Cardano Updates

The "Always: Commands finish with zero exit code" property has been
flagging tx-generator/parallel_driver_refill.sh at ~0.12% in recent
Antithesis runs (6/4908 on the 2026-05-11 Cardano Foundation Test
run). Every failing example shows the SDK's antithesis_random Rust
binary writing
  Error: Os { code: 32, kind: BrokenPipe, message: "Broken pipe" }
to the script's stderr immediately before the script exits non-zero —
the parent bash interpreter receives SIGPIPE and dies with 141.

Install sdk_install_signal_trap (from the now-shared composer-sdk
helper) at the top of every tx-generator composer script. The trap
converts in-bash SIGPIPE/SIGTERM/SIGINT into a Sometimes-optional
observation + exit 0, mirroring the defense asteria-game has carried
since df7ef80.

Extract emit + signal-handling helpers into
components/composer-sdk/helper_sdk_common.sh, wired into both
component subflakes as a path: input. asteria-game/helper_sdk.sh and
tx-generator/helper_sdk_lib.sh become thin shims that source the
shared file alongside any component-specific helpers
(control_socket_request for tx-generator).

No behavior change for asteria-game; tx-generator gains the
sdk_install_signal_trap / sdk_run_signal_safe[_fn] /
sdk_sometimes_optional primitives previously available only on the
asteria side. Callers of those primitives in tx-generator are added in
the follow-up commit.

Replace the deprecated getTxBody/getTxId chain in
Cardano.Rpc.Server.Internal.UtxoRpc.Submit with a direct ledger projection:
pattern-match the API Tx, then compute the TxId via Cardano.Ledger.Core.txIdTx
(which is bodyTxL composed with txIdTxBody) and lift back through
fromShelleyTxId.

Deprecates the old-API transaction body surface (the type, its
constructor, and direct producers/consumers) so users are pointed at
'Cardano.Api.Experimental'. Internal modules that still use these
symbols are annotated with -Wno-deprecations to keep -Werror green;
they will be migrated in a follow-up along with the setter family.

Deprecations:
- TxBody (data type), ShelleyTxBody (constructor)
- TxBodyContent (type/constructor)
- createTransactionBody, defaultTxBodyContent
- getTxBody, getTxBodyContent
- BalancedTxBody

The existing pattern-synonym TxBody deprecation message is updated for
consistency with the new messages.

This will use the correct package database

This reverts commit 196f5bc92ce7697ffaf30d7ce7fd2a9720d1a1bb.

Migrate the union level once the merging tree is completed

- /governance/committee: current committee snapshot with members, quorum,
  and source NewCommittee governance action (null for the Conway-genesis
  committee).
- /governance/committee/votes: paged history of all CC member votes.
- /governance/committee/{cc_id}/votes: paged votes filtered by CIP-129 hot
  or cold credential; cold queries aggregate across hot-key rotations.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

- /governance/committee: current committee snapshot with members, quorum,
  and source NewCommittee governance action (null for the Conway-genesis
  committee).
- /governance/committee/votes: paged history of all CC member votes.
- /governance/committee/{cc_id}/votes: paged votes filtered by CIP-129 hot
  or cold credential; cold queries aggregate across hot-key rotations.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

cardano-recon-framework: Add cardano-recon-grep and ContinuousFormula (v1.2.0)

Adds three endpoints for surfacing constitutional committee state and votes:

- GET /governance/committee — current committee snapshot with members,
  quorum, members count, and source NewCommittee gov action (genesis
  committee returns proposal fields as null and `is_genesis: true`).
- GET /governance/committee/votes — paged list of all CC votes ever cast.
- GET /governance/committee/:cc_id/votes — paged list of votes filtered
  by CIP-129 hot (cc_hot1...) or cold (cc_cold1...) credential.
  Cold queries aggregate across every hot key the cold has authorized.

Per-vote shape includes the voting anchor (metadata_url / metadata_hash),
governance_type, block height/time, and the voter's CIP-129 hot id.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

There is a chance that incompatible ordering functions may be
passed to the `verifyCert`. And we need to catch this problem
sooner and prevent from building incorrect cert with mismatched
amount of votes, so we add a check that the size of the deduplicated
voters and certs is the same.

See https://github.com/tweag/cardano-peras/issues/240 for the
deeper discussion.

feat: SNARK-friendly protocol message

The other properties of union migration already get tested through the
existing tests. Since a union table's remaining debt can only reach zero
once the union level is migrated, all tests that check that supplying
union credits sufficiently reduces the debt also check that the union
gets migrated.