diff --git a/AGENTS.md b/AGENTS.md
index 07f0babe7..207af94d8 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -128,7 +128,7 @@ User-facing error messages (shown in `MessageBanner` via `Display`) must follow
 2. **Structure**: *What happened* + *what to do*. Every message must include a concrete action the user can take themselves: retry, wait, try a different approach. Never redirect to "contact support" — users must be able to self-resolve.
 3. **Tone**: Calm, direct, brief. Not apologetic ("Sorry!"), not alarming ("Something went wrong!"), not vague ("An error occurred").
 4. **Technical details**: Never in the message itself — no raw error strings, stack traces, SDK internals, or error codes. Attach via `BannerHandle::with_details(e)` — the `Debug` repr goes to the collapsible details panel and logs. Never refer users to "details" or "details panel" — these are not visible in basic mode. Exception: Base58 identifiers (see rule 6) are not technical details — they are user-meaningful handles.
-5. **Reference implementation**: `sdk_error_user_message()` in `src/backend_task/error.rs` demonstrates the pattern for SDK errors. New `TaskError` variants should follow the same style.
+5. **Reference implementation**: `impl From<SdkError> for TaskError` in `src/backend_task/error.rs` demonstrates the pattern for SDK errors. New `TaskError` variants should follow the same style.
 6. **Base58 IDs are allowed in messages**: Contract IDs, identity IDs, document IDs, and similar Base58-encoded identifiers may appear in user-facing messages when they help the user identify which object is involved (e.g., *"This key conflicts with an existing key bound to contract `Abc123…`."*). They are not jargon — they are opaque-but-copyable handles the user can look up.
 7. **Use dedicated `TaskError` variants**: Every error should get a dedicated `TaskError` variant with a `#[source]` field that preserves the error chain, enables structural matching, and keeps `Display` / `Debug` separation explicit. For `#[source]` fields in SDK-originated error variants, use `Box<SdkError>` — convert upstream types (e.g. `ProtocolError`) via `SdkError::Protocol(e)`. Use the concrete domain type directly for non-SDK errors (e.g. `rusqlite::Error`). Omit `#[source]` entirely when the upstream error carries no useful diagnostic information (e.g. a channel `SendError`). **Never store user-facing strings in error variants** — error variants must not contain `String` fields that hold messages for the user. The `#[error("...")]` attribute on the variant provides the user-facing message; `String` fields (regardless of name) break this separation. Instead, create a dedicated variant with typed `#[source]` fields, or a fieldless variant if no upstream error exists. When encountering existing variants that store stringified errors, replace them with properly typed variants as part of the change.
 
diff --git a/Cargo.lock b/Cargo.lock
index 00d31d4ed..ba8eb6fd7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -146,7 +146,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
 dependencies = [
  "crypto-common 0.1.7",
- "generic-array 0.14.7",
+ "generic-array",
 ]
 
 [[package]]
@@ -179,6 +179,7 @@ dependencies = [
  "cipher 0.5.2",
  "cpubits",
  "cpufeatures 0.3.1",
+ "zeroize",
 ]
 
 [[package]]
@@ -233,6 +234,18 @@ version = "0.2.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
 
+[[package]]
+name = "ambassador"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd3d4da7fddbc6567cbd7b5c30364f91313701b1857ab5b925eb3acf06162eed"
+dependencies = [
+ "itertools 0.10.5",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "android-activity"
 version = "0.6.1"
@@ -309,7 +322,7 @@ version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -320,7 +333,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
  "anstyle",
  "once_cell_polyfill",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -329,6 +342,17 @@ version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
 
+[[package]]
+name = "app-connect-contract"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
+dependencies = [
+ "platform-value",
+ "platform-version",
+ "serde_json",
+ "thiserror 2.0.20",
+]
+
 [[package]]
 name = "apple-native-keyring-store"
 version = "1.0.0"
@@ -770,11 +794,21 @@ checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
 
 [[package]]
 name = "base58ck"
-version = "0.1.101"
+version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "365c0acd5b2e8dd0111a46c4faea83fb3cfb6e39a49a7c73a06e090db7b2eff0"
+checksum = "df540278d807651653f9b6f21e18903d790d7769eadfbc0dc4df0a141260318f"
 dependencies = [
- "bitcoin_hashes",
+ "bitcoin-internals 0.6.0",
+ "bitcoin_hashes 1.2.0 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "base58ck"
+version = "0.5.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "bitcoin_hashes 1.2.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
 ]
 
 [[package]]
@@ -795,15 +829,6 @@ version = "0.23.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
 
-[[package]]
-name = "base64-compat"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a8d4d2746f89841e49230dd26917df1876050f95abafafbe34f47cb534b88d7"
-dependencies = [
- "byteorder",
-]
-
 [[package]]
 name = "base64ct"
 version = "1.8.3"
@@ -896,7 +921,7 @@ version = "2.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "90dbd31c98227229239363921e60fcf5e558e43ec69094d46fc4996f08d1d5bc"
 dependencies = [
- "bitcoin_hashes",
+ "bitcoin_hashes 0.14.101",
  "rand 0.8.8",
  "rand_core 0.6.4",
  "serde",
@@ -937,27 +962,130 @@ checksum = "b71798fca2c1fe1086445a7258a4bc81e6e49dcd24c8d0dd9a1e57395b603f51"
 [[package]]
 name = "bitcoin-consensus-encoding"
 version = "1.2.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "hex-conservative 1.3.0",
+ "serde",
+]
+
+[[package]]
+name = "bitcoin-consensus-encoding"
+version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6712f9c6fd6785b3b270884e57c441c403dc5d7e19ca45368c97c7a1de3000ec"
+checksum = "9daa31138eb443d5751b207f3f64154e2bb09cd59960562ccc7a7112be38147f"
 dependencies = [
- "bitcoin-internals",
+ "bitcoin-internals 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)",
  "hex-conservative 1.3.0",
  "serde",
 ]
 
+[[package]]
+name = "bitcoin-crypto"
+version = "0.3.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "base58ck 0.5.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "bitcoin-network-kind",
+ "bitcoin-primitives 0.103.1",
+ "bitcoin_hashes 1.2.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "hex-conservative 1.3.0",
+ "secp256k1",
+ "serde",
+]
+
+[[package]]
+name = "bitcoin-internals"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a30a22d1f112dde8e16be7b45c63645dc165cef254f835b3e1e9553e485cfa64"
+dependencies = [
+ "hex-conservative 0.3.2",
+]
+
 [[package]]
 name = "bitcoin-internals"
 version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d573f4cf32996a8dce612e4348cece65a241f1882ed594047c9ba348e8869fa5"
 
+[[package]]
+name = "bitcoin-internals"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8bea3a9f0cfece4564e37cb49a38cc245ca5184719e50d7d0dda3268722c4e2"
+
+[[package]]
+name = "bitcoin-internals"
+version = "0.7.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "serde",
+]
+
 [[package]]
 name = "bitcoin-io"
 version = "0.1.101"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bb5de036369d1ac59d3c1819ebc4d850f89466f5401c571a285b6ed564a4cb78"
 dependencies = [
- "bitcoin-consensus-encoding",
+ "bitcoin-consensus-encoding 1.3.0",
+]
+
+[[package]]
+name = "bitcoin-network-kind"
+version = "1.0.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "serde",
+]
+
+[[package]]
+name = "bitcoin-primitives"
+version = "0.103.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82e12cb1814d037edbd667554c2c0e6b067db72c83ee935b645a6b5829aca908"
+dependencies = [
+ "bitcoin-consensus-encoding 1.3.0",
+ "bitcoin-internals 0.6.0",
+ "bitcoin-units 0.5.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "bitcoin_hashes 1.2.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "hex-conservative 1.3.0",
+]
+
+[[package]]
+name = "bitcoin-primitives"
+version = "0.103.1"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "bitcoin-consensus-encoding 1.2.0",
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "bitcoin-units 0.5.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "bitcoin_hashes 1.2.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "hex-conservative 1.3.0",
+]
+
+[[package]]
+name = "bitcoin-units"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ae6dcb008158c2bdbe698470280439844be5f640310e4f5d6ef0a0209e066c2"
+dependencies = [
+ "bitcoin-consensus-encoding 1.3.0",
+ "bitcoin-internals 0.5.0",
+ "serde",
+]
+
+[[package]]
+name = "bitcoin-units"
+version = "0.5.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "bitcoin-consensus-encoding 1.2.0",
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "serde",
 ]
 
 [[package]]
@@ -968,6 +1096,29 @@ checksum = "bca4c7abb40c8817d77403c880988cfd484f23ab2365726afb2f798363e2c4a2"
 dependencies = [
  "bitcoin-io",
  "hex-conservative 0.2.3",
+ "serde",
+]
+
+[[package]]
+name = "bitcoin_hashes"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5304e53726dbe5f93141535e102ed97b5bf4714fbecefdda8f9fb98d7fdaff0e"
+dependencies = [
+ "bitcoin-consensus-encoding 1.3.0",
+ "bitcoin-internals 0.6.0",
+ "hex-conservative 1.3.0",
+]
+
+[[package]]
+name = "bitcoin_hashes"
+version = "1.2.0"
+source = "git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516#7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516"
+dependencies = [
+ "bitcoin-consensus-encoding 1.2.0",
+ "bitcoin-internals 0.7.0 (git+https://github.com/rust-bitcoin/rust-bitcoin?rev=7ba35c7c1dd63892bfb9c9395bbd80e2ab5df516)",
+ "hex-conservative 1.3.0",
+ "serde",
 ]
 
 [[package]]
@@ -1044,7 +1195,7 @@ version = "0.10.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
 dependencies = [
- "generic-array 0.14.7",
+ "generic-array",
 ]
 
 [[package]]
@@ -1062,7 +1213,7 @@ version = "0.3.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a8894febbff9f758034a5b8e12d87918f56dfc64a8e1fe757d65e29041538d93"
 dependencies = [
- "generic-array 0.14.7",
+ "generic-array",
 ]
 
 [[package]]
@@ -1111,41 +1262,16 @@ version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d7bc6d6292be3a19e6379786dac800f551e5865a5bb51ebbe3064ab80433f403"
 dependencies = [
- "ff",
+ "ff 0.13.1",
  "rand_core 0.6.4",
  "subtle",
 ]
 
-[[package]]
-name = "blsful"
-version = "3.0.0"
-source = "git+https://github.com/dashpay/agora-blsful?rev=0c34a7a488a0bd1c9a9a2196e793b303ad35c900#0c34a7a488a0bd1c9a9a2196e793b303ad35c900"
-dependencies = [
- "anyhow",
- "blstrs_plus",
- "hex",
- "hkdf",
- "merlin",
- "pairing",
- "rand 0.8.8",
- "rand_chacha",
- "rand_core 0.6.4",
- "serde",
- "serde_bare",
- "sha2 0.10.9",
- "sha3",
- "subtle",
- "thiserror 2.0.20",
- "uint-zigzag",
- "vsss-rs",
- "zeroize",
-]
-
 [[package]]
 name = "blst"
-version = "0.3.12"
+version = "0.3.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62dc83a094a71d43eeadd254b1ec2d24cb6a0bb6cadce00df51f0db594711a32"
+checksum = "c20659f9bbee16cbbd2f7393e40ab6309f5a98f76a2eb57a995ec508b72387fe"
 dependencies = [
  "cc",
  "glob",
@@ -1153,24 +1279,6 @@ dependencies = [
  "zeroize",
 ]
 
-[[package]]
-name = "blstrs_plus"
-version = "0.8.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4a16dd4b0d6b4538e1fa0388843acb186363082713a8fc8416d802a04d013818"
-dependencies = [
- "arrayref",
- "blst",
- "elliptic-curve",
- "ff",
- "group",
- "pairing",
- "rand_core 0.6.4",
- "serde",
- "subtle",
- "zeroize",
-]
-
 [[package]]
 name = "bs58"
 version = "0.5.1"
@@ -1845,26 +1953,13 @@ version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
 
-[[package]]
-name = "crypto-bigint"
-version = "0.5.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
-dependencies = [
- "generic-array 0.14.7",
- "rand_core 0.6.4",
- "serdect",
- "subtle",
- "zeroize",
-]
-
 [[package]]
 name = "crypto-common"
 version = "0.1.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
 dependencies = [
- "generic-array 0.14.7",
+ "generic-array",
  "rand_core 0.6.4",
  "typenum",
 ]
@@ -1931,6 +2026,7 @@ dependencies = [
  "curve25519-dalek-derive",
  "digest 0.11.3",
  "fiat-crypto 0.3.0",
+ "rand_core 0.10.1",
  "rustc_version",
  "subtle",
  "zeroize",
@@ -1949,14 +2045,15 @@ dependencies = [
 
 [[package]]
 name = "dapi-grpc"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "dash-platform-macros",
  "futures-core",
  "getrandom 0.2.17",
  "platform-version",
  "prost",
+ "prost-build",
  "serde",
  "serde_bytes",
  "serde_json",
@@ -2054,8 +2151,8 @@ dependencies = [
 
 [[package]]
 name = "dash-async"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "futures",
  "thiserror 2.0.20",
@@ -2066,8 +2163,8 @@ dependencies = [
 
 [[package]]
 name = "dash-context-provider"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "dash-async",
  "dpp",
@@ -2160,8 +2257,8 @@ dependencies = [
 
 [[package]]
 name = "dash-network"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "cbindgen",
  "grovedb-bincode",
@@ -2171,16 +2268,86 @@ dependencies = [
 
 [[package]]
 name = "dash-network-seeds"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "dash-network",
 ]
 
+[[package]]
+name = "dash-num"
+version = "0.1.0-beta"
+source = "git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7#33fcc59e1868c803f9608e0e78ee8bddf3abcee7"
+dependencies = [
+ "ambassador",
+ "bitcoin-internals 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "dash-types 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7)",
+ "delegate",
+ "hex-conservative 1.3.0",
+]
+
+[[package]]
+name = "dash-num"
+version = "0.1.0-beta"
+source = "git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5#d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5"
+dependencies = [
+ "ambassador",
+ "bitcoin-internals 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "dash-types 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "delegate",
+ "hex-conservative 1.3.0",
+ "serde",
+]
+
+[[package]]
+name = "dash-pkc"
+version = "0.1.0-beta"
+source = "git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7#33fcc59e1868c803f9608e0e78ee8bddf3abcee7"
+dependencies = [
+ "aes 0.9.3",
+ "bitcoin_hashes 1.2.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "blst",
+ "cfg-if",
+ "dash-num 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7)",
+ "dash-types 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7)",
+ "ff 0.14.0",
+ "group 0.14.0",
+ "hex-conservative 1.3.0",
+ "rand_core 0.10.1",
+ "sha2 0.11.0",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "dash-pkc"
+version = "0.1.0-beta"
+source = "git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5#d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5"
+dependencies = [
+ "aes 0.9.3",
+ "base58ck 0.5.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "bitcoin_hashes 1.2.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "blst",
+ "cfg-if",
+ "dash-num 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "dash-types 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "ed25519-dalek 3.0.0",
+ "ff 0.14.0",
+ "group 0.14.0",
+ "hex-conservative 1.3.0",
+ "rand_core 0.10.1",
+ "secp256k1",
+ "serde",
+ "sha2 0.11.0",
+ "subtle",
+ "thiserror 2.0.20",
+ "zeroize",
+]
+
 [[package]]
 name = "dash-platform-macros"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "heck",
  "quote",
@@ -2189,8 +2356,8 @@ dependencies = [
 
 [[package]]
 name = "dash-platform-queries"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "dapi-grpc",
  "dash-context-provider",
@@ -2207,8 +2374,8 @@ dependencies = [
 
 [[package]]
 name = "dash-sdk"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "arc-swap",
  "async-trait",
@@ -2246,8 +2413,8 @@ dependencies = [
 
 [[package]]
 name = "dash-spv"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "async-trait",
  "chrono",
@@ -2257,10 +2424,10 @@ dependencies = [
  "dashcore_hashes",
  "futures",
  "git-state",
- "hex",
+ "hex-conservative 1.3.0",
  "key-wallet",
  "key-wallet-manager",
- "rand 0.8.8",
+ "rand 0.9.5",
  "rayon",
  "serde",
  "serde_json",
@@ -2273,44 +2440,90 @@ dependencies = [
  "tracing-subscriber",
 ]
 
+[[package]]
+name = "dash-types"
+version = "0.1.0-beta"
+source = "git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7#33fcc59e1868c803f9608e0e78ee8bddf3abcee7"
+dependencies = [
+ "cfg-if",
+ "hex-conservative 1.3.0",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "dash-types"
+version = "0.1.0-beta"
+source = "git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5#d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5"
+dependencies = [
+ "bitcoin-consensus-encoding 1.3.0",
+ "bitcoin-primitives 0.103.0",
+ "cfg-if",
+ "hex-conservative 1.3.0",
+ "serde",
+ "subtle",
+ "thiserror 2.0.20",
+ "zeroize",
+]
+
 [[package]]
 name = "dashcore"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "anyhow",
- "base64-compat",
+ "base64 0.22.1",
  "bech32 0.9.1",
  "bitvec",
  "blake3",
- "blsful",
  "dash-network",
+ "dash-num 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "dash-types 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "dashcore-crypto",
  "dashcore-private",
  "dashcore_hashes",
- "ed25519-dalek 2.2.0",
  "grovedb-bincode",
  "grovedb-bincode-derive",
- "hex",
- "hex_lit",
- "rustversion",
- "secp256k1",
+ "hex-conservative 1.3.0",
  "serde",
  "thiserror 2.0.20",
  "tracing",
 ]
 
+[[package]]
+name = "dashcore-crypto"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
+dependencies = [
+ "base58ck 0.5.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "bitcoin-crypto",
+ "dash-network",
+ "dash-pkc 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "dash-types 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=d9e0d241e2e06edff455f88c9cb3b9ce0d8a8ac5)",
+ "dashcore-private",
+ "dashcore_hashes",
+ "delegate",
+ "grovedb-bincode",
+ "grovedb-bincode-derive",
+ "hex-conservative 1.3.0",
+ "serde",
+ "thiserror 2.0.20",
+ "tracing",
+ "zeroize",
+]
+
 [[package]]
 name = "dashcore-private"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 
 [[package]]
 name = "dashcore-rpc"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "dashcore-rpc-json",
- "hex",
+ "hex-conservative 1.3.0",
  "jsonrpc",
  "serde",
  "serde_json",
@@ -2319,12 +2532,12 @@ dependencies = [
 
 [[package]]
 name = "dashcore-rpc-json"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "dashcore",
  "grovedb-bincode",
- "hex",
+ "hex-conservative 1.3.0",
  "key-wallet",
  "serde",
  "serde_json",
@@ -2334,19 +2547,20 @@ dependencies = [
 
 [[package]]
 name = "dashcore_hashes"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
- "dashcore-private",
+ "bitcoin_hashes 0.14.101",
  "grovedb-bincode",
+ "hex-conservative 1.3.0",
  "rs-x11-hash",
  "serde",
 ]
 
 [[package]]
 name = "dashpay-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -2356,14 +2570,16 @@ dependencies = [
 
 [[package]]
 name = "data-contracts"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
+ "app-connect-contract",
  "dashpay-contract",
  "document-history-contract",
  "dpns-contract",
  "keyword-search-contract",
  "masternode-reward-shares-contract",
+ "moderation-charters-contract",
  "platform-value",
  "platform-version",
  "serde_json",
@@ -2450,6 +2666,17 @@ dependencies = [
  "thiserror 2.0.20",
 ]
 
+[[package]]
+name = "delegate"
+version = "0.13.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "780eb241654bf097afb00fc5f054a09b687dad862e485fdcf8399bb056565370"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "der"
 version = "0.7.10"
@@ -2606,7 +2833,7 @@ dependencies = [
  "libc",
  "option-ext",
  "redox_users",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -2658,8 +2885,8 @@ dependencies = [
 
 [[package]]
 name = "document-history-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -2687,8 +2914,8 @@ checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
 
 [[package]]
 name = "dpns-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -2698,26 +2925,31 @@ dependencies = [
 
 [[package]]
 name = "dpp"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "anyhow",
  "async-trait",
  "base64 0.22.1",
  "bech32 0.11.1",
+ "blst",
  "bs58",
  "byteorder",
  "chrono",
  "chrono-tz",
  "ciborium",
+ "dash-pkc 0.1.0-beta (git+https://github.com/dashpay/base-sdk?rev=33fcc59e1868c803f9608e0e78ee8bddf3abcee7)",
  "dash-spv",
  "dashcore",
  "dashcore-rpc",
  "data-contracts",
  "derive_more 1.0.0",
  "dpp-json-convertible-derive",
+ "ed25519-dalek 2.2.0",
  "env_logger",
  "getrandom 0.2.17",
+ "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "grovedb-bincode",
  "grovedb-commitment-tree",
  "hex",
@@ -2738,6 +2970,7 @@ dependencies = [
  "platform-versioning",
  "rand 0.8.8",
  "regex",
+ "secp256k1",
  "serde",
  "serde_json",
  "serde_repr",
@@ -2745,12 +2978,13 @@ dependencies = [
  "strum",
  "thiserror 2.0.20",
  "tracing",
+ "zeroize",
 ]
 
 [[package]]
 name = "dpp-json-convertible-derive"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -2759,19 +2993,20 @@ dependencies = [
 
 [[package]]
 name = "drive"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "byteorder",
  "derive_more 1.0.0",
  "dpp",
- "grovedb 6.0.1",
+ "grovedb 6.1.1",
  "grovedb-bincode",
- "grovedb-costs 6.0.1",
+ "grovedb-costs 6.1.1",
  "grovedb-epoch-based-storage-flags",
- "grovedb-path 6.0.1",
+ "grovedb-merk 6.1.1",
+ "grovedb-path 6.1.1",
  "grovedb-query",
- "grovedb-version 6.0.1",
+ "grovedb-version 6.1.1",
  "hex",
  "indexmap 2.14.2",
  "integer-encoding",
@@ -2785,8 +3020,8 @@ dependencies = [
 
 [[package]]
 name = "drive-proof-verifier"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "dapi-grpc",
  "dash-context-provider",
@@ -2892,7 +3127,9 @@ checksum = "6ebaa1a2bf1290ab3bfe5a7b771d050ebffab2711c19a81691c683a5144a25de"
 dependencies = [
  "curve25519-dalek 5.0.0",
  "ed25519 3.0.0",
+ "rand_core 0.10.1",
  "sha2 0.11.0",
+ "signature 3.0.0",
  "subtle",
  "zeroize",
 ]
@@ -3072,41 +3309,6 @@ version = "1.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "252afb9ae5eaa683babdc6a068b3f5726eb19e05070c731f9b2a23a7c3e8ed34"
 
