Make block asset issuance atomic and reorg-safe

2 files changed, 10 insertions, 0 deletions

diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md
index 826536ea2..95ae0bea7 100644
--- a/docs/MONZERO_ASSETS_V1_SPEC.md
+++ b/docs/MONZERO_ASSETS_V1_SPEC.md
@@ -167,6 +167,15 @@ trailing data, and invalid signatures fail without modifying existing state.
 This provides a recovery and migration model; it is not yet an LMDB table or a
 substitute for replaying authenticated transactions from the chain.
 
+The registry's inactive block adapter applies issuance payloads in transaction
+order against temporary state and commits only if every issuance succeeds.
+This makes same-block collection membership order explicit and prevents a
+partially valid block from leaving partial asset state. Detaching at the block
+height removes all of that block's issuances. A domain-separated hash of the
+canonical snapshot provides a deterministic integrity commitment for testing
+and future database migration checks; it is not currently committed in block
+headers.
+
 This encoding is a stable prototype vector for review, not an activation
 decision. A cryptographic review may replace the hash construction or fields;
 doing so must deliberately update the golden vector before any testnet fork.
diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md
index 267020435..d7cba0206 100644
--- a/docs/MONZERO_PHASE0_STABILIZATION.md
+++ b/docs/MONZERO_PHASE0_STABILIZATION.md
@@ -130,6 +130,7 @@ isolated disposable development network may be used after cryptographic review.
 - [x] Strict canonical issuance-descriptor decoder with byte-boundary truncation tests.
 - [x] Bounded authenticated issuance-payload envelope with strict signature shape rules.
 - [x] Deterministic authenticated registry snapshots with atomic restore failure behavior.
+- [x] Atomic ordered block-issuance adapter, detach behavior, and deterministic state commitments.
 - [x] External cryptographic-review brief and mandatory threat cases.
 - [ ] Reviewed confidential per-asset commitment and range-proof construction.
 - [ ] Versioned asset transaction serialization with strict parser limits.