deployments.json: Version and Checksum Tracking

[SheyeJDev]

Problem: contracts/deployments.json exists but its current format is unknown. For production deployments, the file should record: the deployed contract ID, the WASM hash, the network, the deployment ledger, the deployer address, and a git commit SHA. Without this, it is impossible to verify that the deployed contract matches the source code.

Scope: Define a schema for deployments.json and update the deployment script to populate it.

Implementation guidance:
Define the JSON schema:
{ "testnet": { "contractId": "C...", "wasmHash": "hex...", "deployedLedger": 123456, "deployerAddress": "G...", "gitSha": "abc123", "deployedAt": "2025-01-01T00:00:00Z" }, "mainnet": { ... }}

Update dx_tooling/src/deployer.rs to write this JSON after a successful deployment.
Add a validate-deployment script that reads deployments.json and calls stellar contract info to verify the on-chain WASM hash matches.

Acceptance criteria: deployments.json contains all required fields after a deployment; the validate script confirms the on-chain contract matches the JSON.

Validation: Manual deploy to testnet and confirm deployments.json is populated.

Files to modify: contracts/deployments.json, contracts/dx_tooling/src/deployer.rs

Files to create: contracts/scripts/validate-deployment.mjs

[HademiData]

@HademiData has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hi Maintainer,

As a fullstack blockchain engineer with experience in Rust-based tooling and deployment pipelines, I’ve gone through this issue and understand the need for verifiable and production-grade deployment tracking for Stellar contracts. The current deployments.json lacks critical metadata, making it impossible to confidently verify that an on-chain contract matches the exact source and build artifacts.

For this contribution, I will define a strict JSON schema for deployments.json that includes contract ID, WASM hash, deployment ledger, deployer address, git commit SHA, and timestamp for both testnet and mainnet environments. I will update dx_tooling/src/deployer.rs to automatically populate and persist this file after every successful deployment. Additionally, I will implement a validate-deployment.mjs script that cross-checks the recorded WASM hash against on-chain contract metadata using Stellar contract inspection tools, ensuring full integrity between deployed and source versions.

I am a good fit for this task because I have hands-on experience with Rust tooling, backend automation, and DevOps-style deployment workflows, including working with reproducible builds and infrastructure verification systems. I understand how critical traceability and auditability are in blockchain deployments.

Through this contribution, I aim to deepen my experience in blockchain deployment pipelines, on-chain verification mechanisms, and build reproducibility guarantees, while helping strengthen the reliability and transparency of SplitNaira’s deployment process.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @HademiData to this issue.

[mijinummi]

@mijinummi has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hello maintainers, I am a full stack developer experience in building scalable systems, very interested in web and mobile applications. I have confidence that i can deliver this perfectly.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @mijinummi to this issue.

[drips-wave]

Congratulations, @mijinummi! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 30, 2026.

🧑‍💻 @mijinummi: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue has been completed by @mijinummi as part of the Stellar Wave Program's 6th Wave 🥳

😎 @mijinummi: You earned 200 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.