-[[package]]
-name = "elliptic-curve"
-version = "0.13.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
-dependencies = [
- "base16ct",
- "crypto-bigint",
- "digest 0.10.7",
- "ff",
- "generic-array 0.14.7",
- "group",
- "hkdf",
- "pkcs8",
- "rand_core 0.6.4",
- "sec1",
- "subtle",
- "tap",
- "zeroize",
-]
-
-[[package]]
-name = "elliptic-curve-tools"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1de2b6fae800f08032a6ea32995b52925b1d451bff9d445c8ab2932323277faf"
-dependencies = [
- "elliptic-curve",
- "heapless 0.8.0",
- "hex",
- "multiexp",
- "serde",
- "zeroize",
-]
-
 [[package]]
 name = "emath"
 version = "0.36.2"
@@ -3305,7 +3507,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -3415,6 +3617,16 @@ dependencies = [
  "subtle",
 ]
 
+[[package]]
+name = "ff"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1f686ab92a9fb0eaf188f6c6c87b89490baa6fdb0db4544ba4dc47f7942489f"
+dependencies = [
+ "rand_core 0.10.1",
+ "subtle",
+]
+
 [[package]]
 name = "fiat-crypto"
 version = "0.2.9"
@@ -3733,18 +3945,6 @@ checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
 dependencies = [
  "typenum",
  "version_check",
- "zeroize",
-]
-
-[[package]]
-name = "generic-array"
-version = "1.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e"
-dependencies = [
- "rustversion",
- "serde_core",
- "typenum",
 ]
 
 [[package]]
@@ -3777,9 +3977,11 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
  "cfg-if",
+ "js-sys",
  "libc",
  "r-efi 5.3.0",
  "wasip2",
+ "wasm-bindgen",
 ]
 
 [[package]]
@@ -3828,8 +4030,8 @@ dependencies = [
 
 [[package]]
 name = "git-state"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 
 [[package]]
 name = "gl_generator"
@@ -3974,11 +4176,20 @@ version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
 dependencies = [
- "ff",
+ "ff 0.13.1",
  "memuse",
- "rand 0.8.8",
  "rand_core 0.6.4",
- "rand_xorshift",
+ "subtle",
+]
+
+[[package]]
+name = "group"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7fd1a1c7a5206c5b7a3f5a0d7ccd3ff85d0c8f5133d62a02680255b0004af5f4"
+dependencies = [
+ "ff 0.14.0",
+ "rand_core 0.10.1",
  "subtle",
 ]
 
@@ -4006,21 +4217,21 @@ dependencies = [
 
 [[package]]
 name = "grovedb"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "blake3",
  "grovedb-bincode",
  "grovedb-bincode-derive",
  "grovedb-bulk-append-tree",
- "grovedb-costs 6.0.1",
+ "grovedb-costs 6.1.1",
  "grovedb-dense-fixed-sized-merkle-tree",
- "grovedb-element 6.0.1",
- "grovedb-merk 6.0.1",
+ "grovedb-element 6.1.1",
+ "grovedb-merk 6.1.1",
  "grovedb-merkle-mountain-range",
- "grovedb-path 6.0.1",
+ "grovedb-path 6.1.1",
  "grovedb-query",
- "grovedb-version 6.0.1",
+ "grovedb-version 6.1.1",
  "hex",
  "indexmap 2.14.2",
  "integer-encoding",
@@ -4049,16 +4260,16 @@ dependencies = [
 
 [[package]]
 name = "grovedb-bulk-append-tree"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "blake3",
  "grovedb-bincode",
- "grovedb-costs 6.0.1",
+ "grovedb-costs 6.1.1",
  "grovedb-dense-fixed-sized-merkle-tree",
  "grovedb-merkle-mountain-range",
  "grovedb-query",
- "grovedb-version 6.0.1",
+ "grovedb-version 6.1.1",
  "hex",
  "integer-encoding",
  "thiserror 2.0.20",
@@ -4066,13 +4277,13 @@ dependencies = [
 
 [[package]]
 name = "grovedb-commitment-tree"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "blake3",
  "grovedb-bulk-append-tree",
- "grovedb-costs 6.0.1",
- "grovedb-version 6.0.1",
+ "grovedb-costs 6.1.1",
+ "grovedb-version 6.1.1",
  "incrementalmerkletree",
  "orchard",
  "rusqlite",
@@ -4092,8 +4303,8 @@ dependencies = [
 
 [[package]]
 name = "grovedb-costs"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "integer-encoding",
  "intmap",
@@ -4102,14 +4313,14 @@ dependencies = [
 
 [[package]]
 name = "grovedb-dense-fixed-sized-merkle-tree"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "blake3",
  "grovedb-bincode",
- "grovedb-costs 6.0.1",
+ "grovedb-costs 6.1.1",
  "grovedb-query",
- "grovedb-version 6.0.1",
+ "grovedb-version 6.1.1",
  "thiserror 2.0.20",
 ]
 
@@ -4129,14 +4340,14 @@ dependencies = [
 
 [[package]]
 name = "grovedb-element"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "grovedb-bincode",
  "grovedb-bincode-derive",
- "grovedb-path 6.0.1",
+ "grovedb-path 6.1.1",
  "grovedb-query",
- "grovedb-version 6.0.1",
+ "grovedb-version 6.1.1",
  "hex",
  "integer-encoding",
  "thiserror 2.0.20",
@@ -4144,10 +4355,10 @@ dependencies = [
 
 [[package]]
 name = "grovedb-epoch-based-storage-flags"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
- "grovedb-costs 6.0.1",
+ "grovedb-costs 6.1.1",
  "hex",
  "integer-encoding",
  "intmap",
@@ -4177,20 +4388,20 @@ dependencies = [
 
 [[package]]
 name = "grovedb-merk"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "blake3",
  "byteorder",
  "ed",
  "grovedb-bincode",
  "grovedb-bincode-derive",
- "grovedb-costs 6.0.1",
- "grovedb-element 6.0.1",
- "grovedb-path 6.0.1",
+ "grovedb-costs 6.1.1",
+ "grovedb-element 6.1.1",
+ "grovedb-path 6.1.1",
  "grovedb-query",
- "grovedb-version 6.0.1",
- "grovedb-visualize 6.0.1",
+ "grovedb-version 6.1.1",
+ "grovedb-visualize 6.1.1",
  "hex",
  "indexmap 2.14.2",
  "integer-encoding",
@@ -4199,13 +4410,13 @@ dependencies = [
 
 [[package]]
 name = "grovedb-merkle-mountain-range"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "blake3",
  "grovedb-bincode",
- "grovedb-costs 6.0.1",
- "grovedb-version 6.0.1",
+ "grovedb-costs 6.1.1",
+ "grovedb-version 6.1.1",
 ]
 
 [[package]]
@@ -4218,16 +4429,16 @@ dependencies = [
 
 [[package]]
 name = "grovedb-path"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "hex",
 ]
 
 [[package]]
 name = "grovedb-query"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "byteorder",
  "ed",
@@ -4249,8 +4460,8 @@ dependencies = [
 
 [[package]]
 name = "grovedb-version"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "thiserror 2.0.20",
  "versioned-feature-core",
@@ -4267,8 +4478,8 @@ dependencies = [
 
 [[package]]
 name = "grovedb-visualize"
-version = "6.0.1"
-source = "git+https://github.com/dashpay/grovedb?rev=74818ceb95805f56f141d24ca41f58b75c031a7f#74818ceb95805f56f141d24ca41f58b75c031a7f"
+version = "6.1.1"
+source = "git+https://github.com/dashpay/grovedb?rev=2128ea18f9b1c2f9502f99967b1b1c6485c91f8b#2128ea18f9b1c2f9502f99967b1b1c6485c91f8b"
 dependencies = [
  "hex",
  "itertools 0.14.0",
@@ -4359,8 +4570,8 @@ checksum = "fb2a697cad929f706b7987fe804ad57d43622cd37463ba7e4d662a926fdcfea3"
 dependencies = [
  "arrayvec",
  "bitvec",
- "ff",
- "group",
+ "ff 0.13.1",
+ "group 0.13.0",
  "halo2_poseidon",
  "halo2_proofs",
  "lazy_static",
@@ -4384,8 +4595,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0fa3da60b81f02f9b33ebc6252d766f843291fb4d2247a07ae73d20b791fc56f"
 dependencies = [
  "bitvec",
- "ff",
- "group",
+ "ff 0.13.1",
+ "group 0.13.0",
  "pasta_curves",
 ]
 
@@ -4396,8 +4607,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f5aca1c66059a919227dec97444a11a4350d2f9c820ca48690988f0aa0e81cbf"
 dependencies = [
  "blake2b_simd",
- "ff",
- "group",
+ "ff 0.13.1",
+ "group 0.13.0",
  "halo2_legacy_pdqsort",
  "indexmap 1.9.3",
  "maybe-rayon",
@@ -4427,15 +4638,6 @@ dependencies = [
  "byteorder",
 ]
 
-[[package]]
-name = "hash32"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47d60b12902ba28e2730cd37e95b8c9223af2808df9e902d4df49588d1470606"
-dependencies = [
- "byteorder",
-]
-
 [[package]]
 name = "hashbrown"
 version = "0.12.3"
@@ -4487,20 +4689,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cdc6457c0eb62c71aac4bc17216026d8410337c4126773b9c5daba343f17964f"
 dependencies = [
  "atomic-polyfill",
- "hash32 0.2.1",
+ "hash32",
  "rustc_version",
  "serde",
- "spin 0.9.9",
- "stable_deref_trait",
-]
-
-[[package]]
-name = "heapless"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bfb9eb618601c89945a70e254898da93b13be0388091d42117462b265bb3fad"
-dependencies = [
- "hash32 0.3.1",
+ "spin",
  "stable_deref_trait",
 ]
 
@@ -4521,9 +4713,6 @@ name = "hex"
 version = "0.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
-dependencies = [
- "serde",
-]
 
 [[package]]
 name = "hex-conservative"
@@ -4534,6 +4723,15 @@ dependencies = [
  "arrayvec",
 ]
 
+[[package]]
+name = "hex-conservative"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "830e599c2904b08f0834ee6337d8fe8f0ed4a63b5d9e7a7f49c0ffa06d08d360"
+dependencies = [
+ "arrayvec",
+]
+
 [[package]]
 name = "hex-conservative"
 version = "1.3.0"
@@ -4549,12 +4747,6 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e712f64ec3850b98572bffac52e2c6f282b29fe6c5fa6d42334b30be438d95c1"
 
-[[package]]
-name = "hex_lit"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3011d1213f159867b13cfd6ac92d2cd5f1345762c63be3554e84092d85a50bbd"
-
 [[package]]
 name = "hkdf"
 version = "0.12.4"
@@ -4951,7 +5143,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
 dependencies = [
  "block-padding 0.3.3",
- "generic-array 0.14.7",
+ "generic-array",
 ]
 
 [[package]]
@@ -5168,8 +5360,8 @@ checksum = "8499f7a74008aafbecb2a2e608a3e13e4dd3e84df198b604451efe93f2de6e61"
 dependencies = [
  "bitvec",
  "bls12_381",
- "ff",
- "group",
+ "ff 0.13.1",
+ "group 0.13.0",
  "rand_core 0.6.4",
  "subtle",
 ]
@@ -5185,22 +5377,19 @@ dependencies = [
 
 [[package]]
 name = "key-wallet"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "async-trait",
- "base58ck",
  "bip39",
  "bitflags 2.13.2",
  "dashcore",
  "dashcore-private",
  "dashcore_hashes",
- "getrandom 0.2.17",
- "hex",
- "secp256k1",
+ "getrandom 0.4.3",
+ "hex-conservative 1.3.0",
  "serde",
  "serde_json",
- "sha2 0.10.9",
  "tracing",
  "unicode-normalization",
  "zeroize",
@@ -5208,11 +5397,12 @@ dependencies = [
 
 [[package]]
 name = "key-wallet-manager"
-version = "0.45.0"
-source = "git+https://github.com/dashpay/rust-dashcore?rev=e4208c90786a6854bd498315bcb571ef24182c15#e4208c90786a6854bd498315bcb571ef24182c15"
+version = "0.46.0"
+source = "git+https://github.com/dashpay/rust-dashcore?rev=aca020263990a86a15cc1d97ae2cbf965d488db5#aca020263990a86a15cc1d97ae2cbf965d488db5"
 dependencies = [
  "async-trait",
  "dashcore",
+ "hex-conservative 1.3.0",
  "key-wallet",
  "rayon",
  "serde",
@@ -5232,8 +5422,8 @@ dependencies = [
 
 [[package]]
 name = "keyword-search-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -5286,7 +5476,7 @@ version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
 dependencies = [
- "spin 0.9.9",
+ "spin",
 ]
 
 [[package]]
@@ -5427,8 +5617,8 @@ dependencies = [
 
 [[package]]
 name = "masternode-reward-shares-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -5579,6 +5769,17 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "moderation-charters-contract"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
+dependencies = [
+ "platform-value",
+ "platform-version",
+ "serde_json",
+ "thiserror 2.0.20",
+]
+
 [[package]]
 name = "moxcms"
 version = "0.8.1"
@@ -5589,20 +5790,6 @@ dependencies = [
  "pxfm",
 ]
 
-[[package]]
-name = "multiexp"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ec2ce93a6f06ac6cae04c1da3f2a6a24fcfc1f0eb0b4e0f3d302f0df45326cb"
-dependencies = [
- "ff",
- "group",
- "rand_core 0.6.4",
- "rustversion",
- "std-shims",
- "zeroize",
-]
-
 [[package]]
 name = "multimap"
 version = "0.10.1"
@@ -5799,7 +5986,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5824,8 +6011,6 @@ checksum = "c89e69e7e0f03bea5ef08013795c25018e101932225a656383bd384495ecc367"
 dependencies = [
  "num-integer",
  "num-traits",
- "rand 0.8.8",
- "serde",
 ]
 
 [[package]]
@@ -5835,8 +6020,6 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "73f88a1307638156682bada9d7604135552957b7818057dcef22705b4d509495"
 dependencies = [
  "num-traits",
- "rand 0.8.8",
- "serde",
 ]
 
 [[package]]
@@ -5884,7 +6067,6 @@ dependencies = [
  "num-bigint",
  "num-integer",
  "num-traits",
- "serde",
 ]
 
 [[package]]
@@ -6363,10 +6545,10 @@ dependencies = [
  "bitvec",
  "blake2b_simd",
  "corez",
- "ff",
+ "ff 0.13.1",
  "fpe",
  "getset",
- "group",
+ "group 0.13.0",
  "halo2_gadgets",
  "halo2_poseidon",
  "halo2_proofs",
@@ -6427,15 +6609,6 @@ dependencies = [
  "winapi",
 ]
 
-[[package]]
-name = "pairing"
-version = "0.23.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "81fec4625e73cf41ef4bb6846cafa6d44736525f442ba45e407c4a000a13996f"
-dependencies = [
- "group",
-]
-
 [[package]]
 name = "parking"
 version = "2.2.1"
@@ -6502,8 +6675,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3437083215c505e867eea5478371feba43d7689d6d15ec0a209eb46fb0d4cda6"
 dependencies = [
  "blake2b_simd",
- "ff",
- "group",
+ "ff 0.13.1",
+ "group 0.13.0",
  "lazy_static",
  "rand 0.8.8",
  "static_assertions",
@@ -6733,8 +6906,8 @@ checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
 
 [[package]]
 name = "platform-encryption"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "aes 0.8.4",
  "cbc 0.1.2",
@@ -6746,8 +6919,8 @@ dependencies = [
 
 [[package]]
 name = "platform-serialization"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "grovedb-bincode",
  "platform-version",
@@ -6755,8 +6928,8 @@ dependencies = [
 
 [[package]]
 name = "platform-serialization-derive"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6766,8 +6939,8 @@ dependencies = [
 
 [[package]]
 name = "platform-value"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "base64 0.22.1",
  "bs58",
@@ -6786,19 +6959,19 @@ dependencies = [
 
 [[package]]
 name = "platform-version"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "grovedb-bincode",
- "grovedb-version 6.0.1",
+ "grovedb-version 6.1.1",
  "thiserror 2.0.20",
  "versioned-feature-core",
 ]
 
 [[package]]
 name = "platform-versioning"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6807,8 +6980,8 @@ dependencies = [
 
 [[package]]
 name = "platform-wallet"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "arc-swap",
  "async-trait",
@@ -6841,8 +7014,8 @@ dependencies = [
 
 [[package]]
 name = "platform-wallet-storage"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "apple-native-keyring-store",
  "argon2 0.5.3",
@@ -7002,7 +7175,7 @@ dependencies = [
  "cobs",
  "embedded-io 0.4.0",
  "embedded-io 0.6.1",
- "heapless 0.7.17",
+ "heapless",
  "serde",
 ]
 
@@ -7097,7 +7270,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "03da047801ff44bb6a4d407d4860c05fd70bb81714e6b2f3812603d5b145b042"
 dependencies = [
  "heck",
- "itertools 0.14.0",
+ "itertools 0.10.5",
  "log",
  "multimap",
  "petgraph",
@@ -7118,7 +7291,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b570b25f7617e43d59005d0990ccb79e950a423952cea19671b7a876da390adf"
 dependencies = [
  "anyhow",
- "itertools 0.14.0",
+ "itertools 0.10.5",
  "proc-macro2",
  "quote",
  "syn 2.0.119",
@@ -7237,7 +7410,7 @@ dependencies = [
  "once_cell",
  "socket2",
  "tracing",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -7274,10 +7447,20 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c"
 dependencies = [
  "libc",
- "rand_chacha",
+ "rand_chacha 0.3.1",
  "rand_core 0.6.4",
 ]
 
+[[package]]
+name = "rand"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.5",
+]
+
 [[package]]
 name = "rand"
 version = "0.10.2"
@@ -7299,6 +7482,16 @@ dependencies = [
  "rand_core 0.6.4",
 ]
 
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
+]
+
 [[package]]
 name = "rand_core"
 version = "0.6.4"
@@ -7308,6 +7501,15 @@ dependencies = [
  "getrandom 0.2.17",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
 [[package]]
 name = "rand_core"
 version = "0.10.1"
@@ -7323,15 +7525,6 @@ dependencies = [
  "rand_core 0.10.1",
 ]
 
-[[package]]
-name = "rand_xorshift"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d25bf25ec5ae4a3f1b92f929810509a2f53d7dca2f50b794ff57e3face536c8f"
-dependencies = [
- "rand_core 0.6.4",
-]
-
 [[package]]
 name = "range-alloc"
 version = "0.1.5"
@@ -7405,7 +7598,7 @@ dependencies = [
  "blake2b_simd",
  "byteorder",
  "frost-rerandomized",
- "group",
+ "group 0.13.0",
  "hex",
  "jubjub",
  "pasta_curves",
@@ -7795,8 +7988,8 @@ dependencies = [
 
 [[package]]
 name = "rs-dapi-client"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "backon",
  "chrono",
@@ -7807,6 +8000,7 @@ dependencies = [
  "hex",
  "http",
  "http-serde",
+ "hyper-util",
  "lru",
  "rand 0.8.8",
  "serde",
@@ -7814,29 +8008,35 @@ dependencies = [
  "sha2 0.10.9",
  "thiserror 2.0.20",
  "tokio",
+ "tokio-socks",
  "tonic-web-wasm-client",
+ "tower-service",
  "tracing",
  "wasm-bindgen-futures",
 ]
 
 [[package]]
 name = "rs-sdk-trusted-context-provider"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "arc-swap",
  "dash-async",
  "dash-context-provider",
  "dpp",
  "futures",
+ "gloo-timers",
  "hex",
  "lru",
  "reqwest 0.12.28",
  "serde",
  "serde_json",
  "thiserror 2.0.20",
+ "tokio",
  "tracing",
  "url",
+ "wasm-bindgen-futures",
+ "web-time",
 ]
 
 [[package]]
@@ -7954,7 +8154,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys 0.12.1",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -8013,7 +8213,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -8115,37 +8315,22 @@ dependencies = [
  "tiny-skia 0.11.4",
 ]
 
-[[package]]
-name = "sec1"
-version = "0.7.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
-dependencies = [
- "base16ct",
- "der",
- "generic-array 0.14.7",
- "pkcs8",
- "subtle",
- "zeroize",
-]
-
 [[package]]
 name = "secp256k1"
-version = "0.30.0"
+version = "0.33.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b50c5943d326858130af85e049f2661ba3c78b26589b8ab98e65e80ae44a1252"
+checksum = "d7f404a8dab7a7a5a631e741d8699aa9c8e1d689fc26ccf897c7187565490b69"
 dependencies = [
- "bitcoin_hashes",
- "rand 0.8.8",
+ "rand 0.9.5",
  "secp256k1-sys",
  "serde",
 ]
 
 [[package]]
 name = "secp256k1-sys"
-version = "0.10.1"
+version = "0.14.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4387882333d3aa8cb20530a17c69a3752e97837832f34f6dccc760e715001d9"
+checksum = "f6b2992d4a3cd244539a7d5d0966aadbe5ca7fb868a5d7e38c29499b9e709bbd"
 dependencies = [
  "cc",
 ]
@@ -8195,15 +8380,6 @@ dependencies = [
  "serde_derive",
 ]
 
-[[package]]
-name = "serde_bare"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "51c55386eed0f1ae957b091dc2ca8122f287b60c79c774cbe3d5f2b69fded660"
-dependencies = [
- "serde",
-]
-
 [[package]]
 name = "serde_bytes"
 version = "0.11.19"
@@ -8442,6 +8618,9 @@ name = "signature"
 version = "3.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "28d567dcbaf0049cb8ac2608a76cd95ff9e4412e1899d389ee400918ca7537f5"
+dependencies = [
+ "rand_core 0.10.1",
+]
 
 [[package]]
 name = "simd-adler32"
@@ -8480,7 +8659,7 @@ version = "0.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3d268ae0ea06faafe1662e9967cd4f9022014f5eeb798e0c302c876df8b7af9c"
 dependencies = [
- "group",
+ "group 0.13.0",
  "pasta_curves",
  "subtle",
 ]
@@ -8604,7 +8783,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
 dependencies = [
  "libc",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -8616,12 +8795,6 @@ dependencies = [
  "lock_api",
 ]
 
-[[package]]
-name = "spin"
-version = "0.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "023a211cb3138dbc438680b32560ad89f699977624c9f8dbb95a47d5b4c07dd3"
-
 [[package]]
 name = "spirv"
 version = "0.4.0+sdk-1.4.341.0"
@@ -8687,17 +8860,6 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
-[[package]]
-name = "std-shims"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "227c4f8561598188d0df96dbe749824576174bba278b5b6bb2eacff1066067d0"
-dependencies = [
- "hashbrown 0.16.1",
- "rustversion",
- "spin 0.10.1",
-]
-
 [[package]]
 name = "strict-num"
 version = "0.1.1"
@@ -8853,10 +9015,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "once_cell",
  "rustix 1.1.4",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -9096,8 +9258,8 @@ checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee"
 
