slots:u64     a challenge may open until finalize_slot + this
 16  response_window_slots:u64      every per-round deadline is phase-change slot + this
 24  challenger_bond_lamports:u64   escrowed by each challenger at open; any value, 0 allowed
 32  executor_bond_lamports:u64     escrowed by the executor at UnifiedInit; any value, 0 allowed
 40  executor_reward_bps:u16        built-in rule's share of the executor bond, 0..=10,000
 42  reserved:u16 = 0
 44  reserved:u32 = 0
 48  settlement_program[32]         zero = built-in rule; nonzero = BSS1 program
 80  custom_settle_window_slots:u64 opportunity window after a challenger ruling
 88  result_retention_slots:u64     result lifetime after CloseDocumentV5
 96  end

DCR2 v5 result record and DCRZ tombstone

  0  magic "DCR2"               discriminator while outputs are retained
  4  version:u16 = 5
  6  status:u8                  0 PENDING, 1 FINAL, 2 REFUTED, 3 SETTLED
  7  document_closed:u8         1 once CloseDocumentV5 ran, else 0
  8  descriptor[32]
 40  document_root[32]          zero until FinalizeDocumentV5
 72  request_id[32]             DRB1; opaque to DCG (Tier C: the request account address)
104  consumer_digest[32]        DRB1; opaque to DCG (Tier C: SHA-256 of TRQ1)
136  executor[32]               the DCM2 authority
168  finalize_slot:u64          zero until FinalizeDocumentV5
176  dispute_deadline:u64       finalize_slot + challenge_window_slots
184  status_slot:u64            slot of the last status change; 0 while PENDING
192  challenger_wins:u32        DCM2 132 when the status was last set
196  output_count:u32           DRB1
200  output_first_position:u32  DRB1
204  outputs_attested:u32       popcount of the bitmap
208  output_width:u8            DRB1, 1..=32
209  zero[7]
216  run_terms[96]              DDT2, copied from DCM2 at init; immutable
312  retention_slots:u64        DDT2.result_retention_slots; nonzero at init
320  retention_start_slot:u64   0 until CloseDocumentV5; never changes afterward
328  retention_deadline:u64     checked start + retention_slots; 0 until start
336  outputs[output_count][output_width]   zero until attested
336 + count·width  attested bitmap, ⌈count/8⌉ bytes, LSB-first, write-once

DRB1 run binding

  0  magic "DRB1"
  4  version:u16 = 1
  6  reserved:u16 = 0
  8  executor[32]               must be the UnifiedInit signer (= DCM2 40)
 40  request_id[32]             opaque to DCG; zero = no consumer request
 72  consumer_digest[32]        opaque to DCG; zero exactly when request_id is zero
104  seed[32]                   committed random seed; zero = none (greedy)
136  output_first_position:u32
140  output_count:u32           ≥ 1
144  output_base_entry:u32      base (old) index o of the entry whose write is the output
148  output_write:u8            write ordinal of that entry
149  output_width:u8            1..=32 bytes per output
150  reserved[10] = 0
160  end

SPP1 segment-to-position proof

segment_ordinal:u16 | path_count:u8 | 0:u8 | segment_table_root[32] | sibling[path_count][32]

DLE1 event header

  0  magic "DLE1"
  4  version:u16 = 2   (revision 7; version 1 is the revision-6 program)
  6  kind:u8
  7  zero:u8
  8  descriptor[32]
 40  slot:u64            the Clock slot of the instruction
 48  body                fixed length per kind; 32-byte fields are keys or digests
                         (an output value is zero-padded); integers LE; pads zero

TRQ1 Tier C request block

  0  magic "TRQ1"
  4  version:u16 = 1
  6  sampler_form:u8          0 = greedy argmax committed by the template
  7  zero:u8
  8  request[32]              the request account = DRB1 request_id
 40  requester[32]
 72  nonce:u64
 80  prompt_token_count:u32
 84  max_new_tokens:u32       = DRB1 output_count
 88  prompt_commitment[32]    = DCM2 328
120  prompt_tokens_sha256[32] SHA-256 of the prompt ids, u32 LE each
152  tokenizer_sha256[32]     nonzero
184  sampling_params[32]      zero for sampler 0
216  seed[32]                 = DRB1 seed; zero for sampler 0
248  machine_id[32]           the Tier C machine (template, model, geometry)
280  run_terms[96]            DDT2; must equal the document's block
376  end

DCR1 v5 revision regions

DPR2 v1 inherited layout

  0  magic "DPR2"
  4  version:u16 = 1
  6  reserved:u16 = 0
  8  descriptor[32]
 40  position_count:u32
 44  positions_written:u32
 48  position_root[P][32]

DRU1 inherited response layout

  0  magic "DRU1"
  4  version:u16 = 1
  6  phase:u16             1 staging, 2 sealed
  8  challenge[32]
 40  executor[32]
 72  declared_total:u32
 76  cursor:u32
 80  body_sha256[32]
112  deadline:u64
120  reserved[8] = 0
128  body[declared_total]

DPR2 and DRU1 are inherited layouts. The unified specification does not change their wire versions.

Derived addresses

All PDAs use the deployed DCG program unless the table says otherwise. Integer seeds are unsigned little-endian.

Revision 6 permits a predictable account to hold lamports before creation. The creating instruction tops it up to rent. Existing data or a non-system owner still fails.

Events

Event rules:

• Account state is authoritative. Events are an index.
• Ignore events from failed transactions.
• Attribute Program data: through the invoke stack to the expected program.
• Refuse unknown versions, kinds, lengths, and nonzero padding.
• CloseResponseV5 (tag 182) emits no event; its lamport delta is the receipt.
• A transaction log can be truncated. Rebuild state from accounts.

Refusal codes

Unified-format codes parsed from the specification

Reused closure, DCR1, and ESL1 codes