Every operation signed in full: getting NeuroChain ready for launch

The signature covers the whole operation

The signature of a privileged operation used to name only its author, its target and its amount. The recipient of an NFT, the scope of a session key, a governance vote or a vault payment travelled next to it, unsigned. Now, as in Cosmos (the SignDoc) and Ethereum (EIP-712), every field is signed. Neither a block proposer nor a node relaying the transaction can change anything: a changed field breaks the signature, and consensus refuses the operation.

The wallet signs what it shows

The node prepares asset and exchange operations itself, with exact amounts, and sends back a plain summary. The wallet shows it before signing; nothing is signed blind.

A validator key cannot spend

The consensus key only signs blocks. Every validator, the genesis ones included, is operated by an owner wallet named in the network configuration — the way an operator account works in Cosmos and withdrawal credentials work in Ethereum. A paid address without an owner accepts no key at all.

A purchased name is an NFT and an alias

Everything sent to neuro:name.human — NRO, assets, IBC transfers, contract payouts — arrives at the owner's main address, and the history shows which name it was sent to. The name moves as an NFT, and payments follow it.

Names and tickers are guarded

A registry of reserved names covers every paid address and the names of assets: the protocol's own names plus a list that only a vote can change. A name that looks like a key-derived address cannot be bought. A ticker like NRO can be neither issued nor hidden in an asset's name.

A vote decides which names are on sale

Name prices by length and the shortest name on sale are governance parameters. At launch names of five or more characters are on sale; shorter ones open by a vote. On the way we fixed a defect: a parameter change passed by a vote from the cabinet was not being applied.