 [[package]]
 name = "token-history-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -9175,6 +9337,18 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "tokio-socks"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7e2948f60dbe26b35f2c7fb74ac2854c1fddded0fe9d7548fcc674a246f7615"
+dependencies = [
+ "either",
+ "futures-util",
+ "thiserror 1.0.69",
+ "tokio",
+]
+
 [[package]]
 name = "tokio-stream"
 version = "0.1.19"
@@ -9577,7 +9751,7 @@ checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
 dependencies = [
  "memoffset",
  "tempfile",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -9592,12 +9766,6 @@ dependencies = [
  "static_assertions",
 ]
 
-[[package]]
-name = "uint-zigzag"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61faa33dc26b2851a37da5390a1a4cac015887b1e97ecd77ce7b4f987431de9f"
-
 [[package]]
 name = "unicase"
 version = "2.9.0"
@@ -9888,24 +10056,6 @@ dependencies = [
  "syn 2.0.119",
 ]
 
-[[package]]
-name = "vsss-rs"
-version = "5.1.0"
-source = "git+https://github.com/dashpay/vsss-rs?branch=main#668f1406bf25a4b9a95cd97c9069f7a1632897c3"
-dependencies = [
- "crypto-bigint",
- "elliptic-curve",
- "elliptic-curve-tools",
- "generic-array 1.4.5",
- "hex",
- "num",
- "rand_core 0.6.4",
- "serde",
- "sha3",
- "subtle",
- "zeroize",
-]
-
 [[package]]
 name = "walkdir"
 version = "2.5.0"
@@ -9918,8 +10068,8 @@ dependencies = [
 
 [[package]]
 name = "wallet-utils-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "platform-value",
  "platform-version",
@@ -10475,7 +10625,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -10932,7 +11082,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d6f32a0ff4a9f6f01231eb2059cc85479330739333e0e58cadf03b6af2cca10"
 dependencies = [
  "cfg-if",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -11061,8 +11211,8 @@ checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
 
 [[package]]
 name = "withdrawals-contract"
-version = "4.2.0-beta.3"
-source = "git+https://github.com/dashpay/platform?rev=9f7ed16935bd540e4c2a542688800d2953f9f67a#9f7ed16935bd540e4c2a542688800d2953f9f67a"
+version = "5.0.0-rc.8"
+source = "git+https://github.com/dashpay/platform?rev=132ae31a1356d035cd8326f27c1109685090a71d#132ae31a1356d035cd8326f27c1109685090a71d"
 dependencies = [
  "num_enum 0.5.11",
  "platform-value",
@@ -11350,9 +11500,9 @@ dependencies = [
 
 [[package]]
 name = "zeroize"
-version = "1.8.2"
+version = "1.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
 dependencies = [
  "serde",
  "zeroize_derive",
diff --git a/Cargo.toml b/Cargo.toml
index bd1648d5e..1460a7d7f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -24,7 +24,7 @@ base64 = "0.23.1"
 # and `DisplayFromStr` adapters — the vulnerable `KeyValueMap` serializer is never invoked in the
 # dependency chain, so the advisory is not exploitable here (Dependabot alert #41; dismissal as
 # `not_used` was attempted but requires manual GitHub action — see coordinator note).
-dash-sdk = { git = "https://github.com/dashpay/platform", rev = "9f7ed16935bd540e4c2a542688800d2953f9f67a", features = [
+dash-sdk = { git = "https://github.com/dashpay/platform", rev = "132ae31a1356d035cd8326f27c1109685090a71d", features = [
     "core_key_wallet",
     "core_key_wallet_manager",
     "core_bincode",
@@ -34,15 +34,15 @@ dash-sdk = { git = "https://github.com/dashpay/platform", rev = "9f7ed16935bd540
     "core_spv",
     "shielded",
 ] }
-rs-sdk-trusted-context-provider = { git = "https://github.com/dashpay/platform", rev = "9f7ed16935bd540e4c2a542688800d2953f9f67a" }
-platform-wallet = { git = "https://github.com/dashpay/platform", rev = "9f7ed16935bd540e4c2a542688800d2953f9f67a", features = [
+rs-sdk-trusted-context-provider = { git = "https://github.com/dashpay/platform", rev = "132ae31a1356d035cd8326f27c1109685090a71d" }
+platform-wallet = { git = "https://github.com/dashpay/platform", rev = "132ae31a1356d035cd8326f27c1109685090a71d", features = [
     "serde",
     "shielded",
 ] }
 # `serde` backs `model::secret::Secret`'s `Deserialize`: the upstream
 # visitor copies a borrowed `&str` straight into guarded memory instead of
 # routing through a transient `String`. Secret schemas are included by `secrets`.
-platform-wallet-storage = { git = "https://github.com/dashpay/platform", rev = "9f7ed16935bd540e4c2a542688800d2953f9f67a", features = [
+platform-wallet-storage = { git = "https://github.com/dashpay/platform", rev = "132ae31a1356d035cd8326f27c1109685090a71d", features = [
     "shielded",
     "serde",
 ] }
diff --git a/docs/ai-design/2026-10-22-platform-v14-bump/README.md b/docs/ai-design/2026-10-22-platform-v14-bump/README.md
new file mode 100644
index 000000000..3617cec67
--- /dev/null
+++ b/docs/ai-design/2026-10-22-platform-v14-bump/README.md
@@ -0,0 +1,68 @@
+# Platform protocol 14 support (Platform v5.1-dev pin)
+
+A point-in-time record of PR #1015: DET on Platform `v5.1-dev`
+(`132ae31a1356d035cd8326f27c1109685090a71d`, 5.0.0-rc.8) and the protocol 14 features it
+adds. It supersedes the open "Devnet protocol seed" item of
+[`2026-09-14-platform-4.2-dev-bump`](../2026-09-14-platform-4.2-dev-bump/upgrade-notes.md).
+
+## Which protocol version DET builds for
+
+There are two version sources, and they can disagree while a network moves
+from 13 to 14:
+
+- **The SDK's version** (`AppContext::platform_version()`). It starts at
+  upstream's per-network `dash_sdk::sdk::min_protocol_version` (13 on mainnet,
+  testnet and regtest, 14 on devnet) and ratchets to what verified responses
+  report. Transitions are encoded and system contracts cached at this version,
+  and the cache reloads when it changes.
+- **The network's confirmed version** (`AppContext::platform_protocol_version()`).
+  It comes from a proved epoch read (or a proved DPNS fetch). It is `0` until
+  confirmed. Feature gates (`context/feature_gate.rs`) read only this one, so
+  an unconfirmed network never unlocks a protocol 14 feature.
+  `connected_platform_version()` selects that version's tables for estimates.
+
+If a protocol 14 structure is encoded at the protocol 13 table, it keeps its
+v14 data (a limited key stays `IdentityPublicKeyInCreation::V1`; the
+once-per-identity token rules stay V1). A protocol 13 network then refuses it.
+It is never silently downgraded (`backend_task/protocol_13_transitions.rs`).
+
+## Protocol 14 features, all gated on the confirmed version
+
+| Feature | Where |
+|---|---|
+| Key spending limits and expiry, raising them | `model/identity_key_limits.rs`, Add Key, Key Info |
+| Contract-bound authentication keys | `model/identity_key_usability.rs` |
+| Once-per-identity token distributions | `model/token.rs`, token creator, Claim |
+| Document action fees, confirmed before signing | `model/fee_estimation.rs`, document action screen |
+| Contract fee pots and claims | `backend_task/contract_fee_pots.rs`, Fee Pots screen |
+| Failed-withdrawal status | `backend_task/platform_info.rs` |
+
+## Decisions
+
+- **Key choice (IDN-024).** Automatic selection keeps only keys that are live,
+  held on this device, in scope, and at a security level the action accepts.
+  Among those it prefers unlimited keys. The key is picked again when the
+  scope changes. The manual chooser leaves out keys bound to another contract
+  or document type, but keeps expired and limited keys with a warning.
+- **What is confirmed is what is sent.** The confirmations for document action
+  fees and token claims build the action when they open, block the form behind
+  them, and send exactly that action on confirm. A key limit raise sends the
+  quoted raise it showed; `check_against` refuses it if the key changed.
+- **Only proved data gates an action.** Fee pot claims are not blocked on the
+  response metadata's epoch, because the proof does not sign it. Platform
+  refuses a second claim in the same epoch, with a typed error.
+- **Raises only.** `KeyLimitsRaise::check_against`, the last check before
+  signing, refuses a lowered limit, and a limit added to a key that has none.
+
+## Known blocker: mainnet proofs
+
+Mainnet nodes still serve the retired protocol 13 proof wire format, which this
+SDK rejects. Proof verification stays strict: there is no fallback that skips
+or weakens it. The PR stays blocked until an upstream SDK that verifies both
+formats, or a server rollout, lands.
+
+## Existing data
+
+The upstream V019 wallet-storage migration adds an asset-lock operation id.
+V001–V018 are unchanged. The upgrade is forward only: going back needs a copy
+taken before the upgrade.
diff --git a/docs/user-stories.md b/docs/user-stories.md
index ddeba35f3..b512f1b4f 100644
--- a/docs/user-stories.md
+++ b/docs/user-stories.md
@@ -806,6 +806,39 @@ As a user, I want to remove an identity from this device from the identity's own
 
 ---
 
+### IDN-022: Add a key with a spending limit or an expiry [Implemented]
+**Persona:** Priya, Jordan
+
+As a user handing a key to an app or a helper, I want to cap how much that key can ever spend and when it stops working, so that a leaked or forgotten key can do limited damage.
+
+- The Add Key screen offers "Spending Limit" and "Expires After (days)" for authentication keys below the master level.
+- On a network that does not support key limits yet, both options are shown disabled with an explanation.
+- Where the network allows it, an authentication key can also be limited to one contract or document type, with or without a spending limit and expiry.
+- A zero limit, zero days, or an expiry too far in the future is refused before anything is sent.
+- The Key Info screen shows the limit with how much is left of it, and the expiry date; an expired or used-up key is marked.
+
+### IDN-023: Raise a key's spending limit or extend its expiry [Implemented]
+**Persona:** Priya, Jordan
+
+As a user whose limited key is running out, I want to add to its spending limit or extend its expiry so that I can keep using it without adding a new key.
+
+- The Key Info screen of a limited key offers "Raise Limits" with an amount to add and a number of days to extend by.
+- An expiry is extended from its current date, or from today when the key has already expired.
+- An expired key cannot be topped up on its own; the screen also asks to extend its expiry.
+- Before anything is sent, a confirmation shows the resulting total spending limit and expiry and the key that signs the change; exactly that is sent.
+- If the key's limits, or the key that would sign the change, changed elsewhere in the meantime, nothing is sent and the screen shows the current limits and signing key to review again; no other signing key is picked without a new review.
+- The change is signed by the identity's master key, or a critical key without limits; without either on this device, the screen says which key to import.
+- After the change, the screen shows the key as the network stores it and its new remaining limit.
+
+### IDN-024: Signing avoids keys that cannot sign [Implemented]
+**Persona:** Alex, Priya
+
+As a user, I want the app to sign with a key that can actually sign the action, so that my actions are not refused because of an expired, used-up or out-of-scope key.
+
+- Automatic key choice skips disabled and expired keys, keys limited to other contracts or document types, and keys bound to a contract group.
+- Only keys this device holds the private key of are chosen; among those, one without limits is preferred over a limited one.
+- Where the user picks the key, limited and expired keys stay selectable, and the key list and selection show a warning explaining the limit. Keys bound to another contract or document type are not offered.
+
 ## DPNS (DPN)
 
 ### DPN-001: Register a username [Implemented]
@@ -1273,6 +1306,27 @@ As a user, I want to stop tracking a token balance for one of my identities so t
 
 ---
 
+### TOK-019: Create a token each identity can claim once [Implemented]
+**Persona:** Jordan
+
+As a token creator, I want every identity to be able to claim a fixed amount of my token exactly once, so that I can run a fair airdrop without a list of recipients.
+
+- The token creator offers a once-per-identity distribution with the amount each identity can claim, on networks that support it.
+- The fee estimate includes the network's extra fee for this distribution.
+- The Claim screen and My Tokens show the distribution.
+- After a successful claim, the Claim screen notes that the identity may have already claimed and when; the note never blocks claiming and can be dismissed.
+- A second claim refused by the network is explained.
+
+### TOK-020: Create a token holders cannot transfer [Implemented]
+**Persona:** Jordan
+
+As a token creator, I want to create a token that holders cannot send to other identities, so that it can work as a membership badge or a non-transferable credit.
+
+- The token creator offers "Holders can send this token to other identities", on by default; turning it off is offered only on networks that support it.
+- A network that does not support it is refused before anything is paid.
+- For a token that cannot be transferred, My Tokens disables Transfer and says why.
+- A transfer refused by the network is explained.
+
 ## Contracts and Documents (DOC)
 
 ### DOC-001: Register a new data contract [Implemented]
@@ -1349,6 +1403,35 @@ As a developer, I want to set a price on a document and allow others to purchase
 
 ---
 
+### DOC-010: Agree to a contract's fee for a document action [Implemented]
+**Persona:** Alex, Priya
+
+As a user acting on a document whose contract charges a fee, I want to see that fee and agree to it before anything is sent, so that I am never charged more than I accepted.
+
+- The estimated-fee panel shows the contract fee next to the network fee, split between the contract owner and its moderators.
+- Sending asks for confirmation naming the fee and, for a fee that follows network fees, the most that can be charged ("up to N DASH") and the tolerated increase.
+- If network fees rise past that tolerance, the network refuses the action; the app updates the fee, and trying again shows the new amount to confirm.
+- If the contract changes its fee after confirmation, nothing is sent and the user is asked to confirm the current fee.
+
+### DOC-011: Skip an optional token cost [Implemented]
+**Persona:** Alex, Priya
+
+As a user, when a document action's token cost is optional, I want to choose not to pay it, so that I can pay the network fee in credits instead.
+
+- A "Pay the token cost" option appears only when the token cost is optional.
+- Without it, the action carries no token payment and its network fee is paid from the identity's credits.
+
+### DOC-012: View and claim a contract's fee pots [Implemented]
+**Persona:** Jordan
+
+As a contract owner or moderator, I want to see what my contract's document fees have collected and claim it, so that the fees reach my identity.
+
+- The Contracts screen offers "Fee Pots" on networks that support contract fees.
+- Both pots of a contract are shown with their balance and last payout (epoch, time, claimant).
+- Only an identity that receives a pot can claim it; the owner pot goes to the owner, the moderators pot to the whole moderation team.
+- A pot can be claimed once per epoch. The app shows the last payout's epoch but does not block a claim on it; a second claim in the same epoch is refused by the network, and the message says to try again once the next epoch starts.
+- After a claim, the pot and the claimant's new balance are shown.
+
 ## Developer and Power Tools (DEV)
 
 ### DEV-001: Decode state transitions [Implemented]
diff --git a/scripts/migration-fixtures/expected-migration-fingerprint.txt b/scripts/migration-fixtures/expected-migration-fingerprint.txt
index cdd017629..61d9a0f66 100644
--- a/scripts/migration-fixtures/expected-migration-fingerprint.txt
+++ b/scripts/migration-fixtures/expected-migration-fingerprint.txt
@@ -5,7 +5,7 @@
 #
 # fingerprint = sha256 of the LC_ALL=C-sorted "<sha256>  <path>" listing of every
 # file under packages/rs-platform-wallet-storage/migrations at that rev.
-pin=9f7ed16935bd540e4c2a542688800d2953f9f67a
+pin=132ae31a1356d035cd8326f27c1109685090a71d
 target_branch=v5.1-dev
-migration_count=18
-fingerprint=1c6a683d1b781045f4528048b49b1e945f4da6caeb71e72d8de7429904399b99
+migration_count=19
+fingerprint=79465f56868e4dfd6e0ba05e4eefe7e7d4ac8ef478c2579ba019d12f868278e6
diff --git a/src/backend_task/contested_names/mod.rs b/src/backend_task/contested_names/mod.rs
index 3a59001e4..b0f03d05e 100644
--- a/src/backend_task/contested_names/mod.rs
+++ b/src/backend_task/contested_names/mod.rs
@@ -1669,14 +1669,12 @@ mod tests {
         context.set_det_kv_override_for_test(kv);
         store.fail_next_gets_containing("det:dpns_vote_operations:v2:", 2);
         let mut sdk = Sdk::new_mock();
-        let document_type = context
-            .dpns_contract
-            .document_type_for_name("domain")
-            .unwrap();
+        let dpns_contract = context.dpns_contract();
+        let document_type = dpns_contract.document_type_for_name("domain").unwrap();
         sdk.mock()
             .expect_fetch_many::<Identifier, ContestedResource, _, ContestedResources>(
                 VotePollsByDocumentTypeQuery {
-                    contract_id: context.dpns_contract.id(),
+                    contract_id: context.dpns_contract().id(),
                     document_type_name: document_type.name().to_owned(),
                     index_name: document_type.find_contested_index().unwrap().name.clone(),
                     start_at_value: None,
@@ -2333,14 +2331,12 @@ mod tests {
         use dash_sdk::query_types::{ContestedResource, ContestedResources};
         let (_temp, context) = vote_context();
         let mut sdk = Sdk::new_mock();
-        let document_type = context
-            .dpns_contract
-            .document_type_for_name("domain")
-            .unwrap();
+        let dpns_contract = context.dpns_contract();
+        let document_type = dpns_contract.document_type_for_name("domain").unwrap();
         sdk.mock()
             .expect_fetch_many::<Identifier, ContestedResource, _, ContestedResources>(
                 VotePollsByDocumentTypeQuery {
-                    contract_id: context.dpns_contract.id(),
+                    contract_id: context.dpns_contract().id(),
                     document_type_name: document_type.name().to_owned(),
                     index_name: document_type.find_contested_index().unwrap().name.clone(),
                     start_at_value: None,
@@ -2413,7 +2409,7 @@ mod tests {
         let votes: ResourceVotesByIdentity = choice
             .map(|resource_vote_choice| {
                 let vote_poll = VotePoll::ContestedDocumentResourceVotePoll(
-                    crate::model::dpns_voting::dpns_vote_poll(&context.dpns_contract, name)
+                    crate::model::dpns_voting::dpns_vote_poll(&context.dpns_contract(), name)
                         .unwrap(),
                 );
                 (
diff --git a/src/backend_task/contested_names/query_dpns_contested_resources.rs b/src/backend_task/contested_names/query_dpns_contested_resources.rs
index bf64b8b16..fe67eebff 100644
--- a/src/backend_task/contested_names/query_dpns_contested_resources.rs
+++ b/src/backend_task/contested_names/query_dpns_contested_resources.rs
@@ -153,7 +153,7 @@ impl AppContext {
         // Held to the end of the pass and taken before any other lock, so a
         // pass that waits here holds nothing a running pass needs.
         let _pass = self.dpns_contest_refresh_pass.lock().await;
-        let data_contract = self.dpns_contract.as_ref();
+        let data_contract = self.dpns_contract();
         let document_type = data_contract
             .document_type_for_name("domain")
             .map_err(|_| TaskError::ContractSchemaMismatch {
@@ -456,12 +456,12 @@ mod tests {
         context.set_det_kv_override_for_test(crate::wallet_backend::DetKv::from_store(Arc::new(
             crate::wallet_backend::kv_test_support::InMemoryKv::default(),
         )));
-        let document_type = context
-            .dpns_contract
+        let dpns_contract = context.dpns_contract();
+        let document_type = dpns_contract
             .document_type_for_name("domain")
             .expect("domain document type");
         let page_from = |start_at_value| VotePollsByDocumentTypeQuery {
-            contract_id: context.dpns_contract.id(),
+            contract_id: context.dpns_contract().id(),
             document_type_name: document_type.name().to_owned(),
             index_name: document_type
                 .find_contested_index()
@@ -777,8 +777,8 @@ mod tests {
         name: &str,
         winner: Option<(ContestedDocumentVotePollWinnerInfo, BlockInfo)>,
     ) {
-        let document_type = context
-            .dpns_contract
+        let dpns_contract = context.dpns_contract();
+        let document_type = dpns_contract
             .document_type_for_name("domain")
             .expect("domain document type");
         let query = ContestedDocumentVotePollDriveQuery {
@@ -793,7 +793,7 @@ mod tests {
                     .clone(),
                 index_values: vec![Value::from("dash"), Value::Text(name.to_owned())],
                 document_type_name: document_type.name().to_owned(),
-                contract_id: context.dpns_contract.id(),
+                contract_id: context.dpns_contract().id(),
             },
             allow_include_locked_and_abstaining_vote_tally: true,
             result_type: ContestedDocumentVotePollDriveQueryResultType::DocumentsAndVoteTally,
diff --git a/src/backend_task/contested_names/query_dpns_vote_contenders.rs b/src/backend_task/contested_names/query_dpns_vote_contenders.rs
index 52760f99b..8eab0311a 100644
--- a/src/backend_task/contested_names/query_dpns_vote_contenders.rs
+++ b/src/backend_task/contested_names/query_dpns_vote_contenders.rs
@@ -20,7 +20,7 @@ impl AppContext {
         sdk: &Sdk,
         _sender: crate::utils::egui_mpsc::SenderAsync<TaskResult>,
     ) -> Result<(), TaskError> {
-        let data_contract = self.dpns_contract.as_ref();
+        let data_contract = self.dpns_contract();
         let document_type = data_contract
             .document_type_for_name("domain")
             .map_err(|_| TaskError::DataContractNotFound)?;
diff --git a/src/backend_task/contested_names/vote_on_dpns_name.rs b/src/backend_task/contested_names/vote_on_dpns_name.rs
index a0e7e8fb4..a6ef82010 100644
--- a/src/backend_task/contested_names/vote_on_dpns_name.rs
+++ b/src/backend_task/contested_names/vote_on_dpns_name.rs
@@ -169,7 +169,7 @@ impl AppContext {
         name: &str,
         sdk: &Sdk,
     ) -> Result<ContestedDocumentResourceVotePoll, TaskError> {
-        let vote_poll = dpns_vote_poll(&self.dpns_contract, name)?;
+        let vote_poll = dpns_vote_poll(&self.dpns_contract(), name)?;
         let normalized_label = convert_to_homograph_safe_chars(name);
 
