再帰的不変条件でUTXOの複数段階処理を記述

Stateless UTXO-style execution validates transactions from local and referenced data, supporting parallel validation and predictable serialized-size/weight accounting, but multi-step workflows must explicitly thread state through outputs. However, a prepared next-step transaction may become stale when another valid spend confirms first, shifting consistency maintenance, off-chain tracking, and transaction rebuilding to the protocol boundary and potentially increasing coordination cost and latency. Explicitly addressing this gap, recursive invariants (RIs) provide a transaction-level logic and toolchain in which workflow rules are predicates over a transaction's inputs and indexed successor positions referenced by the RI. Realizing such a successor causes the accepted transaction to re-check its predecessor's RI one step later, carrying the workflow rule forward without application-level shared mutable state or executable logic attached to outputs; repeated one-step checks thereby preserve validation-time locality and make validation work explicitly accountable. Many successor clauses are not decidable when the current transaction is validated, so our small statically typed DSL uses Kleene-style three-valued semantics over true, false, and unknown to defer future-dependent obligations until they become checkable. Alongside the DSL, we formalize UTXO validation and ledger extension in our model, identify the validation-time-evaluable one-step fragment, prove the deduction system sound for the three-valued semantics, and give corresponding transaction-validation and ledger-extension algorithms. Notably, a prototype RI interpreter and benchmarking toolchain evaluate six practice-motivated workflows; the reported traces show approximately linear cumulative validation-cost proxy growth while illustrating staged constraints without committing each step to a preconstructed successor transaction.

To appear in OOPSLA 2026