Validate asset extensions against native carriers

2 files changed, 8 insertions, 0 deletions

diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md
index 66bb37606..73bd27790 100644
--- a/docs/MONZERO_ASSETS_V1_SPEC.md
+++ b/docs/MONZERO_ASSETS_V1_SPEC.md
@@ -155,6 +155,13 @@ registered as a `tx_extra` variant and therefore does not change what active
 mainnet nodes accept; a reviewed hard-fork integration must define the exact
 non-circular carrier-prefix hashing procedure first.
 
+The inactive block adapter additionally receives independently computed native
+prefix commitments and validates each extension against its corresponding
+carrier before applying any issuance. Count, network, or commitment mismatch
+rejects the complete batch without changing registry state. This separates the
+future native transaction parser from asset operation validation and gives
+tests an explicit boundary for carrier-binding failures.
+
 ### 4.2 Inactive registry and reorganisation model
 
 The prototype includes an in-memory reference registry, disconnected from the
diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md
index aa2d73c39..13ce9ef20 100644
--- a/docs/MONZERO_PHASE0_STABILIZATION.md
+++ b/docs/MONZERO_PHASE0_STABILIZATION.md
@@ -132,6 +132,7 @@ isolated disposable development network may be used after cryptographic review.
 - [x] Deterministic authenticated registry snapshots with atomic restore failure behavior.
 - [x] Atomic ordered block-issuance adapter, detach behavior, and deterministic state commitments.
 - [x] Detached versioned transaction extension bound to a native prefix commitment.
+- [x] Atomic block-extension validation against independently supplied native carrier commitments.
 - [x] External cryptographic-review brief and mandatory threat cases.
 - [ ] Reviewed confidential per-asset commitment and range-proof construction.
 - [ ] Versioned asset transaction serialization with strict parser limits.