         // Pre-flight: confirm Platform has an open poll for this label before
diff --git a/src/backend_task/contract.rs b/src/backend_task/contract.rs
index a21cd10bf..a18e9e1e5 100644
--- a/src/backend_task/contract.rs
+++ b/src/backend_task/contract.rs
@@ -14,6 +14,7 @@ use dash_sdk::dpp::data_contract::accessors::v1::DataContractV1Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration_convention::TokenConfigurationConvention;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration_convention::accessors::v0::TokenConfigurationConventionV0Getters;
+use dash_sdk::dpp::data_contract::document_type::action_fees::ContractFeePot;
 use dash_sdk::dpp::data_contract::group::accessors::v0::GroupV0Getters;
 use dash_sdk::dpp::document::DocumentV0Getters;
 use dash_sdk::dpp::group::group_action::GroupAction;
@@ -36,6 +37,15 @@ pub enum ContractTask {
     RegisterDataContract(DataContract, String, QualifiedIdentity, IdentityPublicKey), // contract, alias, identity, signing_key
     UpdateDataContract(DataContract, QualifiedIdentity, IdentityPublicKey), // contract, identity, signing_key
     SaveDataContract(DataContract, Option<String>, InsertTokensToo),
+    /// Read both fee pots of a contract (protocol version 14). Read-only.
+    FetchContractFeePots(Identifier),
+    /// Pay out one fee pot of a contract, claimed by `identity`: the owner
+    /// pot by the contract owner, the moderators pot by a team member.
+    ClaimContractFees {
+        contract_id: Identifier,
+        pot: ContractFeePot,
+        identity: Box<QualifiedIdentity>,
+    },
 }
 
 impl AppContext {
@@ -46,6 +56,17 @@ impl AppContext {
         sender: crate::utils::egui_mpsc::SenderAsync<TaskResult>,
     ) -> Result<BackendTaskSuccessResult, crate::backend_task::error::TaskError> {
         match task {
+            ContractTask::FetchContractFeePots(contract_id) => {
+                self.fetch_contract_fee_pots(sdk, contract_id).await
+            }
+            ContractTask::ClaimContractFees {
+                contract_id,
+                pot,
+                identity,
+            } => {
+                self.claim_contract_fees(sdk, contract_id, pot, *identity)
+                    .await
+            }
             ContractTask::FetchContracts(identifiers) => {
                 match DataContract::fetch_many(sdk, identifiers).await {
                     Ok(data_contracts) => {
@@ -76,8 +97,9 @@ impl AppContext {
                         for data_contract in data_contracts {
                             if let Some(contract) = &data_contract.1 {
                                 // Fetch the contract description from the Search Contract
-                                let search_contract = &self.keyword_search_contract;
+                                let search_contract = self.keyword_search_contract();
                                 let document_query = DocumentQuery {
+                                    integer_range_clauses: vec![],
                                     sub_queries: Vec::new(),
                                     select: SelectProjection::documents(),
                                     data_contract: search_contract.clone(),
diff --git a/src/backend_task/contract_fee_pots.rs b/src/backend_task/contract_fee_pots.rs
new file mode 100644
index 000000000..312490c81
--- /dev/null
+++ b/src/backend_task/contract_fee_pots.rs
@@ -0,0 +1,223 @@
+//! Contract fee pots (protocol version 14): what a contract's document action
+//! fees have paid into its owner pot and its moderators pot, and paying a pot
+//! out to its recipients.
+
+use std::sync::Arc;
+
+use crate::backend_task::BackendTaskSuccessResult;
+use crate::backend_task::error::TaskError;
+use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
+use crate::model::contract_fee_pots::{SeatedModerators, has_elected_moderation};
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
+use crate::model::qualified_identity::QualifiedIdentity;
+use dash_sdk::Sdk;
+use dash_sdk::dpp::data_contract::document_type::action_fees::ContractFeePot;
+use dash_sdk::dpp::identity::accessors::{IdentityGettersV0, IdentitySettersV0};
+use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
+use dash_sdk::platform::contract_fee_pots::ContractFeePots;
+use dash_sdk::platform::transition::contract_fee_claim::ClaimContractFees;
+use dash_sdk::platform::{Fetch, Identifier};
+
+/// The key requirements of a fee claim: a CRITICAL authentication key, and
+/// since a claim is not a document batch, not one bound to a contract.
+fn fee_claim_key_requirements() -> KeyRequirements<'static> {
+    KeyRequirements::new(
+        Purpose::AUTHENTICATION,
+        &[SecurityLevel::CRITICAL],
+        SigningScope::NonBatch,
+    )
+}
+
+impl AppContext {
+    /// Both fee pots of `contract_id`, with the seated moderation team that
+    /// claims an elected contract's moderators pot. A contract nobody has paid
+    /// fees to reads as two empty pots.
+    pub(super) async fn fetch_contract_fee_pots(
+        &self,
+        sdk: &Sdk,
+        contract_id: Identifier,
+    ) -> Result<BackendTaskSuccessResult, TaskError> {
+        if !FeatureGate::ContractFeePots.is_available(self) {
+            return Err(TaskError::ContractFeePotsNotSupported);
+        }
+        // A contract saved here without elected moderation has no seated
+        // team, so its team is not read. One not saved here is read anyway.
+        let elected = self
+            .get_unqualified_contract_by_id(&contract_id)
+            .ok()
+            .flatten()
+            .is_none_or(|contract| has_elected_moderation(&contract));
+        // Only the pots are proved. The response metadata's epoch is not
+        // signed, so nothing is decided from it.
+        let (pots, seated_moderators) =
+            tokio::join!(ContractFeePots::fetch(sdk, contract_id), async {
+                if elected {
+                    read_seated_moderators(sdk, contract_id).await
+                } else {
+                    SeatedModerators::NotSeated
+                }
+            });
+        Ok(BackendTaskSuccessResult::ContractFeePots {
+            contract_id,
+            pots: pots?.unwrap_or_default(),
+            seated_moderators,
+        })
+    }
+
+    /// Pay out `pot` of `contract_id`, claimed by `qualified_identity`, and
+    /// store the claimant's new balance.
+    pub(super) async fn claim_contract_fees(
+        &self,
+        sdk: &Sdk,
+        contract_id: Identifier,
+        pot: ContractFeePot,
+        qualified_identity: QualifiedIdentity,
+    ) -> Result<BackendTaskSuccessResult, TaskError> {
+        if !FeatureGate::ContractFeePots.is_available(self) {
+            return Err(TaskError::ContractFeePotsNotSupported);
+        }
+        let identity_id = qualified_identity.identity.id();
+        let signing_key = qualified_identity
+            .signing_key_now(fee_claim_key_requirements())
+            .cloned()
+            .ok_or(TaskError::NoFeeClaimSigningKey)?;
+        let identity = qualified_identity.identity.clone();
+        let signer = Arc::new(qualified_identity);
+
+        let claimed = identity
+            .claim_contract_fees(sdk, contract_id, pot, Some(&signing_key), signer, None)
+            .await?;
+
+        let claimant_balance = claimed.balances.get(&identity_id).copied();
+        if let Some(balance) = claimant_balance {
+            self.persist_claimant_balance(&identity_id, balance)?;
+        }
+
+        Ok(BackendTaskSuccessResult::ContractFeesClaimed {
+            contract_id,
+            pot,
+            claimant_balance,
+            remaining_credits: claimed.remaining_credits,
+        })
+    }
+}
+
+impl AppContext {
+    /// Store `balance`, the claimant's balance after a claim the network
+    /// paid out, on the record of `identity_id`. The claim is already paid
+    /// out, so a failure here is reported as
+    /// [`TaskError::ContractFeesClaimedButBalanceNotSaved`], not as a failed
+    /// claim.
+    fn persist_claimant_balance(
+        &self,
+        identity_id: &Identifier,
+        balance: dash_sdk::dpp::fee::Credits,
+    ) -> Result<(), TaskError> {
+        self.edit_local_qualified_identity(identity_id, |fresh| {
+            fresh.identity.set_balance(balance);
+            Ok(())
+        })
+        .map(|_| ())
+        .map_err(|source| TaskError::ContractFeesClaimedButBalanceNotSaved {
+            source: Box::new(source),
+        })
+    }
+}
+
+/// The seated moderation team of `contract_id`, its leader and active
+/// members: who Platform lets claim an elected contract's moderators pot.
+///
+/// A failed read is not an error of the pots read: the pots still show, and
+/// the claim is left to Platform to accept or refuse.
+async fn read_seated_moderators(sdk: &Sdk, contract_id: Identifier) -> SeatedModerators {
+    match sdk.fetch_moderation_team(contract_id).await {
+        Ok(None) => SeatedModerators::NotSeated,
+        Ok(Some(team)) => {
+            let mut members = team.members;
+            members.insert(team.leader_id);
+            SeatedModerators::Seated(members)
+        }
+        Err(error) => {
+            tracing::debug!(
+                ?error,
+                %contract_id,
+                "Could not read the seated moderation team; leaving moderator claims to Platform"
+            );
+            SeatedModerators::Unknown
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    /// A claim the network paid out is reported as paid out, not as failed,
+    /// when storing the claimant's new balance on this device fails.
+    #[test]
+    fn a_claim_whose_balance_cannot_be_saved_is_reported_as_paid_out() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+
+        // Nothing is stored for this identity, so the write fails.
+        let result = ctx.persist_claimant_balance(&Identifier::random(), 1_000);
+
+        assert!(
+            matches!(
+                result,
+                Err(TaskError::ContractFeesClaimedButBalanceNotSaved { .. })
+            ),
+            "got {result:?}"
+        );
+    }
+
+    /// Before protocol version 14 is confirmed nothing is read or claimed:
+    /// an older network has no fee pots.
+    #[tokio::test]
+    async fn fee_pots_need_a_network_that_keeps_them() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let sdk = Sdk::new_mock();
+
+        // Not known yet (0), and mainnet's 13.
+        for version in [0, 13] {
+            ctx.set_platform_protocol_version(version);
+            let fetched = ctx
+                .fetch_contract_fee_pots(&sdk, Identifier::random())
+                .await;
+            assert!(
+                matches!(fetched, Err(TaskError::ContractFeePotsNotSupported)),
+                "protocol {version}: got {fetched:?}"
+            );
+
+            let identity = crate::backend_task::identity::key_limits_test_identity();
+            let claimed = ctx
+                .claim_contract_fees(&sdk, Identifier::random(), ContractFeePot::Owner, identity)
+                .await;
+            assert!(
+                matches!(claimed, Err(TaskError::ContractFeePotsNotSupported)),
+                "protocol {version}: got {claimed:?}"
+            );
+        }
+    }
+
+    /// A claimant with no CRITICAL unbound key is refused before anything is
+    /// signed or broadcast.
+    #[tokio::test]
+    async fn a_claim_needs_a_critical_unbound_key() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        ctx.set_platform_protocol_version(dash_sdk::dpp::version::v14::PROTOCOL_VERSION_14);
+        let sdk = Sdk::new_mock();
+        let identity = crate::backend_task::identity::key_limits_test_identity();
+
+        let claimed = ctx
+            .claim_contract_fees(&sdk, Identifier::random(), ContractFeePot::Owner, identity)
+            .await;
+        assert!(
+            matches!(claimed, Err(TaskError::NoFeeClaimSigningKey)),
+            "got {claimed:?}"
+        );
+    }
+}
diff --git a/src/backend_task/dashpay.rs b/src/backend_task/dashpay.rs
index ae474f2fe..afe1d2ee9 100644
--- a/src/backend_task/dashpay.rs
+++ b/src/backend_task/dashpay.rs
@@ -32,7 +32,7 @@ use errors::DashPayError;
 /// Every `contactRequest` read in this module goes through here, so the
 /// contract handle and the error attribution are stated once.
 fn contact_request_query(app_context: &AppContext) -> Result<DocumentQuery, DashPayError> {
-    DocumentQuery::new(app_context.dashpay_contract.clone(), "contactRequest").map_err(|e| {
+    DocumentQuery::new(app_context.dashpay_contract(), "contactRequest").map_err(|e| {
         DashPayError::QueryCreation {
             query_target: "DashPay contactRequest",
             source: Box::new(e.into()),
@@ -40,6 +40,9 @@ fn contact_request_query(app_context: &AppContext) -> Result<DocumentQuery, Dash
     })
 }
 
+// TODO(dashpay-invitations): creating and claiming DashPay invitations, and
+// withdrawing credits to a contact, are not offered yet. See
+// https://github.com/dashpay/dash-evo-tool/issues/1104
 #[derive(Debug, Clone, PartialEq)]
 pub enum DashPayTask {
     LoadProfile {
diff --git a/src/backend_task/dashpay/auto_accept_proof.rs b/src/backend_task/dashpay/auto_accept_proof.rs
index 71bbd9a76..0ecf1b6fa 100644
--- a/src/backend_task/dashpay/auto_accept_proof.rs
+++ b/src/backend_task/dashpay/auto_accept_proof.rs
@@ -1,13 +1,11 @@
 use crate::backend_task::error::TaskError;
 use crate::model::dashpay_derivation::derive_auto_accept_key;
 use crate::model::qualified_identity::QualifiedIdentity;
-use dash_sdk::dpp::dashcore::secp256k1::{Message, Secp256k1, SecretKey};
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
+use dash_sdk::dpp::secp256k1::Message;
 use dash_sdk::platform::Identifier;
 use serde::{Deserialize, Serialize};
 use sha2::{Digest, Sha256};
-use std::collections::HashSet;
 
 #[derive(Debug, Clone, Serialize, Deserialize, PartialEq)]
 pub struct AutoAcceptProofData {
@@ -28,8 +26,10 @@ impl AutoAcceptProofData {
         key_data.extend_from_slice(&self.proof_key); // The actual key
 
         // Encode key data in base58 using dashcore's base58 implementation
-        use dash_sdk::dpp::dashcore::base58;
-        let key_data_base58 = base58::encode_slice(&key_data);
+        let key_data_base58 = dash_sdk::dpp::platform_value::string_encoding::encode(
+            &key_data,
+            dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58,
+        );
 
         // For QR codes without username (identity-based)
         format!(
@@ -85,8 +85,7 @@ impl AutoAcceptProofData {
             key_data_base58.ok_or("Missing proof key data in QR code".to_string())?;
 
         // Decode the key data from base58
-        use dash_sdk::dpp::dashcore::base58;
-        let key_data = base58::decode(&key_data_base58)
+        let key_data = dash_sdk::dpp::dashcore::base58::decode(&key_data_base58)
             .map_err(|e| format!("Invalid base58 key data: {}", e))?;
 
         // Parse key data format: key_type (1) + timestamp (4) + key_size (1) + key (32-64)
@@ -140,13 +139,7 @@ pub async fn generate_auto_accept_proof(
     // Get wallet seed for HD derivation - use ENCRYPTION key (ECDSA_SECP256K1) as per DIP-15
     // The auto-accept proof uses HD derivation from the wallet, and ENCRYPTION keys are ECDSA_SECP256K1
     let signing_key = identity
-        .identity
-        .get_first_public_key_matching(
-            Purpose::ENCRYPTION,
-            HashSet::from([SecurityLevel::MEDIUM]),
-            HashSet::from([KeyType::ECDSA_SECP256K1]),
-            false,
-        )
+        .auto_accept_proof_key()
         .ok_or(DashPayError::MissingEncryptionKey)?;
 
     // Resolve the ENCRYPTION private key through the JIT chokepoint — no
@@ -170,7 +163,7 @@ pub async fn generate_auto_accept_proof(
     .map_err(|e| TaskError::DashPay(DashPayError::from(e)))?;
 
     // Extract the private key bytes (32 bytes)
-    let proof_key = auto_accept_xprv.private_key.secret_bytes();
+    let proof_key = *auto_accept_xprv.private_key.to_bytes();
 
     Ok(AutoAcceptProofData {
         identity_id: identity.identity.id(),
@@ -209,14 +202,13 @@ pub fn create_auto_accept_proof_bytes_with_key(
     let message_hash = hasher.finalize();
 
     // Create secp256k1 message and sign
-    let secp = Secp256k1::new();
-    let message = Message::from_digest_slice(&message_hash)
-        .map_err(|e| format!("Failed to create message: {}", e))?;
 
-    let secret_key = SecretKey::from_slice(signing_key_bytes)
+    let message = Message::from_digest(message_hash.into());
+
+    let secret_key = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(*(signing_key_bytes))
         .map_err(|e| format!("Failed to create secret key: {}", e))?;
 
-    let signature = secp.sign_ecdsa(&message, &secret_key);
+    let signature = dash_sdk::dpp::secp256k1::ecdsa::sign(message, &secret_key);
     let sig_bytes = signature.serialize_compact();
 
     // Build the proof bytes
@@ -274,20 +266,13 @@ pub async fn verify_auto_accept_proof(
     let mut hasher = Sha256::new();
     hasher.update(&message_data);
     let message_hash = hasher.finalize();
-    let secp = Secp256k1::new();
-    let message = Message::from_digest_slice(&message_hash)
-        .map_err(|e| format!("Failed to create message: {}", e))?;
+
+    let message = Message::from_digest(message_hash.into());
 
     // Derive expected pubkey from our seed and key index (timestamp)
     // Use ENCRYPTION key (ECDSA_SECP256K1) for HD derivation as per DIP-15
     let signing_key = our_identity
-        .identity
-        .get_first_public_key_matching(
-            Purpose::ENCRYPTION,
-            HashSet::from([SecurityLevel::MEDIUM]),
-            HashSet::from([KeyType::ECDSA_SECP256K1]),
-            false,
-        )
+        .auto_accept_proof_key()
         .ok_or("No suitable key found. This operation requires a MEDIUM security level ECDSA_SECP256K1 ENCRYPTION key.")?;
     // Resolve the ENCRYPTION private key through the JIT chokepoint — no
     // parked-seed read.
@@ -299,17 +284,11 @@ pub async fn verify_auto_accept_proof(
         .ok_or("Private key not found")?;
     let xprv = derive_auto_accept_key(&wallet_seed[..], our_identity.network, key_index)
         .map_err(|e| format!("Failed to derive auto-accept key: {}", e))?;
-    let pubkey = dash_sdk::dpp::dashcore::secp256k1::PublicKey::from_secret_key(
-        &secp,
-        &dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(
-            &xprv.private_key.secret_bytes(),
-        )
-        .map_err(|e| format!("Failed to create secret key: {}", e))?,
-    );
-    let sig = dash_sdk::dpp::dashcore::secp256k1::ecdsa::Signature::from_compact(signature_bytes)
+    let pubkey = dash_sdk::dpp::secp256k1::PublicKey::from(xprv.private_key.public_key());
+    let sig = dash_sdk::dpp::secp256k1::ecdsa::Signature::from_compact(signature_bytes)
         .map_err(|e| format!("Invalid signature bytes: {}", e))?;
 
-    match secp.verify_ecdsa(&message, &sig, &pubkey) {
+    match dash_sdk::dpp::secp256k1::ecdsa::verify(&sig, message, &pubkey) {
         Ok(_) => Ok(true),
         Err(_) => Ok(false),
     }
diff --git a/src/backend_task/dashpay/contact_info.rs b/src/backend_task/dashpay/contact_info.rs
index 3e191237f..c22474831 100644
--- a/src/backend_task/dashpay/contact_info.rs
+++ b/src/backend_task/dashpay/contact_info.rs
@@ -17,14 +17,13 @@ use dash_sdk::dpp::document::{
 };
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
 use dash_sdk::dpp::platform_value::{Bytes32, Value};
 use dash_sdk::drive::query::{OrderClause, WhereClause, WhereOperator};
 use dash_sdk::platform::documents::transitions::DocumentCreateTransitionBuilder;
 use dash_sdk::platform::proto::get_documents_request::get_documents_request_v0::Start;
 use dash_sdk::platform::{Document, DocumentQuery, FetchMany, Identifier};
 use dash_sdk::query_types::Documents;
-use std::collections::{BTreeMap, HashSet};
+use std::collections::BTreeMap;
 use std::future::Future;
 use std::sync::Arc;
 use zeroize::Zeroizing;
@@ -490,7 +489,7 @@ async fn lookup_contact_info(
     identity: &QualifiedIdentity,
     contact_user_id: Identifier,
 ) -> Result<ContactInfoLookup, TaskError> {
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
     let identity_id = identity.identity.id();
     let mut query = DocumentQuery::new(dashpay_contract, "contactInfo").map_err(|e| {
         DashPayError::QueryCreation {
@@ -591,7 +590,7 @@ pub async fn create_or_update_contact_info(
     contact_user_id: Identifier,
     update: ContactInfoUpdate,
 ) -> Result<BackendTaskSuccessResult, TaskError> {
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
     let identity_id = identity.identity.id();
     let lookup = lookup_contact_info(app_context, sdk, &identity, contact_user_id).await?;
     let (found_existing_doc, derivation_index, enc_user_id_key, private_data_key) =
@@ -634,20 +633,7 @@ pub async fn create_or_update_contact_info(
         ));
     }
 
-    // Get signing key — accept any key type (BLS, ECDSA, EDDSA) since
-    // Platform accepts all for document state transitions.
-    let signing_key = identity
-        .identity
-        .get_first_public_key_matching(
-            Purpose::AUTHENTICATION,
-            HashSet::from([
-                SecurityLevel::CRITICAL,
-                SecurityLevel::HIGH,
-                SecurityLevel::MEDIUM,
-            ]),
-            KeyType::all_key_types().into(),
-            false,
-        )
+    let signing_key = contact_info_signing_key(&identity, &dashpay_contract)
         .ok_or_else(|| TaskError::DashPay(DashPayError::MissingAuthenticationKey))?;
 
     // Create document properties
@@ -714,6 +700,11 @@ pub async fn create_or_update_contact_info(
         let mut rng = StdRng::from_entropy();
         let entropy = Bytes32::random_with_rng(&mut rng);
 
+        // Before protocol version 14 this entropy-only id is the document's id,
+        // which Platform recomputes from the entropy. From protocol version 14
+        // (`Document::document_id_depends_on_nonce`) the id also commits to the
+        // identity contract nonce, so this one is only a placeholder that building
+        // the create transition replaces. Read the id from the confirmed document.
         let document_id = Document::generate_document_id_v0(
             &dashpay_contract.id(),
             &identity_id,
@@ -722,6 +713,8 @@ pub async fn create_or_update_contact_info(
         );
 
         let document = DppDocument::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: document_id,
             owner_id: identity_id,
             creator_id: None,
@@ -775,6 +768,15 @@ pub async fn create_or_update_contact_info(
     })
 }
 
+/// The key to sign a contactInfo document with, of any key type: Platform
+/// accepts all of them for document transitions.
+fn contact_info_signing_key<'i>(
+    identity: &'i QualifiedIdentity,
+    dashpay_contract: &dash_sdk::platform::DataContract,
+) -> Option<&'i dash_sdk::platform::IdentityPublicKey> {
+    identity.document_action_signing_key(dashpay_contract, "contactInfo", None)
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -843,6 +845,8 @@ mod tests {
             properties.insert("privateData".to_string(), private_data);
         }
         DppDocument::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: id(1),
             owner_id: id(2),
             creator_id: None,
@@ -878,6 +882,8 @@ mod tests {
             ),
         ]);
         DppDocument::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: id(document_id),
             owner_id: id(254),
             creator_id: None,
@@ -1272,4 +1278,19 @@ mod tests {
             })
         ));
     }
+
+    /// Regression: the contactInfo key choice admitted MEDIUM keys, which the
+    /// document type refuses, and preferred unlimited keys, so an unlimited
+    /// MEDIUM key beat a held limited HIGH key and the save was refused.
+    #[test]
+    fn a_contact_info_is_signed_with_a_key_its_document_type_accepts() {
+        use crate::context::test_support::{auth_key, dashpay_contract, identity_holding};
+        use dash_sdk::dpp::identity::SecurityLevel;
+
+        let limited_high = auth_key(1, SecurityLevel::HIGH).with_limits(Some(5_000), None);
+        let identity = identity_holding(&[limited_high, auth_key(2, SecurityLevel::MEDIUM)]);
+
+        let chosen = contact_info_signing_key(&identity, &dashpay_contract());
+        assert_eq!(chosen.map(|key| key.id()), Some(1));
+    }
 }
diff --git a/src/backend_task/dashpay/contact_requests.rs b/src/backend_task/dashpay/contact_requests.rs
index 50873710e..4a4b02db0 100644
--- a/src/backend_task/dashpay/contact_requests.rs
+++ b/src/backend_task/dashpay/contact_requests.rs
@@ -289,7 +289,7 @@ pub async fn send_contact_request_with_proof(
     }
 
     // Step 3: Check if a contact request already exists
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
     let mut existing_query = contact_request_query(app_context)?;
 
     existing_query = existing_query
@@ -520,7 +520,11 @@ pub async fn send_contact_request_with_proof(
     let mut rng = StdRng::from_entropy();
     let entropy = Bytes32::random_with_rng(&mut rng);
 
-    // Generate deterministic document ID based on entropy
+    // Before protocol version 14 this entropy-only id is the document's id,
+    // which Platform recomputes from the entropy. From protocol version 14
+    // (`Document::document_id_depends_on_nonce`) the id also commits to the
+    // identity contract nonce, so this one is only a placeholder that building
+    // the create transition replaces. Read the id from the confirmed document.
     let document_id = Document::generate_document_id_v0(
         &dashpay_contract.id(),
         &identity.identity.id(),
@@ -530,6 +534,8 @@ pub async fn send_contact_request_with_proof(
 
     // Create the document
     let document = DppDocument::V0(DocumentV0 {
+        moderated_at: None,
+        moderated_by: None,
         id: document_id,
         owner_id: identity.identity.id(),
         creator_id: None,
@@ -709,16 +715,8 @@ pub async fn accept_contact_request(
         });
     }
 
-    // Get an AUTHENTICATION key for signing the state transition
-    // Platform requires CRITICAL or HIGH security level for document creation
     let signing_key = identity
-        .identity
-        .get_first_public_key_matching(
-            Purpose::AUTHENTICATION,
-            HashSet::from([SecurityLevel::CRITICAL, SecurityLevel::HIGH]),
-            KeyType::all_key_types().into(),
-            false,
-        )
+        .document_action_signing_key(&app_context.dashpay_contract(), "contactRequest", None)
         .ok_or_else(|| TaskError::DashPay(DashPayError::MissingAuthenticationKey))?
         .clone();
 
@@ -1289,6 +1287,8 @@ mod tests {
             properties.insert("toUserId".to_string(), Value::Identifier(to.to_buffer()));
         }
         DppDocument::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: id(99),
             owner_id: owner,
             creator_id: None,
@@ -1319,7 +1319,7 @@ mod tests {
             operator: WhereOperator::Equal,
             value: Value::Text(value.to_string()),
         };
-        let mut query = DocumentQuery::new(ctx.dpns_contract.clone(), "domain")
+        let mut query = DocumentQuery::new(ctx.dpns_contract(), "domain")
             .expect("domain query")
             .with_where(equals("normalizedParentDomainName", "dash"))
             .with_where(equals("normalizedLabel", normalized));
diff --git a/src/backend_task/dashpay/contacts.rs b/src/backend_task/dashpay/contacts.rs
index 6de7aa6d1..642f1a18b 100644
--- a/src/backend_task/dashpay/contacts.rs
+++ b/src/backend_task/dashpay/contacts.rs
@@ -145,7 +145,7 @@ pub async fn load_contacts(
     identity: QualifiedIdentity,
 ) -> Result<BackendTaskSuccessResult, TaskError> {
     let identity_id = identity.identity.id();
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
 
     // Query for contact requests where we are the sender (ownerId)
     let mut outgoing_query = contact_request_query(app_context)?;
diff --git a/src/backend_task/dashpay/encryption.rs b/src/backend_task/dashpay/encryption.rs
index ca0f060fd..e6f11be17 100644
--- a/src/backend_task/dashpay/encryption.rs
+++ b/src/backend_task/dashpay/encryption.rs
@@ -1,10 +1,10 @@
 use aes_gcm::aes::Aes256;
 use bip39::rand::{self, RngCore};
 use cbc;
-use dash_sdk::dpp::dashcore::secp256k1::{PublicKey, Secp256k1, SecretKey};
 use dash_sdk::dpp::identity::IdentityPublicKey;
 use dash_sdk::dpp::identity::KeyType;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use dash_sdk::dpp::secp256k1::{PublicKey, SecretKey};
 use sha2::{Digest, Sha256};
 use zeroize::Zeroizing;
 
@@ -18,11 +18,13 @@ pub fn generate_ecdh_shared_key(
     private_key: &[u8],
     public_key: &IdentityPublicKey,
 ) -> Result<Zeroizing<[u8; 32]>, String> {
-    let _secp = Secp256k1::new();
-
     // Parse the private key
-    let secret_key =
-        SecretKey::from_slice(private_key).map_err(|e| format!("Invalid private key: {}", e))?;
+    let secret_key = SecretKey::from_secret_bytes(
+        private_key
+            .try_into()
+            .map_err(|_| "Invalid private key length".to_string())?,
+    )
+    .map_err(|e| format!("Invalid private key: {}", e))?;
 
     // Get the public key data - only works for full secp256k1 keys
     match public_key.key_type() {
@@ -34,7 +36,7 @@ pub fn generate_ecdh_shared_key(
             // Perform ECDH to get shared secret. The 64-byte point is secret;
             // hold it in `Zeroizing` so it is wiped once the key is hashed out.
             let shared_secret = Zeroizing::new(
-                dash_sdk::dpp::dashcore::secp256k1::ecdh::shared_secret_point(
+                dash_sdk::dpp::secp256k1::ecdh::shared_secret_point(
                     &public_key,
                     &secret_key,
                 ),
@@ -295,7 +297,7 @@ pub fn decrypt_account_label(
 mod tests {
     use super::*;
     use bip39::rand::{self, RngCore};
-    use dash_sdk::dpp::dashcore::secp256k1::{PublicKey, Secp256k1, SecretKey};
+    use dash_sdk::dpp::secp256k1::{PublicKey, SecretKey};
 
     fn generate_test_shared_key() -> [u8; 32] {
         let mut shared_key = [0u8; 32];
@@ -304,14 +306,13 @@ mod tests {
     }
 
     fn generate_test_key_pair() -> (SecretKey, PublicKey) {
-        let secp = Secp256k1::new();
-        let secret_key = SecretKey::from_slice(&[
+        let secret_key = SecretKey::from_secret_bytes([
             0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E,
             0x0F, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B, 0x1C,
             0x1D, 0x1E, 0x1F, 0x20,
         ])
         .unwrap();
-        let public_key = PublicKey::from_secret_key(&secp, &secret_key);
+        let public_key = PublicKey::from_secret_key(&secret_key);
         (secret_key, public_key)
     }
 
@@ -380,8 +381,6 @@ mod tests {
     /// wipes the sha2 digest) cannot silently alter the derived material.
     #[test]
     fn ecdh_shared_key_matches_pinned_vector() {
-        let secp = Secp256k1::new();
-
         // Our private key: 0x01..=0x20 (same fixed vector the suite uses).
         let private_key = [
             0x01u8, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E,
@@ -391,13 +390,13 @@ mod tests {
 
         // Counterpart key derived from a different fixed secret so the ECDH
         // point is non-degenerate.
-        let counterpart_secret = SecretKey::from_slice(&[
+        let counterpart_secret = SecretKey::from_secret_bytes([
             0xA1u8, 0xA2, 0xA3, 0xA4, 0xA5, 0xA6, 0xA7, 0xA8, 0xA9, 0xAA, 0xAB, 0xAC, 0xAD, 0xAE,
             0xAF, 0xB0, 0xB1, 0xB2, 0xB3, 0xB4, 0xB5, 0xB6, 0xB7, 0xB8, 0xB9, 0xBA, 0xBB, 0xBC,
             0xBD, 0xBE, 0xBF, 0xC0,
         ])
         .unwrap();
-        let counterpart_pub = PublicKey::from_secret_key(&secp, &counterpart_secret);
+        let counterpart_pub = PublicKey::from_secret_key(&counterpart_secret);
         let counterpart_ipk = ecdsa_identity_public_key(&counterpart_pub);
 
         let shared_key = generate_ecdh_shared_key(&private_key, &counterpart_ipk)
diff --git a/src/backend_task/dashpay/errors.rs b/src/backend_task/dashpay/errors.rs
index caa14ffaa..a8561ed0c 100644
--- a/src/backend_task/dashpay/errors.rs
+++ b/src/backend_task/dashpay/errors.rs
@@ -1,4 +1,4 @@
-use dash_sdk::dpp::dashcore::secp256k1;
+use dash_sdk::dpp::secp256k1;
 use dash_sdk::platform::Identifier;
 use thiserror::Error;
 
diff --git a/src/backend_task/dashpay/payments.rs b/src/backend_task/dashpay/payments.rs
index 31db1e4de..37d27de5e 100644
--- a/src/backend_task/dashpay/payments.rs
+++ b/src/backend_task/dashpay/payments.rs
@@ -92,7 +92,7 @@ pub async fn derive_contact_payment_address(
     contact_id: Identifier,
 ) -> Result<(Address, u32), String> {
     // Fetch the contact request from the contact to us (they sent us their encrypted xpub)
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
 
     let mut query = DocumentQuery::new(dashpay_contract.clone(), "contactRequest")
         .map_err(|e| format!("Failed to create query: {}", e))?;
@@ -185,8 +185,8 @@ pub async fn derive_contact_payment_address(
 
     // Create extended public key from components
     // This is simplified - in production you'd properly reconstruct with all fields
-    use dash_sdk::dpp::dashcore::secp256k1::{PublicKey, Secp256k1};
     use dash_sdk::dpp::key_wallet::bip32::{ChainCode, ChildNumber, ExtendedPubKey, Fingerprint};
+    use dash_sdk::dpp::secp256k1::{PublicKey, Secp256k1};
 
     let _secp = Secp256k1::new();
     let pubkey =
@@ -199,7 +199,7 @@ pub async fn derive_contact_payment_address(
         parent_fingerprint: Fingerprint::default(),
         child_number: ChildNumber::from_normal_idx(0)
             .expect("invariant: BIP32 child index 0 is below 2^31"),
-        public_key: pubkey,
+        public_key: pubkey.into(),
         chain_code: ChainCode::from(chain_code),
     };
 
diff --git a/src/backend_task/dashpay/profile.rs b/src/backend_task/dashpay/profile.rs
index f67569e0b..eb6605f89 100644
--- a/src/backend_task/dashpay/profile.rs
+++ b/src/backend_task/dashpay/profile.rs
@@ -21,7 +21,7 @@ pub async fn load_profile(
     let identity_id = identity.identity.id();
     let _operation = app_context.lock_identity_profile(identity_id).await;
     let name_revision = app_context.begin_identity_profile_load(identity_id);
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
 
     // Query for profile document owned by this identity
     let mut profile_query = DocumentQuery::new(dashpay_contract, "profile").map_err(|e| {
@@ -193,13 +193,12 @@ pub async fn update_profile(
             "Failed to cache the avatar fetched for a profile update"
         );
     }
-    let mut query =
-        DocumentQuery::new(app_context.dashpay_contract.clone(), "profile").map_err(|e| {
-            DashPayError::QueryCreation {
-                query_target: "DashPay profile",
-                source: Box::new(e.into()),
-            }
-        })?;
+    let mut query = DocumentQuery::new(app_context.dashpay_contract(), "profile").map_err(|e| {
+        DashPayError::QueryCreation {
+            query_target: "DashPay profile",
+            source: Box::new(e.into()),
+        }
+    })?;
     query = query.with_where(WhereClause {
         field: "$ownerId".to_string(),
         operator: WhereOperator::Equal,
@@ -321,7 +320,7 @@ pub async fn fetch_contact_profile(
     _identity: QualifiedIdentity, // May be needed for future privacy features
     contact_id: Identifier,
 ) -> Result<BackendTaskSuccessResult, TaskError> {
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
 
     // Query for the contact's profile document
     let mut query = DocumentQuery::new(dashpay_contract, "profile").map_err(|e| {
@@ -358,7 +357,7 @@ pub async fn search_profiles(
     sdk: &Sdk,
     search_query: String,
 ) -> Result<BackendTaskSuccessResult, TaskError> {
-    let dashpay_contract = app_context.dashpay_contract.clone();
+    let dashpay_contract = app_context.dashpay_contract();
     let mut results: Vec<(Identifier, Option<Document>, String)> = Vec::new();
 
     let query_trimmed = search_query.trim();
@@ -432,7 +431,7 @@ mod tests {
             "Alice",
             Value::Identifier(holder.to_buffer()),
         );
-        let mut prefix_query = DocumentQuery::new(ctx.dpns_contract.clone(), "domain")
+        let mut prefix_query = DocumentQuery::new(ctx.dpns_contract(), "domain")
             .expect("domain query")
             .with_where(WhereClause {
                 field: "normalizedParentDomainName".to_string(),
@@ -563,6 +562,8 @@ mod tests {
     fn profile_removal_is_rejected_instead_of_silently_retaining_fields() {
         for field in ["displayName", "publicMessage", "avatarUrl"] {
             let existing = Document::V0(dash_sdk::dpp::document::DocumentV0 {
+                moderated_at: None,
+                moderated_by: None,
                 properties: [(field.to_string(), Value::Text("existing value".into()))].into(),
                 ..Default::default()
             });
@@ -582,6 +583,8 @@ mod tests {
     #[test]
     fn profile_replacement_is_allowed_with_unchanged_optional_fields() {
         let existing = Document::V0(dash_sdk::dpp::document::DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             properties: [("displayName".to_string(), Value::Text("Alice".into()))].into(),
             ..Default::default()
         });
diff --git a/src/backend_task/document.rs b/src/backend_task/document.rs
index 59c8bfef9..c07e464ca 100644
--- a/src/backend_task/document.rs
+++ b/src/backend_task/document.rs
@@ -4,15 +4,21 @@ use crate::backend_task::{
     await_network_request_with_timeout,
 };
 use crate::context::AppContext;
+use crate::model::fee_estimation::checked_action_fee_agreement;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::request_type::RequestType;
+use dash_sdk::Error as SdkError;
 use dash_sdk::Sdk;
-use dash_sdk::dpp::data_contract::document_type::DocumentType;
 use dash_sdk::dpp::data_contract::document_type::accessors::DocumentTypeV0Getters;
+use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::DocumentActionFeeAgreement;
 use dash_sdk::dpp::document::{DocumentV0Getters, DocumentV0Setters};
 use dash_sdk::dpp::fee::Credits;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::tokens::token_payment_info::TokenPaymentInfo;
+use dash_sdk::dpp::{
+    data_contract::document_type::DocumentType,
+    state_transition::batch_transition::batched_transition::document_transition_action_type::DocumentTransitionActionType,
+};
 use dash_sdk::drive::query::SelectProjection;
 use dash_sdk::platform::documents::transitions::DocumentCreateResult;
 use dash_sdk::platform::documents::transitions::DocumentCreateTransitionBuilder;
@@ -43,6 +49,10 @@ pub enum DocumentTask {
         data_contract: Arc<DataContract>,
         qualified_identity: QualifiedIdentity,
         identity_key: IdentityPublicKey,
+        /// The document action fee the user was shown and agreed to (protocol
+        /// version 14). Required when the document type charges a fee for
+        /// the action: the backend never agrees on the user's behalf.
+        action_fee_agreement: Option<DocumentActionFeeAgreement>,
     },
     DeleteDocument {
         document_id: Identifier,
@@ -51,6 +61,10 @@ pub enum DocumentTask {
         qualified_identity: QualifiedIdentity,
         identity_key: IdentityPublicKey,
         token_payment_info: Option<TokenPaymentInfo>,
+        /// The document action fee the user was shown and agreed to (protocol
+        /// version 14). Required when the document type charges a fee for
+        /// the action: the backend never agrees on the user's behalf.
+        action_fee_agreement: Option<DocumentActionFeeAgreement>,
     },
     ReplaceDocument {
         document: Document,
@@ -59,6 +73,10 @@ pub enum DocumentTask {
         qualified_identity: QualifiedIdentity,
         identity_key: IdentityPublicKey,
         token_payment_info: Option<TokenPaymentInfo>,
+        /// The document action fee the user was shown and agreed to (protocol
+        /// version 14). Required when the document type charges a fee for
+        /// the action: the backend never agrees on the user's behalf.
+        action_fee_agreement: Option<DocumentActionFeeAgreement>,
     },
     TransferDocument {
         document_id: Identifier,
@@ -68,6 +86,10 @@ pub enum DocumentTask {
         qualified_identity: QualifiedIdentity,
         identity_key: IdentityPublicKey,
         token_payment_info: Option<TokenPaymentInfo>,
+        /// The document action fee the user was shown and agreed to (protocol
+        /// version 14). Required when the document type charges a fee for
+        /// the action: the backend never agrees on the user's behalf.
+        action_fee_agreement: Option<DocumentActionFeeAgreement>,
     },
     PurchaseDocument {
         price: Credits,
@@ -77,6 +99,10 @@ pub enum DocumentTask {
         qualified_identity: QualifiedIdentity,
         identity_key: IdentityPublicKey,
         token_payment_info: Option<TokenPaymentInfo>,
+        /// The document action fee the user was shown and agreed to (protocol
+        /// version 14). Required when the document type charges a fee for
+        /// the action: the backend never agrees on the user's behalf.
+        action_fee_agreement: Option<DocumentActionFeeAgreement>,
     },
     SetDocumentPrice {
         price: Credits,
@@ -86,6 +112,10 @@ pub enum DocumentTask {
         qualified_identity: QualifiedIdentity,
         identity_key: IdentityPublicKey,
         token_payment_info: Option<TokenPaymentInfo>,
+        /// The document action fee the user was shown and agreed to (protocol
+        /// version 14). Required when the document type charges a fee for
+        /// the action: the backend never agrees on the user's behalf.
+        action_fee_agreement: Option<DocumentActionFeeAgreement>,
     },
     FetchDocuments(DocumentQuery),
     FetchDocumentsPage(DocumentQuery),
@@ -102,6 +132,7 @@ impl AppContext {
         document_id: Identifier,
     ) -> Result<Document, TaskError> {
         let document_query = DocumentQuery {
+            integer_range_clauses: vec![],
             sub_queries: Vec::new(),
             select: SelectProjection::documents(),
             data_contract,
@@ -132,6 +163,22 @@ impl AppContext {
         &self,
         task: DocumentTask,
         sdk: &Sdk,
+    ) -> Result<BackendTaskSuccessResult, TaskError> {
+        match self.run_document_task_inner(task, sdk).await {
+            // The multiplier the refusal names is unproven node data: it only
+            // triggers a proved epoch refresh, never feeds the cache itself.
+            Err(refusal @ TaskError::DocumentActionFeeMultiplierRose { .. }) => {
+                let refreshed = self.refresh_current_epoch(sdk).await.map(|_| ());
+                Err(fee_refusal_after_refresh(refusal, refreshed))
+            }
+            result => result,
+        }
+    }
+
+    async fn run_document_task_inner(
+        &self,
+        task: DocumentTask,
+        sdk: &Sdk,
     ) -> Result<BackendTaskSuccessResult, TaskError> {
         match task {
             DocumentTask::FetchDocuments(document_query) => await_network_request_with_timeout(
@@ -191,7 +238,14 @@ impl AppContext {
                 data_contract,
                 qualified_identity,
                 identity_key,
+                action_fee_agreement,
             } => {
+                let contest_fund = crate::model::fee_estimation::document_create_contest_fund_cap(
+                    document_type.as_ref(),
+                    &document,
+                    sdk.version(),
+                )
+                .map_err(|error| dash_sdk::Error::Protocol(*error))?;
                 let mut builder = DocumentCreateTransitionBuilder::new(
                     data_contract,
                     document_type.name().to_string(),
@@ -203,10 +257,24 @@ impl AppContext {
                     builder = builder.with_token_payment_info(token_payment);
                 }
 
-                let maybe_options = self.state_transition_options();
+                let mut maybe_options = self.state_transition_options();
+                if let Some(cap) = contest_fund {
+                    maybe_options
+                        .get_or_insert_with(Default::default)
+                        .contest_fund = Some(cap);
+                }
                 if let Some(options) = maybe_options {
                     builder = builder.with_state_transition_creation_options(options);
                 }
+                // After the options: setting them replaces the struct the
+                // agreement is kept in.
+                if let Some(agreement) = checked_action_fee_agreement(
+                    document_type.as_ref(),
+                    DocumentTransitionActionType::Create,
+                    action_fee_agreement,
+                )? {
+                    builder = builder.with_action_fee_agreement(agreement);
+                }
 
                 let result = sdk
                     .document_create(builder, &identity_key, &qualified_identity)
@@ -229,6 +297,7 @@ impl AppContext {
                 qualified_identity,
                 identity_key,
                 token_payment_info,
+                action_fee_agreement,
             } => {
                 let mut builder = DocumentDeleteTransitionBuilder::new(
                     data_contract,
@@ -245,6 +314,15 @@ impl AppContext {
                 if let Some(options) = maybe_options {
                     builder = builder.with_state_transition_creation_options(options);
                 }
+                // After the options: setting them replaces the struct the
+                // agreement is kept in.
+                if let Some(agreement) = checked_action_fee_agreement(
+                    document_type.as_ref(),
+                    DocumentTransitionActionType::Delete,
+                    action_fee_agreement,
+                )? {
+                    builder = builder.with_action_fee_agreement(agreement);
+                }
 
                 let result = sdk
                     .document_delete(builder, &identity_key, &qualified_identity)
@@ -269,6 +347,7 @@ impl AppContext {
                 qualified_identity,
                 identity_key,
                 token_payment_info,
+                action_fee_agreement,
             } => {
                 let mut builder = DocumentReplaceTransitionBuilder::new(
                     data_contract,
@@ -284,6 +363,15 @@ impl AppContext {
                 if let Some(options) = maybe_options {
                     builder = builder.with_state_transition_creation_options(options);
                 }
+                // After the options: setting them replaces the struct the
+                // agreement is kept in.
+                if let Some(agreement) = checked_action_fee_agreement(
+                    document_type.as_ref(),
+                    DocumentTransitionActionType::Replace,
+                    action_fee_agreement,
+                )? {
+                    builder = builder.with_action_fee_agreement(agreement);
+                }
 
                 let result = sdk
                     .document_replace(builder, &identity_key, &qualified_identity)
@@ -309,6 +397,7 @@ impl AppContext {
                 qualified_identity,
                 identity_key,
                 token_payment_info,
+                action_fee_agreement,
             } => {
                 let document = self
                     .fetch_document_for_mutation(
@@ -334,6 +423,15 @@ impl AppContext {
                 if let Some(options) = maybe_options {
                     builder = builder.with_state_transition_creation_options(options);
                 }
+                // After the options: setting them replaces the struct the
+                // agreement is kept in.
+                if let Some(agreement) = checked_action_fee_agreement(
+                    document_type.as_ref(),
+                    DocumentTransitionActionType::Transfer,
+                    action_fee_agreement,
+                )? {
+                    builder = builder.with_action_fee_agreement(agreement);
+                }
 
                 let result = sdk
                     .document_transfer(builder, &identity_key, &qualified_identity)
@@ -359,6 +457,7 @@ impl AppContext {
                 qualified_identity,
                 identity_key,
                 token_payment_info,
+                action_fee_agreement,
             } => {
                 let document = self
                     .fetch_document_for_mutation(
@@ -385,6 +484,15 @@ impl AppContext {
                 if let Some(options) = maybe_options {
                     builder = builder.with_state_transition_creation_options(options);
                 }
+                // After the options: setting them replaces the struct the
+                // agreement is kept in.
+                if let Some(agreement) = checked_action_fee_agreement(
+                    document_type.as_ref(),
+                    DocumentTransitionActionType::Purchase,
+                    action_fee_agreement,
+                )? {
+                    builder = builder.with_action_fee_agreement(agreement);
+                }
 
                 let result = sdk
                     .document_purchase(builder, &identity_key, &qualified_identity)
@@ -410,6 +518,7 @@ impl AppContext {
                 qualified_identity,
                 identity_key,
                 token_payment_info,
+                action_fee_agreement,
             } => {
                 let document = self
                     .fetch_document_for_mutation(
@@ -435,6 +544,15 @@ impl AppContext {
                 if let Some(options) = maybe_options {
                     builder = builder.with_state_transition_creation_options(options);
                 }
+                // After the options: setting them replaces the struct the
+                // agreement is kept in.
+                if let Some(agreement) = checked_action_fee_agreement(
+                    document_type.as_ref(),
+                    DocumentTransitionActionType::UpdatePrice,
+                    action_fee_agreement,
+                )? {
+                    builder = builder.with_action_fee_agreement(agreement);
+                }
 
                 let result = sdk
                     .document_set_price(builder, &identity_key, &qualified_identity)
@@ -456,8 +574,78 @@ impl AppContext {
     }
 }
 
+/// The error to report for a fee multiplier refusal once the proved epoch
+/// refresh it triggered has finished: the refusal itself when the cache now
+/// holds the network's multiplier, otherwise a variant saying the contract
+/// fee could not be updated (the cache keeps its previous value).
+fn fee_refusal_after_refresh(
+    refusal: TaskError,
+    refreshed: Result<(), Box<SdkError>>,
+) -> TaskError {
+    match (refusal, refreshed) {
+        (refusal, Ok(())) => refusal,
+        (
+            TaskError::DocumentActionFeeMultiplierRose {
+                increase_tolerance_percent,
+                source_error,
+                ..
+            },
+            Err(refresh_error),
+        ) => {
+            tracing::warn!(
+                refusal = ?source_error,
+                "Network refused a document action for a risen fee multiplier"
+            );
+            TaskError::DocumentActionFeeMultiplierNotRefreshed {
+                increase_tolerance_percent,
+                source_error: refresh_error,
+            }
+        }
+        (other, Err(_)) => other,
+    }
+}
+
 #[cfg(test)]
 mod tests {
+    fn fee_refusal() -> TaskError {
+        TaskError::DocumentActionFeeMultiplierRose {
+            known_fee_multiplier_permille: 1000,
+            current_fee_multiplier_permille: 1500,
+            increase_tolerance_percent: 20,
+            source_error: Box::new(dash_sdk::Error::Generic("rose".to_string())),
+        }
+    }
+
+    /// After a proved refresh the refusal is reported as is: the cache holds
+    /// the network's multiplier, so trying again quotes the current fee.
+    #[test]
+    fn a_fee_refusal_stands_once_the_epoch_is_refreshed() {
+        let error = fee_refusal_after_refresh(fee_refusal(), Ok(()));
+        assert!(matches!(
+            error,
+            TaskError::DocumentActionFeeMultiplierRose { .. }
+        ));
+        assert!(error.to_string().contains("has been updated"));
+    }
+
+    /// When the proved refresh fails, the user is told the contract fee
+    /// could not be updated rather than that it was.
+    #[test]
+    fn a_failed_epoch_refresh_says_the_fee_was_not_updated() {
+        let error = fee_refusal_after_refresh(
+            fee_refusal(),
+            Err(Box::new(dash_sdk::Error::Generic("offline".to_string()))),
+        );
+        assert!(matches!(
+            error,
+            TaskError::DocumentActionFeeMultiplierNotRefreshed {
+                increase_tolerance_percent: 20,
+                ..
+            }
+        ));
+        assert!(error.to_string().contains("could not be updated"));
+    }
+
     use super::*;
 
     #[tokio::test]
diff --git a/src/backend_task/error.rs b/src/backend_task/error.rs
index fb6cb61a6..444e1d9c6 100644
--- a/src/backend_task/error.rs
+++ b/src/backend_task/error.rs
@@ -14,9 +14,12 @@ use dash_sdk::dashcore_rpc;
 use dash_sdk::dpp::ProtocolError;
 use dash_sdk::dpp::consensus::ConsensusError;
 use dash_sdk::dpp::consensus::basic::basic_error::BasicError;
+use dash_sdk::dpp::consensus::signature::SignatureError;
 use dash_sdk::dpp::consensus::state::state_error::StateError;
 use dash_sdk::dpp::dashcore;
 use dash_sdk::dpp::dashcore::Network;
+use dash_sdk::dpp::fee::Credits;
+use dash_sdk::dpp::identity::KeyID;
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
 use dash_sdk::platform::Identifier;
 use platform_wallet::wallet::asset_lock::tracked::TrackedAssetLock;
@@ -43,6 +46,108 @@ impl DapiAddressAvailability {
     }
 }
 
+/// The token operation a wallet-runtime token failure belongs to.
+///
+/// Upstream `PlatformWalletError::TokenOperationFailed` names the operation with
+/// a fixed `&'static str` label (a discriminator, not a message); this is its
+/// typed form, so each failure gets a complete, translatable sentence.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum TokenOperationKind {
+    Claim,
+    Mint,
+    Burn,
+    Transfer,
+    Freeze,
+    Unfreeze,
+    DestroyFrozenFunds,
+    Pause,
+    Resume,
+    SetPrice,
+    Purchase,
+    ConfigUpdate,
+    /// A label this build does not know (a newer upstream operation). The
+    /// raw label is kept for `Debug` and logs, never shown to the user.
+    Unrecognized {
+        label: &'static str,
+    },
+}
+
+impl TokenOperationKind {
+    /// The kind for the operation label upstream puts in
+    /// `PlatformWalletError::TokenOperationFailed::operation`.
+    ///
+    /// Upstream exposes the operation only as this `&'static str` (no typed
+    /// enum), so every label it uses is matched here; an unknown one is
+    /// logged at warn and kept as [`Self::Unrecognized`], never silently
+    /// folded into another operation.
+    pub fn from_upstream_label(label: &'static str) -> Self {
+        match label {
+            "claim" => Self::Claim,
+            "mint" => Self::Mint,
+            "burn" => Self::Burn,
+            "transfer" => Self::Transfer,
+            "freeze" => Self::Freeze,
+            "unfreeze" => Self::Unfreeze,
+            "destroy frozen funds" => Self::DestroyFrozenFunds,
+            "pause" => Self::Pause,
+            "resume" => Self::Resume,
+            "set price" => Self::SetPrice,
+            "purchase" => Self::Purchase,
+            "config update" => Self::ConfigUpdate,
+            label => {
+                tracing::warn!(
+                    label,
+                    "Unrecognized upstream token operation label; showing a generic message"
+                );
+                Self::Unrecognized { label }
+            }
+        }
+    }
+
+    /// The user-facing sentence for a failure of this operation.
+    fn failure_message(self) -> &'static str {
+        match self {
+            Self::Claim => "The token claim did not complete. Check your connection and try again.",
+            Self::Mint => {
+                "Minting the tokens did not complete. Check your connection and try again."
+            }
+            Self::Burn => {
+                "Burning the tokens did not complete. Check your connection and try again."
+            }
+            Self::Transfer => {
+                "The token transfer did not complete. Check your connection and try again."
+            }
+            Self::Freeze => {
+                "Freezing the token account did not complete. Check your connection and try again."
+            }
+            Self::Unfreeze => {
+                "Unfreezing the token account did not complete. Check your connection and try again."
+            }
+            Self::DestroyFrozenFunds => {
+                "Destroying the frozen tokens did not complete. Check your connection and try again."
+            }
+            Self::Pause => {
+                "Pausing the token did not complete. Check your connection and try again."
+            }
+            Self::Resume => {
+                "Resuming the token did not complete. Check your connection and try again."
+            }
+            Self::SetPrice => {
+                "Setting the token price did not complete. Check your connection and try again."
+            }
+            Self::Purchase => {
+                "The token purchase did not complete. Check your connection and try again."
+            }
+            Self::ConfigUpdate => {
+                "Updating the token settings did not complete. Check your connection and try again."
+            }
+            Self::Unrecognized { .. } => {
+                "The token operation did not complete. Check your connection and try again."
+            }
+        }
+    }
+}
+
 /// Why an existing DashPay `contactInfo` payload could not be preserved.
 #[derive(Debug, Error)]
 pub enum ContactInfoReadError {
@@ -2397,248 +2502,783 @@ pub enum TaskError {
     },
 
     // ──────────────────────────────────────────────────────────────────────────
-    // Token query errors
+    // Signing key limits and contract bounds (protocol version 14)
     // ──────────────────────────────────────────────────────────────────────────
-    /// Querying token data from the platform failed.
-    #[error("Could not retrieve token information from the platform. Please retry.")]
-    TokenQueryError { detail: String },
-
-    /// The token does not have a perpetual distribution configured — no rewards to claim.
-    #[error("This token does not have perpetual distribution, so there are no rewards to claim.")]
-    TokenNoPerpetualDistribution,
-
-    /// The recipient identity does not exist on Platform (e.g. during a token mint).
+    /// The signing key's expiry time has passed.
     #[error(
-        "The recipient identity `{recipient_id}` does not exist on the platform. \
-         Check the ID and try again, or create the identity first."
+        "The key used to sign this action expired and can no longer sign. Choose a different key, or add a new key to this identity, then try again."
     )]
-    TokenRecipientIdentityNotFound {
-        recipient_id: String,
+    SigningKeyExpired {
+        key_id: KeyID,
+        /// When the key expired, in milliseconds since the Unix epoch.
+        expired_at_ms: u64,
         #[source]
         source_error: Box<SdkError>,
     },
 
-    /// The identity's token account is not frozen, so an unfreeze / destroy-frozen action
-    /// cannot proceed.
+    /// The signing key has spent its whole budget.
     #[error(
-        "Identity `{identity_id}` is not frozen for token `{token_id}`, so `{action}` cannot proceed. \
-         Refresh the frozen-account list and try again."
+        "The key used to sign this action has used up its spending limit and can no longer sign. Raise the key's spending limit or choose a different key, then try again."
     )]
-    TokenAccountNotFrozen {
-        identity_id: String,
-        token_id: String,
-        action: String,
+    SigningKeyBudgetExhausted {
+        key_id: KeyID,
         #[source]
         source_error: Box<SdkError>,
     },
 
-    // ──────────────────────────────────────────────────────────────────────────
-    // Contract schema errors
-    // ──────────────────────────────────────────────────────────────────────────
-    /// The contract structure does not match expectations (e.g. missing contested index).
-    #[error("The contract structure is unexpected. Please update the application.")]
-    ContractSchemaMismatch { detail: &'static str },
-
-    /// Platform returned a different contract after accepting an update.
+    /// The action costs more than the signing key's remaining budget.
     #[error(
-        "The platform returned contract {returned} instead of {expected}. Please try the update again."
+        "This action costs {required_dash}, but the key used to sign it has only {remaining_dash} of its spending limit left. Raise the key's spending limit or choose a different key, then try again.",
+        required_dash = format_credits_as_dash(*.required_budget),
+        remaining_dash = format_credits_as_dash(*.remaining_budget)
     )]
-    UpdatedContractIdMismatch {
-        expected: Identifier,
-        returned: Identifier,
+    SigningKeyBudgetExceeded {
+        key_id: KeyID,
+        remaining_budget: Credits,
+        required_budget: Credits,
+        #[source]
+        source_error: Box<SdkError>,
     },
 
-    // ──────────────────────────────────────────────────────────────────────────
-    // Withdrawal document parsing errors
-    // ──────────────────────────────────────────────────────────────────────────
-    /// A withdrawal document could not be fully read (missing timestamp, invalid status, etc.).
+    /// A contract-bound key signed something outside its contract bounds.
     #[error(
-        "Could not read the withdrawal details. The data may be incomplete or in an unexpected format. Please retry."
+        "The key used to sign this action is limited to other contracts or documents, so it cannot sign this one. Choose a different key, then try again."
     )]
-    WithdrawalDocumentParsingError(
-        #[from] crate::backend_task::platform_info::WithdrawalParseError,
-    ),
+    SigningKeyOutOfContractBounds {
+        key_id: KeyID,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    // ──────────────────────────────────────────────────────────────────────────
-    // SDK / RPC setup errors
-    // ──────────────────────────────────────────────────────────────────────────
-    /// The Dash Platform SDK could not be initialised with the current config,
-    /// or a context provider could not be bound to the current AppContext.
+    /// A contract-bound key signed an action that is not a document or token
+    /// operation.
     #[error(
-        "Could not connect to the Dash network. Please check your network settings and restart the application."
+        "The key used to sign this action is limited to one contract, so it cannot sign this kind of action. Choose a key that is not limited to a contract, then try again."
     )]
-    SdkInitializationFailed { detail: String },
-
-    /// The Core wallet name supplied by the user is syntactically invalid.
-    #[error("The Core wallet name '{name}' is invalid. Please check your wallet configuration.")]
-    InvalidCoreWalletName { name: String },
+    SigningKeyContractBoundForNonBatch {
+        key_id: KeyID,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// Dash Core has no wallets loaded — required for wallet-scoped RPC calls.
-    #[error("No wallets are loaded in Dash Core. Please open a wallet in Dash Core and retry.")]
-    NoCoreWalletsLoaded,
+    /// Key limits were requested that do not pass validation.
+    #[error(transparent)]
+    InvalidKeyLimits {
+        #[from]
+        source: crate::model::identity_key_limits::KeyLimitsError,
+    },
 
-    // ──────────────────────────────────────────────────────────────────────────
-    // Wallet key / address errors
-    // ──────────────────────────────────────────────────────────────────────────
-    /// A private key for a wallet address could not be found or derived.
+    /// An identity this device holds is not on the network (e.g. it was
+    /// never registered, or the network was reset).
     #[error(
-        "Could not find the key for this address in your wallet. Please check your wallet and retry."
+        "This identity could not be found on the network. Refresh the identity, then try again."
     )]
-    WalletKeyLookupFailed,
+    IdentityMissingOnNetwork { identity_id: Identifier },
 
-    /// A wallet-key derivation was requested at the empty derivation path. The
-    /// empty path IS the BIP-32 root, so deriving there yields the wallet's
-    /// master key rather than an address key — refused at the chokepoint every
-    /// key-bearing wallet task shares, never at an individual caller.
+    /// The key to change is not among the identity's keys on the network.
     #[error(
-        "This address has no known derivation path, so its private key cannot be shown or used. Choose an address with a known derivation path."
+        "This key is no longer part of the identity on the network. Refresh the identity to see its current keys."
     )]
-    RootKeyDerivationRefused,
+    IdentityKeyNotFound { key_id: KeyID },
 
-    /// A wallet address or identity-auth key could not be derived. The upstream
-    /// detail (a legacy `String`) is logged at the call site, never stored here.
-    #[error("Could not generate a wallet address. Please check your wallet and retry.")]
-    WalletAddressDerivationFailed,
+    /// Key limits were requested on a network whose protocol version does not
+    /// support them yet.
+    #[error(
+        "This network does not support spending limits or expiry for keys yet. Add the key without limits, or try again after the network upgrades."
+    )]
+    KeyLimitsNotSupported,
 
-    /// A new Platform (DIP-17/18) receive address could not be derived or
-    /// registered. The underlying detail is logged, never shown to the user.
-    #[error("Could not generate a Platform receive address. Please check your wallet and retry.")]
-    WalletPlatformReceiveAddressFailed,
+    /// Remaining key budgets were requested from a network whose protocol
+    /// version does not track them yet.
+    #[error(
+        "This network does not track key spending limits yet. Try again after the network upgrades."
+    )]
+    KeyRemainingBudgetsNotSupported,
 
-    /// Signing a message with a wallet-derived key failed during derivation or
-    /// signing. The underlying detail is logged, never shown to the user.
-    #[error("Could not sign the message. Please check your wallet and retry.")]
-    WalletMessageSigningFailed,
+    /// An authentication key bound to a contract was requested on a network
+    /// that does not accept one yet.
+    #[error(
+        "This network does not support limiting an authentication key to one contract yet. Add the key without contract bounds, or try again after the network upgrades."
+    )]
+    ContractBoundAuthenticationKeysNotSupported,
 
-    /// The selected key type cannot be used to sign a message in this tool.
-    #[error("This key type cannot sign a message. Please choose an ECDSA key and try again.")]
-    WalletMessageSignUnsupportedKeyType,
+    /// No key this device holds may sign a key limits update: that takes a
+    /// MASTER key, or a CRITICAL authentication key with no limits and no
+    /// contract bounds.
+    #[error(
+        "Changing key limits needs this identity's master key, or a critical key without limits. Import one of them on this device, then try again."
+    )]
+    NoKeyLimitsSigningKey,
 
-    // ──────────────────────────────────────────────────────────────────────────
-    // Payment errors
-    // ──────────────────────────────────────────────────────────────────────────
-    /// A recipient address could not be parsed or is invalid.
-    #[error("The recipient address '{address}' is not valid. Please check the address and retry.")]
-    InvalidRecipientAddress {
-        address: String,
+    /// A key limits update was accepted on the network, but storing the
+    /// updated key on this device afterward failed. The broadcast and the
+    /// local write cannot be atomic; this reports the change as made rather
+    /// than as failed, so the user does not retry a change already applied.
+    #[error(
+        "The key's new limits are set on the network, but they could not be saved on this device. Refresh the identity to load them."
+    )]
+    KeyLimitsRaisedButNotSaved {
         #[source]
-        source: dashcore::address::Error,
+        source: Box<TaskError>,
     },
 
-    /// A recipient address was parsed but does not match the current network.
+    /// A key limits update was accepted on the network and the updated key
+    /// is stored on this device, but the identity's balance after the fee
+    /// could not be read. The stored balance is the one before the update.
+    /// `source` is `None` when Platform reported no balance for the identity.
     #[error(
-        "The address does not match the current network. Please check that you are on the correct network."
+        "The key's new limits are set, but the identity's new balance could not be read. Refresh the identity to see its balance."
     )]
-    AddressNetworkMismatch {
+    KeyLimitsRaisedButBalanceNotRefreshed {
         #[source]
-        source: dashcore::address::Error,
+        source: Option<Box<TaskError>>,
     },
 
-    /// The payment had no recipients. A transaction must pay at least one
-    /// address, so the request is rejected before any funds move.
-    #[error("Add at least one recipient before sending a payment.")]
-    PaymentNoRecipients,
-
-    /// Tracked-lock funding was invoked with no recipients. The UI always
-    /// supplies at least one, so this is a caller-contract violation (a future
-    /// programmatic caller, not a normal user action) rejected before any
-    /// pool-membership lookup or broadcast.
-    #[error("No funding recipients were provided for this asset lock.")]
-    NoFundingRecipients,
-
-    /// A recipient was given a zero amount. Sending nothing wastes the network
-    /// fee and is almost always a slip, so it is rejected up front.
-    #[error("Enter an amount greater than zero for every recipient, then try again.")]
-    PaymentZeroAmount,
-
-    /// The wallet has no UTXOs available to cover the payment.
-    #[error("Your wallet has no available funds to spend. Please receive some Dash first.")]
-    NoUtxosAvailable,
-
-    /// The wallet balance is too low to cover the requested amount plus fees.
+    /// Platform refused a key whose expiry is not in the future.
     #[error(
-        "You do not have enough Dash. You have {available} duffs but need {required} duffs. Please add more funds and retry."
+        "The key's expiry is already in the past, so the network refused the change. Choose a later expiry, then try again."
     )]
-    InsufficientFunds { available: u64, required: u64 },
+    KeyExpiryInPast {
+        key_id: KeyID,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// The output amount is smaller than the transaction fee.
+    /// Platform refused a limits update that does not raise the stored limit,
+    /// typically because the key changed since it was loaded.
     #[error(
-        "The amount is too small to cover the {fee} duff transaction fee. Please send a larger amount."
+        "The key's limits have changed since they were loaded, so the new value would not raise them. Refresh the identity, then try again."
     )]
-    OutputTooSmallForFee { fee: u64 },
+    KeyLimitNotRaised {
+        key_id: KeyID,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// A signature hash for a transaction input could not be computed.
-    #[error("Could not sign the transaction. Please retry.")]
-    SighashComputationFailed {
+    /// Platform refused raising a limit the key does not have.
+    #[error(
+        "This key does not have that limit, and a limit can only be raised, not added. Refresh the identity to see the key's current limits."
+    )]
+    KeyLimitNotSet {
+        key_id: KeyID,
         #[source]
-        source: dashcore::sighash::Error,
+        source_error: Box<SdkError>,
     },
 
-    /// Could not access wallet information from the SPV manager.
-    #[error("Your wallet is still loading. Please wait a moment and try again.")]
-    WalletInfoUnavailable,
+    /// A key with limits was used to sign a key limits update.
+    #[error(
+        "A key with its own spending limit or expiry cannot change key limits. Use the identity's master key instead, then try again."
+    )]
+    KeyLimitsSignerHasLimits {
+        key_id: KeyID,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// Expected BIP44 account not found at the given index.
-    #[error("Your wallet needs to be refreshed before sending. Please refresh and try again.")]
-    MissingBip44Account { index: u32 },
+    /// Platform refused limits on a key that may not carry them, a zero
+    /// budget, or a limits update that changes nothing.
+    #[error(
+        "The network refused these key limits. Only authentication keys below the master level can have them, and a spending limit must be above zero. Adjust the limits, then try again."
+    )]
+    KeyLimitsRefused {
+        key_id: KeyID,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// Could not derive a change address from the wallet account.
-    #[error("Could not prepare the transaction. Please refresh your wallet and try again.")]
-    ChangeAddressDerivation {
+    /// The key to change is disabled.
+    #[error("This key is disabled, so it cannot be used or changed. Choose a different key.")]
+    IdentityKeyDisabled {
+        key_id: KeyID,
         #[source]
-        source: dash_sdk::dpp::key_wallet::Error,
+        source_error: Box<SdkError>,
     },
 
     // ──────────────────────────────────────────────────────────────────────────
-    // Token query errors (identity / recipient validation)
+    // Document action fees, moderation and gas sponsorship (protocol version 14)
     // ──────────────────────────────────────────────────────────────────────────
-    /// No local identities are registered — a prerequisite for token queries.
-    #[error("No registered identities found. Please register an identity first.")]
-    NoIdentitiesFound,
+    /// A document action's fee agreement is missing or names another fee
+    /// than the document type declares; refused before anything is signed.
+    #[error(transparent)]
+    ActionFeeAgreement {
+        #[from]
+        source: crate::model::fee_estimation::ActionFeeAgreementError,
+    },
 
-    /// The current identity is not the contract owner who can claim this token's distribution.
+    /// The document type charges an action fee and the transition carried no
+    /// agreement to it.
     #[error(
-        "This token distribution can only be claimed by the contract owner ({contract_owner}). Your identity is not the contract owner."
+        "This contract charges a fee for this action, and the request did not include your agreement to it. Try again and confirm the contract fee when asked."
     )]
-    NotContractOwner { contract_owner: String },
+    DocumentActionFeeNotAgreed {
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// The current identity is not the specific identity designated as the token distribution recipient.
+    /// The fee the transition agreed to differs from the one the document
+    /// type declares, typically because the contract changed meanwhile.
     #[error(
-        "This token distribution can only be claimed by the designated recipient ({designated_recipient}). Your identity is not the designated recipient."
+        "The contract fee for this action is not the one you agreed to, because the contract changed. Reload the contract to see its current fee, then try again."
     )]
-    NotDesignatedTokenRecipient { designated_recipient: String },
+    DocumentActionFeeChanged {
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// The current identity is not an evonode, which is required for this token distribution.
+    /// Network fees rose past the increase the fee agreement tolerates.
+    /// Reported only after a proved epoch refresh updated the cached fee
+    /// multiplier; the node-reported multipliers here are unproven and are
+    /// never adopted (see `DocumentActionFeeMultiplierNotRefreshed`).
     #[error(
-        "This token distribution is only for evonode identities. Your identity is not registered as an evonode."
+        "Network fees rose by more than {increase_tolerance_percent}% since you confirmed the contract fee, so the network refused the action. The contract fee has been updated to the current network fees. Try again to see and confirm the new amount."
     )]
-    NotEvonode,
+    DocumentActionFeeMultiplierRose {
+        known_fee_multiplier_permille: u64,
+        current_fee_multiplier_permille: u64,
+        increase_tolerance_percent: u16,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    // ──────────────────────────────────────────────────────────────────────────
-    // Wallet-based identity loading errors
-    // ──────────────────────────────────────────────────────────────────────────
-    /// No on-chain identity was found for the requested wallet derivation index.
+    /// A document action was refused because network fees rose, and the
+    /// proved refresh of the current fees failed, so the cached fee
+    /// multiplier (and the next quote) keeps its previous value.
     #[error(
-        "Could not find an identity for wallet index {identity_index} after checking {auth_key_count} keys. Try expanding the search range."
+        "Network fees rose by more than {increase_tolerance_percent}% since you confirmed the contract fee, so the network refused the action. The current network fees could not be loaded, so the contract fee could not be updated. Check your connection, wait a moment, and then try again."
     )]
-    WalletIdentityNotFound {
-        identity_index: u32,
-        auth_key_count: usize,
+    DocumentActionFeeMultiplierNotRefreshed {
+        increase_tolerance_percent: u16,
+        /// Why the proved epoch refresh failed.
+        #[source]
+        source_error: Box<SdkError>,
     },
 
-    /// The identity returned by the platform does not contain the queried authentication key.
+    /// The identity is banned on the contract.
     #[error(
-        "The identity retrieved does not match your wallet key. Please check you are using the correct wallet."
+        "This identity is banned from contract {} and cannot act on its documents. Use a different identity for this contract.",
+        contract_id.to_string(Encoding::Base58)
     )]
-    WalletIdentityKeyMismatch,
+    ContractUserBanned {
+        contract_id: Identifier,
+        identity_id: Identifier,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// None of the identity's public keys could be matched to wallet derivation paths.
+    /// The identity is suspended on the contract until a given time.
     #[error(
-        "Could not match any identity keys to your wallet. Please check your wallet and retry."
+        "This identity is suspended from contract {} until {}. Wait until then, or use a different identity for this contract.",
+        contract_id.to_string(Encoding::Base58),
+        crate::model::datetime::local_date_time_from_unix_millis(*until_ms)
     )]
-    NoMatchingWalletKeys,
+    ContractUserSuspended {
+        contract_id: Identifier,
+        identity_id: Identifier,
+        /// End of the suspension, in milliseconds since the Unix epoch.
+        until_ms: u64,
+        #[source]
+        source_error: Box<SdkError>,
+    },
 
-    /// The derivation path for the queried identity key was not found in the wallet.
+    /// The contract owner sponsoring the gas cannot cover it.
+    #[error(
+        "The contract owner pays the network fee for this action but does not have enough credits for it right now. Try again later."
+    )]
+    GasSponsorInsufficientBalance {
+        sponsor_id: Identifier,
+        balance: Credits,
+        required_balance: Credits,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The transition asked for a gas payer the document type does not offer.
+    #[error(
+        "This document type does not let that party pay the network fee for this action. Pay the fee as the document type allows, then try again."
+    )]
+    GasFeesPaidByNotAllowed {
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The transitions of one batch named different gas payers.
+    #[error(
+        "The actions in this request name different payers for the network fee. Send them one at a time, then try again."
+    )]
+    InconsistentGasFeesPayerInBatch {
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Username, vote and token transfer refusals (protocol versions 14 and 15)
+    // ──────────────────────────────────────────────────────────────────────────
+    /// The contest for the requested name already holds the most contenders it
+    /// accepts.
+    #[error(
+        "Too many people have already asked for this username, so no one else can join. Choose a different username."
+    )]
+    DocumentContestContendersLimitReached {
+        max_contenders: u16,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The token cannot be moved to another identity, so a transfer, or a
+    /// payment that moves it, is refused.
+    #[error(
+        "Token {} cannot be moved to another identity, so this action is not possible. Use a different token.",
+        token_id.to_string(Encoding::Base58)
+    )]
+    TokenNotTransferable {
+        token_id: Identifier,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The vote choice is not allowed for this contest: a lock on a name that
+    /// cannot be locked, or a vote towards an identity that is not competing.
+    #[error(
+        "This vote is not allowed for this username. Vote for one of the identities that asked for it, or choose another option, then vote again."
+    )]
+    VoteChoiceNotAllowed {
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// Another identity committed to the same name earlier, so its request
+    /// comes first.
+    #[error("Someone else asked for this username first. Choose a different username.")]
+    ReferencedDocumentPreceded {
+        document_id: Identifier,
+        preceding_document_id: Identifier,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// A token that cannot be transferred cannot be tradeable either.
+    #[error(
+        "The token at position {token_position} cannot be traded because it cannot be transferred. Allow transfers or turn trading off, then try again."
+    )]
+    NonTransferableTokenTradeable {
+        token_position: u16,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Contract fee pots (protocol version 14)
+    // ──────────────────────────────────────────────────────────────────────────
+    /// The network does not keep contract fee pots yet.
+    #[error(
+        "This network does not support contract fees yet. Try again after the network upgrades."
+    )]
+    ContractFeePotsNotSupported,
+
+    /// The claiming identity has no key allowed to sign a fee claim.
+    #[error(
+        "Claiming contract fees needs a critical authentication key that is not limited to a contract. Add such a key to this identity, then try again."
+    )]
+    NoFeeClaimSigningKey,
+
+    /// A fee claim was paid out on the network, but storing the claimant's
+    /// new balance on this device afterward failed. Reported as paid out
+    /// rather than as failed, so the user does not retry a claim already made.
+    #[error(
+        "The fees were paid out, but the identity's new balance could not be saved on this device. Refresh the identity to see its new balance."
+    )]
+    ContractFeesClaimedButBalanceNotSaved {
+        #[source]
+        source: Box<TaskError>,
+    },
+
+    /// The claiming identity is not a recipient of the pot.
+    #[error(
+        "Only the contract owner can claim the owner's fees, and only a moderator can claim the moderators' fees. Choose an identity that receives these fees, then try again."
+    )]
+    ContractFeeClaimNotAllowed {
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The pot was already paid out in the current epoch.
+    #[error(
+        "These fees were already claimed in the current epoch. Fees can be claimed once per epoch, so try again in the next one."
+    )]
+    ContractFeesAlreadyClaimedThisEpoch {
+        epoch_index: u16,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The pot holds nothing to pay out.
+    #[error("There are no fees to claim yet. Try again after users have paid fees to this contract.")]
+    ContractFeesNothingToClaim {
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Contract authoring (protocol version 14)
+    // ──────────────────────────────────────────────────────────────────────────
+    /// A replace changed a property the document type declares immutable.
+    #[error(
+        "One of the fields you changed cannot be changed after the document is created. Keep the original values of its fixed fields, then try again."
+    )]
+    DocumentImmutablePropertyChanged {
+        // The node's names for the document type and the property stay in
+        // `source_error` only: unproven text, never copied into the variant.
+        document_id: Identifier,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// A `deletableDocument` reference points at a document type whose
+    /// documents cannot be deleted.
+    #[error(
+        "This contract refers to documents that can never be deleted as if they could be. Make that reference a permanent document reference, then try again."
+    )]
+    ReferencedDocumentTypeNotDeletable {
+        // The node's names for the document type and the reference path stay
+        // in `source_error` only: unproven text, never copied into the variant.
+        contract_id: Identifier,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// A document type charges moderators a fee the contract has no
+    /// moderation for.
+    #[error(
+        "A document type in this contract charges a fee for moderators, but the contract has no moderation. Remove the moderators' part of the fee, then try again."
+    )]
+    DocumentActionFeesWithoutModeration {
+        // The node's name for the document type stays in `source_error` only:
+        // unproven text, never copied into the variant.
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// A once-per-identity distribution amount is zero or above the maximum.
+    #[error(
+        "The amount each identity can claim must be between 1 and {max_amount}. Enter an amount in that range, then try again."
+    )]
+    InvalidOncePerIdentityDistributionAmount {
+        amount: u64,
+        max_amount: u64,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The pre-programmed distributions of one time add up to more than the
+    /// maximum.
+    #[error(
+        "The scheduled token distributions at {} add up to more than the allowed maximum. Lower those amounts, then try again.",
+        crate::model::datetime::local_date_time_from_unix_millis(*timestamp_ms)
+    )]
+    PreProgrammedDistributionOverLimit {
+        token_position: u16,
+        /// The distribution time, in milliseconds since the Unix epoch.
+        timestamp_ms: u64,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Token query errors
+    // ──────────────────────────────────────────────────────────────────────────
+    #[error("Shielded token settings cannot be changed here yet. Use a supported token setting instead.")]
+    TokenShieldedConfigurationUnsupported,
+
+    /// Querying token data from the platform failed.
+    #[error("Could not retrieve token information from the platform. Please retry.")]
+    TokenQueryError { detail: String },
+
+    /// A token with a once-per-identity distribution was requested on a
+    /// network that does not accept one yet.
+    #[error(
+        "This network does not support once-per-identity token distributions yet. Create the token without it, or try again after the network upgrades."
+    )]
+    TokenOncePerIdentityNotSupported,
+
+    /// The token creator asked for a token that cannot be transferred, on a
+    /// network that does not accept one yet.
+    #[error(
+        "The connected network does not accept tokens that cannot be transferred yet. Allow transfers, or try again after the network upgrades."
+    )]
+    NonTransferableTokenNotSupported,
+
+    /// A once-per-identity token claim succeeded, but this device could not
+    /// record that it was made. Without the record, the claim may be offered
+    /// again, and Platform refuses (and charges for) a second claim.
+    #[error(
+        "The tokens were claimed, but this device could not save that this identity has claimed them. Do not claim this token again with this identity, because the claim would be refused."
+    )]
+    TokensClaimedButClaimNotRecorded {
+        #[source]
+        source: Box<TaskError>,
+    },
+
+    /// The identity already took its single claim of a token's
+    /// once-per-identity distribution, so Platform refused another one.
+    #[error(
+        "This identity has already claimed its share of this token. Each identity can claim it only once, so there is nothing more to claim."
+    )]
+    TokenOncePerIdentityAlreadyClaimed {
+        token_id: Identifier,
+        identity_id: Identifier,
+        /// Block time of the claim that was paid, in milliseconds.
+        claimed_at_ms: u64,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// A token operation run by the wallet runtime failed for a reason the
+    /// SDK error classification has no specific variant for. Built by
+    /// [`TaskError::from_token_operation_failure`], which prefers the specific
+    /// variant whenever there is one.
+    #[error("{}", operation.failure_message())]
+    TokenOperationFailed {
+        operation: TokenOperationKind,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The token does not have a perpetual distribution configured — no rewards to claim.
+    #[error("This token does not have perpetual distribution, so there are no rewards to claim.")]
+    TokenNoPerpetualDistribution,
+
+    /// The recipient identity does not exist on Platform (e.g. during a token mint).
+    #[error(
+        "The recipient identity `{recipient_id}` does not exist on the platform. \
+         Check the ID and try again, or create the identity first."
+    )]
+    TokenRecipientIdentityNotFound {
+        recipient_id: String,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    /// The identity's token account is not frozen, so an unfreeze / destroy-frozen action
+    /// cannot proceed.
+    #[error(
+        "Identity `{identity_id}` is not frozen for token `{token_id}`, so `{action}` cannot proceed. \
+         Refresh the frozen-account list and try again."
+    )]
+    TokenAccountNotFrozen {
+        identity_id: String,
+        token_id: String,
+        action: String,
+        #[source]
+        source_error: Box<SdkError>,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Contract schema errors
+    // ──────────────────────────────────────────────────────────────────────────
+    /// The contract structure does not match expectations (e.g. missing contested index).
+    #[error("The contract structure is unexpected. Please update the application.")]
+    ContractSchemaMismatch { detail: &'static str },
+
+    /// Platform returned a different contract after accepting an update.
+    #[error(
+        "The platform returned contract {returned} instead of {expected}. Please try the update again."
+    )]
+    UpdatedContractIdMismatch {
+        expected: Identifier,
+        returned: Identifier,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Withdrawal document parsing errors
+    // ──────────────────────────────────────────────────────────────────────────
+    /// A withdrawal document could not be fully read (missing timestamp, invalid status, etc.).
+    #[error(
+        "Could not read the withdrawal details. The data may be incomplete or in an unexpected format. Please retry."
+    )]
+    WithdrawalDocumentParsingError(
+        #[from] crate::backend_task::platform_info::WithdrawalParseError,
+    ),
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // SDK / RPC setup errors
+    // ──────────────────────────────────────────────────────────────────────────
+    /// The Dash Platform SDK could not be initialised with the current config,
+    /// or a context provider could not be bound to the current AppContext.
+    #[error(
+        "Could not connect to the Dash network. Please check your network settings and restart the application."
+    )]
+    SdkInitializationFailed { detail: String },
+
+    /// The Core wallet name supplied by the user is syntactically invalid.
+    #[error("The Core wallet name '{name}' is invalid. Please check your wallet configuration.")]
+    InvalidCoreWalletName { name: String },
+
+    /// Dash Core has no wallets loaded — required for wallet-scoped RPC calls.
+    #[error("No wallets are loaded in Dash Core. Please open a wallet in Dash Core and retry.")]
+    NoCoreWalletsLoaded,
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Wallet key / address errors
+    // ──────────────────────────────────────────────────────────────────────────
+    /// A private key for a wallet address could not be found or derived.
+    #[error(
+        "Could not find the key for this address in your wallet. Please check your wallet and retry."
+    )]
+    WalletKeyLookupFailed,
+
+    /// A wallet-key derivation was requested at the empty derivation path. The
+    /// empty path IS the BIP-32 root, so deriving there yields the wallet's
+    /// master key rather than an address key — refused at the chokepoint every
+    /// key-bearing wallet task shares, never at an individual caller.
+    #[error(
+        "This address has no known derivation path, so its private key cannot be shown or used. Choose an address with a known derivation path."
+    )]
+    RootKeyDerivationRefused,
+
+    /// A wallet address or identity-auth key could not be derived. The upstream
+    /// detail (a legacy `String`) is logged at the call site, never stored here.
+    #[error("Could not generate a wallet address. Please check your wallet and retry.")]
+    WalletAddressDerivationFailed,
+
+    /// A new Platform (DIP-17/18) receive address could not be derived or
+    /// registered. The underlying detail is logged, never shown to the user.
+    #[error("Could not generate a Platform receive address. Please check your wallet and retry.")]
+    WalletPlatformReceiveAddressFailed,
+
+    /// Signing a message with a wallet-derived key failed during derivation or
+    /// signing. The underlying detail is logged, never shown to the user.
+    #[error("Could not sign the message. Please check your wallet and retry.")]
+    WalletMessageSigningFailed,
+
+    /// The selected key type cannot be used to sign a message in this tool.
+    #[error("This key type cannot sign a message. Please choose an ECDSA key and try again.")]
+    WalletMessageSignUnsupportedKeyType,
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Payment errors
+    // ──────────────────────────────────────────────────────────────────────────
+    /// A recipient address could not be parsed or is invalid.
+    #[error("The recipient address '{address}' is not valid. Please check the address and retry.")]
+    InvalidRecipientAddress {
+        address: String,
+        #[source]
+        source: dashcore::address::Error,
+    },
+
+    /// A recipient address was parsed but does not match the current network.
+    #[error(
+        "The address does not match the current network. Please check that you are on the correct network."
+    )]
+    AddressNetworkMismatch {
+        #[source]
+        source: dashcore::address::Error,
+    },
+
+    /// The payment had no recipients. A transaction must pay at least one
+    /// address, so the request is rejected before any funds move.
+    #[error("Add at least one recipient before sending a payment.")]
+    PaymentNoRecipients,
+
+    /// Tracked-lock funding was invoked with no recipients. The UI always
+    /// supplies at least one, so this is a caller-contract violation (a future
+    /// programmatic caller, not a normal user action) rejected before any
+    /// pool-membership lookup or broadcast.
+    #[error("No funding recipients were provided for this asset lock.")]
+    NoFundingRecipients,
+
+    /// A recipient was given a zero amount. Sending nothing wastes the network
+    /// fee and is almost always a slip, so it is rejected up front.
+    #[error("Enter an amount greater than zero for every recipient, then try again.")]
+    PaymentZeroAmount,
+
+    /// The wallet has no UTXOs available to cover the payment.
+    #[error("Your wallet has no available funds to spend. Please receive some Dash first.")]
+    NoUtxosAvailable,
+
+    /// The wallet balance is too low to cover the requested amount plus fees.
+    #[error(
+        "You do not have enough Dash. You have {available} duffs but need {required} duffs. Please add more funds and retry."
+    )]
+    InsufficientFunds { available: u64, required: u64 },
+
+    /// The output amount is smaller than the transaction fee.
+    #[error(
+        "The amount is too small to cover the {fee} duff transaction fee. Please send a larger amount."
+    )]
+    OutputTooSmallForFee { fee: u64 },
+
+    /// A signature hash for a transaction input could not be computed.
+    #[error("Could not sign the transaction. Please retry.")]
+    SighashComputationFailed {
+        #[source]
+        source: dashcore::sighash::Error,
+    },
+
+    /// Could not access wallet information from the SPV manager.
+    #[error("Your wallet is still loading. Please wait a moment and try again.")]
+    WalletInfoUnavailable,
+
+    /// Expected BIP44 account not found at the given index.
+    #[error("Your wallet needs to be refreshed before sending. Please refresh and try again.")]
+    MissingBip44Account { index: u32 },
+
+    /// Could not derive a change address from the wallet account.
+    #[error("Could not prepare the transaction. Please refresh your wallet and try again.")]
+    ChangeAddressDerivation {
+        #[source]
+        source: dash_sdk::dpp::key_wallet::Error,
+    },
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Token query errors (identity / recipient validation)
+    // ──────────────────────────────────────────────────────────────────────────
+    /// No local identities are registered — a prerequisite for token queries.
+    #[error("No registered identities found. Please register an identity first.")]
+    NoIdentitiesFound,
+
+    /// The current identity is not the contract owner who can claim this token's distribution.
+    #[error(
+        "This token distribution can only be claimed by the contract owner ({contract_owner}). Your identity is not the contract owner."
+    )]
+    NotContractOwner { contract_owner: String },
+
+    /// The current identity is not the specific identity designated as the token distribution recipient.
+    #[error(
+        "This token distribution can only be claimed by the designated recipient ({designated_recipient}). Your identity is not the designated recipient."
+    )]
+    NotDesignatedTokenRecipient { designated_recipient: String },
+
+    /// The current identity is not an evonode, which is required for this token distribution.
+    #[error(
+        "This token distribution is only for evonode identities. Your identity is not registered as an evonode."
+    )]
+    NotEvonode,
+
+    // ──────────────────────────────────────────────────────────────────────────
+    // Wallet-based identity loading errors
+    // ──────────────────────────────────────────────────────────────────────────
+    /// No on-chain identity was found for the requested wallet derivation index.
+    #[error(
+        "Could not find an identity for wallet index {identity_index} after checking {auth_key_count} keys. Try expanding the search range."
+    )]
+    WalletIdentityNotFound {
+        identity_index: u32,
+        auth_key_count: usize,
+    },
+
+    /// The identity returned by the platform does not contain the queried authentication key.
+    #[error(
+        "The identity retrieved does not match your wallet key. Please check you are using the correct wallet."
+    )]
+    WalletIdentityKeyMismatch,
+
+    /// None of the identity's public keys could be matched to wallet derivation paths.
+    #[error(
+        "Could not match any identity keys to your wallet. Please check your wallet and retry."
+    )]
+    NoMatchingWalletKeys,
+
+    /// The derivation path for the queried identity key was not found in the wallet.
     #[error(
         "Could not locate this identity key's information in your wallet. Please check your wallet configuration."
     )]
@@ -3828,6 +4468,26 @@ impl From<dashcore_rpc::Error> for TaskError {
     }
 }
 
+impl TaskError {
+    /// The error for a token operation the wallet runtime reported as failed
+    /// (`PlatformWalletError::TokenOperationFailed`).
+    ///
+    /// The SDK source is classified exactly like any other SDK error, so a
+    /// rejection with a specific meaning (insufficient balance, a claim already
+    /// taken, …) keeps its specific message. Only an otherwise unclassified
+    /// failure becomes [`TaskError::TokenOperationFailed`], which at least names
+    /// the operation.
+    pub fn from_token_operation_failure(operation: &'static str, source: SdkError) -> Self {
+        match TaskError::from(source) {
+            TaskError::SdkError { source_error } => TaskError::TokenOperationFailed {
+                operation: TokenOperationKind::from_upstream_label(operation),
+                source_error,
+            },
+            classified => classified,
+        }
+    }
+}
+
 /// Why the DET identity signer could not resolve a signing key.
 ///
 /// The upstream `Signer` trait can only return `ProtocolError`, which has no
@@ -4133,11 +4793,346 @@ impl From<SdkError> for TaskError {
                             }
                         }))
                     }
+                    ConsensusError::StateError(
+                        StateError::TokenOncePerIdentityDistributionAlreadyClaimedError(e),
+                    ) => {
+                        let (token_id, identity_id, claimed_at_ms) =
+                            (e.token_id(), e.identity_id(), e.claimed_at_ms());
+                        Some(Box::new(move |source_error| {
+                            TaskError::TokenOncePerIdentityAlreadyClaimed {
+                                token_id,
+                                identity_id,
+                                claimed_at_ms,
+                                source_error,
+                            }
+                        }))
+                    }
                     ConsensusError::StateError(StateError::DuplicateUniqueIndexError(_)) => {
                         Some(Box::new(|source_error| TaskError::PlatformEntryConflict {
                             source_error,
                         }))
                     }
+                    ConsensusError::SignatureError(SignatureError::PublicKeyExpiredError(e)) => {
+                        let (key_id, expired_at_ms) = (e.public_key_id(), e.expires_at());
+                        Some(Box::new(move |source_error| TaskError::SigningKeyExpired {
+                            key_id,
+                            expired_at_ms,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::SignatureError(
+                        SignatureError::PublicKeyBudgetExhaustedError(e),
+                    ) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::SigningKeyBudgetExhausted {
+                                key_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::IdentityPublicKeyBudgetExceededError(e),
+                    ) => {
+                        let (key_id, remaining_budget, required_budget) =
+                            (e.public_key_id(), e.remaining_budget(), e.required_budget());
+                        Some(Box::new(move |source_error| {
+                            TaskError::SigningKeyBudgetExceeded {
+                                key_id,
+                                remaining_budget,
+                                required_budget,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::SignatureError(
+                        SignatureError::ContractBoundedKeyOutOfBoundsError(e),
+                    ) => {
+                        let key_id = *e.public_key_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::SigningKeyOutOfContractBounds {
+                                key_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::SignatureError(
+                        SignatureError::ContractBoundedKeyNonBatchError(e),
+                    ) => {
+                        let key_id = *e.public_key_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::SigningKeyContractBoundForNonBatch {
+                                key_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::ContractFeeClaimNotAllowedError(_)) => {
+                        Some(Box::new(|source_error| {
+                            TaskError::ContractFeeClaimNotAllowed { source_error }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::ContractFeesAlreadyClaimedThisEpochError(e),
+                    ) => {
+                        let epoch_index = e.epoch_index();
+                        Some(Box::new(move |source_error| {
+                            TaskError::ContractFeesAlreadyClaimedThisEpoch {
+                                epoch_index,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::ContractFeesNothingToClaimError(_)) => {
+                        Some(Box::new(|source_error| {
+                            TaskError::ContractFeesNothingToClaim { source_error }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::IdentityPublicKeyAlreadyExpiredError(e),
+                    ) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| TaskError::KeyExpiryInPast {
+                            key_id,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::IdentityPublicKeyLimitNotRaisedError(e),
+                    ) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| TaskError::KeyLimitNotRaised {
+                            key_id,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::IdentityPublicKeyLimitNotSetError(
+                        e,
+                    )) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| TaskError::KeyLimitNotSet {
+                            key_id,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::SignatureError(
+                        SignatureError::PublicKeyWithLimitsCannotUpdateKeyLimitsError(e),
+                    ) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::KeyLimitsSignerHasLimits {
+                                key_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::BasicError(
+                        BasicError::IdentityPublicKeyLimitsNotAllowedError(e),
+                    ) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| TaskError::KeyLimitsRefused {
+                            key_id,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::BasicError(
+                        BasicError::InvalidIdentityPublicKeyBudgetError(e),
+                    ) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| TaskError::KeyLimitsRefused {
+                            key_id,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::BasicError(BasicError::IdentityKeyLimitsUpdateEmptyError(
+                        e,
+                    )) => {
+                        let key_id = e.public_key_id();
+                        Some(Box::new(move |source_error| TaskError::KeyLimitsRefused {
+                            key_id,
+                            source_error,
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::IdentityPublicKeyIsDisabledError(e)) => {
+                        let key_id = e.public_key_index();
+                        Some(Box::new(move |source_error| {
+                            TaskError::IdentityKeyDisabled {
+                                key_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::DocumentActionFeeAgreementNotSetError(_),
+                    ) => Some(Box::new(|source_error| {
+                        TaskError::DocumentActionFeeNotAgreed { source_error }
+                    })),
+                    ConsensusError::StateError(
+                        StateError::DocumentActionFeeAgreementMismatchError(_),
+                    ) => Some(Box::new(|source_error| {
+                        TaskError::DocumentActionFeeChanged { source_error }
+                    })),
+                    ConsensusError::StateError(
+                        StateError::DocumentActionFeeMultiplierNotToleratedError(e),
+                    ) => {
+                        let (known, current, tolerance) = (
+                            e.known_fee_multiplier_permille(),
+                            e.current_fee_multiplier_permille(),
+                            e.increase_tolerance_percent(),
+                        );
+                        Some(Box::new(move |source_error| {
+                            TaskError::DocumentActionFeeMultiplierRose {
+                                known_fee_multiplier_permille: known,
+                                current_fee_multiplier_permille: current,
+                                increase_tolerance_percent: tolerance,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::ContractUserBannedError(e)) => {
+                        let (contract_id, identity_id) = (e.contract_id(), e.identity_id());
+                        Some(Box::new(move |source_error| {
+                            TaskError::ContractUserBanned {
+                                contract_id,
+                                identity_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::ContractUserSuspendedError(e)) => {
+                        let (contract_id, identity_id, until_ms) =
+                            (e.contract_id(), e.identity_id(), e.until());
+                        Some(Box::new(move |source_error| {
+                            TaskError::ContractUserSuspended {
+                                contract_id,
+                                identity_id,
+                                until_ms,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::GasSponsorInsufficientBalanceError(
+                        e,
+                    )) => {
+                        let (sponsor_id, balance, required_balance) =
+                            (*e.sponsor_id(), e.balance(), e.required_balance());
+                        Some(Box::new(move |source_error| {
+                            TaskError::GasSponsorInsufficientBalance {
+                                sponsor_id,
+                                balance,
+                                required_balance,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::GasFeesPaidByNotAllowedError(_)) => {
+                        Some(Box::new(|source_error| {
+                            TaskError::GasFeesPaidByNotAllowed { source_error }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::InconsistentGasFeesPaidByInBatchError(_),
+                    ) => Some(Box::new(|source_error| {
+                        TaskError::InconsistentGasFeesPayerInBatch { source_error }
+                    })),
+                    ConsensusError::StateError(
+                        StateError::DocumentContestMaximumContendersReachedError(e),
+                    ) => {
+                        let max_contenders = e.max_contenders();
+                        Some(Box::new(move |source_error| {
+                            TaskError::DocumentContestContendersLimitReached {
+                                max_contenders,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(StateError::TokenNotTransferableError(e)) => {
+                        let token_id = *e.token_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::TokenNotTransferable {
+                                token_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::VoteChoiceNotAllowedForVotePollError(_),
+                    ) => Some(Box::new(|source_error| TaskError::VoteChoiceNotAllowed {
+                        source_error,
+                    })),
+                    ConsensusError::StateError(StateError::ReferencedDocumentPrecededError(e)) => {
+                        let (document_id, preceding_document_id) =
+                            (*e.document_id(), *e.preceding_document_id());
+                        Some(Box::new(move |source_error| {
+                            TaskError::ReferencedDocumentPreceded {
+                                document_id,
+                                preceding_document_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::BasicError(BasicError::NonTransferableTokenTradeableError(
+                        e,
+                    )) => {
+                        let token_position = e.token_contract_position();
+                        Some(Box::new(move |source_error| {
+                            TaskError::NonTransferableTokenTradeable {
+                                token_position,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::DocumentImmutablePropertyChangedError(e),
+                    ) => {
+                        let document_id = e.document_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::DocumentImmutablePropertyChanged {
+                                document_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::StateError(
+                        StateError::ReferencedDocumentTypeNotDeletableError(e),
+                    ) => {
+                        let contract_id = *e.contract_id();
+                        Some(Box::new(move |source_error| {
+                            TaskError::ReferencedDocumentTypeNotDeletable {
+                                contract_id,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::BasicError(
+                        BasicError::DocumentActionFeesWithoutModerationError(_),
+                    ) => Some(Box::new(|source_error| {
+                        TaskError::DocumentActionFeesWithoutModeration { source_error }
+                    })),
+                    ConsensusError::BasicError(
+                        BasicError::InvalidTokenOncePerIdentityDistributionAmountError(e),
+                    ) => {
+                        let (amount, max_amount) = (e.amount(), e.max_amount());
+                        Some(Box::new(move |source_error| {
+                            TaskError::InvalidOncePerIdentityDistributionAmount {
+                                amount,
+                                max_amount,
+                                source_error,
+                            }
+                        }))
+                    }
+                    ConsensusError::BasicError(
+                        BasicError::PreProgrammedDistributionAmountOverLimitError(e),
+                    ) => {
+                        let (token_position, timestamp_ms) = (e.token_position(), e.timestamp());
+                        Some(Box::new(move |source_error| {
+                            TaskError::PreProgrammedDistributionOverLimit {
+                                token_position,
+                                timestamp_ms,
+                                source_error,
+                            }
+                        }))
+                    }
                     _ => None,
                 }
             });
@@ -4301,10 +5296,12 @@ mod tests {
         InvalidTokenNameCharacterError, InvalidTokenNameLengthError,
     };
     use dash_sdk::dpp::consensus::basic::identity::InvalidInstantAssetLockProofSignatureError;
-    use dash_sdk::dpp::consensus::state::identity::duplicated_identity_public_key_id_state_error::DuplicatedIdentityPublicKeyIdStateError;
-    use dash_sdk::dpp::consensus::state::identity::duplicated_identity_public_key_state_error::DuplicatedIdentityPublicKeyStateError;
-    use dash_sdk::dpp::consensus::state::identity::IdentityInsufficientBalanceError;
-    use dash_sdk::dpp::consensus::state::identity::identity_public_key_already_exists_for_unique_contract_bounds_error::IdentityPublicKeyAlreadyExistsForUniqueContractBoundsError;
+    use dash_sdk::dpp::consensus::state::identity::{
+        IdentityInsufficientBalanceError,
+        duplicated_identity_public_key_id_state_error::DuplicatedIdentityPublicKeyIdStateError,
+        duplicated_identity_public_key_state_error::DuplicatedIdentityPublicKeyStateError,
+        identity_public_key_already_exists_for_unique_contract_bounds_error::IdentityPublicKeyAlreadyExistsForUniqueContractBoundsError,
+    };
     use dash_sdk::dpp::consensus::state::voting::masternode_voted_too_many_times::MasternodeVotedTooManyTimesError;
     use dash_sdk::dpp::identity::Purpose;
     use dash_sdk::platform::Identifier;
@@ -6547,6 +7544,681 @@ mod tests {
         );
     }
 
+    fn broadcast_rejection(cause: ConsensusError) -> SdkError {
+        SdkError::StateTransitionBroadcastError(dash_sdk::error::StateTransitionBroadcastError {
+            code: 1,
+            message: "rejected".to_string(),
+            cause: Some(cause),
+        })
+    }
+
+    /// Every protocol-version-14 consensus rejection DET flows can hit maps to
+    /// its own variant, keeps the SDK error as its source, and reads as
+    /// complete sentences free of protocol jargon.
+    #[test]
+    fn protocol_v14_consensus_errors_map_to_their_variants() {
+        use dash_sdk::dpp::consensus::basic::contract_moderation::DocumentActionFeesWithoutModerationError;
+        use dash_sdk::dpp::consensus::basic::data_contract::PreProgrammedDistributionAmountOverLimitError;
+        use dash_sdk::dpp::consensus::basic::identity::{
+            IdentityKeyLimitsUpdateEmptyError, IdentityPublicKeyLimitsNotAllowedError,
+            InvalidIdentityPublicKeyBudgetError,
+        };
+        use dash_sdk::dpp::consensus::basic::token::InvalidTokenOncePerIdentityDistributionAmountError;
+        use dash_sdk::dpp::consensus::signature::PublicKeyWithLimitsCannotUpdateKeyLimitsError;
+        use dash_sdk::dpp::consensus::signature::{
+            ContractBoundedKeyNonBatchError, ContractBoundedKeyOutOfBoundsError,
+            PublicKeyBudgetExhaustedError, PublicKeyExpiredError,
+        };
+        use dash_sdk::dpp::consensus::state::contract_moderation::{
+            ContractFeeClaimNotAllowedError, ContractFeesAlreadyClaimedThisEpochError,
+            ContractFeesNothingToClaimError, ContractUserBannedError, ContractUserSuspendedError,
+        };
+        use dash_sdk::dpp::consensus::state::document::{
+            document_action_fee_agreement_mismatch_error::DocumentActionFeeAgreementMismatchError,
+            document_action_fee_agreement_not_set_error::DocumentActionFeeAgreementNotSetError,
+            document_action_fee_multiplier_not_tolerated_error::DocumentActionFeeMultiplierNotToleratedError,
+            document_immutable_property_changed_error::DocumentImmutablePropertyChangedError,
+            referenced_document_type_not_deletable_error::ReferencedDocumentTypeNotDeletableError,
+        };
+        use dash_sdk::dpp::consensus::state::identity::identity_public_key_already_expired_error::IdentityPublicKeyAlreadyExpiredError;
+        use dash_sdk::dpp::consensus::state::identity::identity_public_key_is_disabled_error::IdentityPublicKeyIsDisabledError;
+        use dash_sdk::dpp::consensus::state::identity::identity_public_key_limit_not_raised_error::IdentityPublicKeyLimitNotRaisedError;
+        use dash_sdk::dpp::consensus::state::identity::identity_public_key_limit_not_set_error::{
+            IdentityPublicKeyLimitNotSetError, KeyLimit,
+        };
+        use dash_sdk::dpp::consensus::state::identity::{
+            gas_sponsor_insufficient_balance_error::GasSponsorInsufficientBalanceError,
+            identity_public_key_budget_exceeded_error::IdentityPublicKeyBudgetExceededError,
+        };
+        use dash_sdk::dpp::consensus::state::token::{
+            GasFeesPaidByNotAllowedError, InconsistentGasFeesPaidByInBatchError,
+        };
+        use dash_sdk::dpp::data_contract::document_type::action_fees::ContractFeePot;
+        use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::{
+            AgreedFeeMultiplier, DocumentActionFeeAgreement,
+        };
+        use dash_sdk::dpp::data_contract::document_type::action_fees::{
+            ActionFeePricing, DocumentActionFee,
+        };
+        use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
+        use dash_sdk::dpp::tokens::gas_fees_paid_by::GasFeesPaidBy;
+
+        let (contract_id, identity_id) = (Identifier::random(), Identifier::random());
+        let fee = DocumentActionFee {
+            owner: 1_000,
+            moderators: 0,
+        };
+        let agreed = AgreedFeeMultiplier {
+            known_permille: 1000,
+            increase_tolerance_percent: 20,
+        };
+        let agreement = DocumentActionFeeAgreement::for_declared_fee(
+            ActionFeePricing::FeeMultiplier,
+            DocumentActionFee {
+                owner: 900,
+                moderators: 0,
+            },
+            agreed,
+        );
+
+        type Expectation = fn(&TaskError) -> bool;
+        let cases: Vec<(ConsensusError, Expectation)> = vec![
+            (PublicKeyExpiredError::new(3, 1_000, 2_000).into(), |e| {
+                matches!(
+                    e,
+                    TaskError::SigningKeyExpired {
+                        key_id: 3,
+                        expired_at_ms: 1_000,
+                        ..
+                    }
+                )
+            }),
+            (PublicKeyBudgetExhaustedError::new(4).into(), |e| {
+                matches!(e, TaskError::SigningKeyBudgetExhausted { key_id: 4, .. })
+            }),
+            (
+                IdentityPublicKeyBudgetExceededError::new(identity_id, 5, 10, 20).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::SigningKeyBudgetExceeded {
+                            key_id: 5,
+                            remaining_budget: 10,
+                            required_budget: 20,
+                            ..
+                        }
+                    )
+                },
+            ),
+            (ContractBoundedKeyOutOfBoundsError::new(6).into(), |e| {
+                matches!(
+                    e,
+                    TaskError::SigningKeyOutOfContractBounds { key_id: 6, .. }
+                )
+            }),
+            (ContractBoundedKeyNonBatchError::new(7).into(), |e| {
+                matches!(
+                    e,
+                    TaskError::SigningKeyContractBoundForNonBatch { key_id: 7, .. }
+                )
+            }),
+            (
+                DocumentActionFeeAgreementNotSetError::new(
+                    "note".to_string(),
+                    "create".to_string(),
+                    ActionFeePricing::FeeMultiplier,
+                    fee,
+                )
+                .into(),
+                |e| matches!(e, TaskError::DocumentActionFeeNotAgreed { .. }),
+            ),
+            (
+                DocumentActionFeeAgreementMismatchError::new(
+                    "note".to_string(),
+                    "create".to_string(),
+                    ActionFeePricing::FeeMultiplier,
+                    fee,
+                    &agreement,
+                )
+                .into(),
+                |e| matches!(e, TaskError::DocumentActionFeeChanged { .. }),
+            ),
+            (
+                DocumentActionFeeMultiplierNotToleratedError::new(
+                    "note".to_string(),
+                    "create".to_string(),
+                    agreed,
+                    1_500,
+                )
+                .into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::DocumentActionFeeMultiplierRose {
+                            known_fee_multiplier_permille: 1000,
+                            current_fee_multiplier_permille: 1_500,
+                            increase_tolerance_percent: 20,
+                            ..
+                        }
+                    )
+                },
+            ),
+            (
+                ContractUserBannedError::new(contract_id, identity_id).into(),
+                |e| matches!(e, TaskError::ContractUserBanned { .. }),
+            ),
+            (
+                ContractUserSuspendedError::new(contract_id, identity_id, 1_758_140_722_000).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::ContractUserSuspended {
+                            until_ms: 1_758_140_722_000,
+                            ..
+                        }
+                    )
+                },
+            ),
+            (
+                GasSponsorInsufficientBalanceError::new(contract_id, 1, 2).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::GasSponsorInsufficientBalance {
+                            balance: 1,
+                            required_balance: 2,
+                            ..
+                        }
+                    )
+                },
+            ),
+            (
+                GasFeesPaidByNotAllowedError::new(
+                    "note".to_string(),
+                    "create".to_string(),
+                    GasFeesPaidBy::ContractOwner,
+                    GasFeesPaidBy::DocumentOwner,
+                )
+                .into(),
+                |e| matches!(e, TaskError::GasFeesPaidByNotAllowed { .. }),
+            ),
+            (
+                InconsistentGasFeesPaidByInBatchError::new(Some(identity_id), None).into(),
+                |e| matches!(e, TaskError::InconsistentGasFeesPayerInBatch { .. }),
+            ),
+            (
+                DocumentImmutablePropertyChangedError::new(
+                    Identifier::random(),
+                    "note".to_string(),
+                    "title".to_string(),
+                )
+                .into(),
+                |e| matches!(e, TaskError::DocumentImmutablePropertyChanged { .. }),
+            ),
+            (
+                ReferencedDocumentTypeNotDeletableError::new(
+                    contract_id,
+                    "note".to_string(),
+                    "properties.ref".to_string(),
+                )
+                .into(),
+                |e| matches!(e, TaskError::ReferencedDocumentTypeNotDeletable { .. }),
+            ),
+            (
+                DocumentActionFeesWithoutModerationError::new("note".to_string()).into(),
+                |e| matches!(e, TaskError::DocumentActionFeesWithoutModeration { .. }),
+            ),
+            (
+                InvalidTokenOncePerIdentityDistributionAmountError::new(0, 100).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::InvalidOncePerIdentityDistributionAmount {
+                            amount: 0,
+                            max_amount: 100,
+                            ..
+                        }
+                    )
+                },
+            ),
+            (
+                PreProgrammedDistributionAmountOverLimitError::new(1, 1_758_140_722_000).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::PreProgrammedDistributionOverLimit {
+                            token_position: 1,
+                            ..
+                        }
+                    )
+                },
+            ),
+        ];
+
+        let key_limit_cases: Vec<(ConsensusError, Expectation)> = vec![
+            (
+                IdentityPublicKeyAlreadyExpiredError::new(8, 1, 2).into(),
+                |e| matches!(e, TaskError::KeyExpiryInPast { key_id: 8, .. }),
+            ),
+            (
+                IdentityPublicKeyLimitNotRaisedError::new(8, KeyLimit::Budget, 2, 1).into(),
+                |e| matches!(e, TaskError::KeyLimitNotRaised { key_id: 8, .. }),
+            ),
+            (
+                IdentityPublicKeyLimitNotSetError::new(8, KeyLimit::Expiry).into(),
+                |e| matches!(e, TaskError::KeyLimitNotSet { key_id: 8, .. }),
+            ),
+            (
+                PublicKeyWithLimitsCannotUpdateKeyLimitsError::new(9).into(),
+                |e| matches!(e, TaskError::KeyLimitsSignerHasLimits { key_id: 9, .. }),
+            ),
+            (
+                IdentityPublicKeyLimitsNotAllowedError::new(
+                    8,
+                    Purpose::TRANSFER,
+                    SecurityLevel::CRITICAL,
+                )
+                .into(),
+                |e| matches!(e, TaskError::KeyLimitsRefused { key_id: 8, .. }),
+            ),
+            (InvalidIdentityPublicKeyBudgetError::new(8).into(), |e| {
+                matches!(e, TaskError::KeyLimitsRefused { key_id: 8, .. })
+            }),
+            (IdentityKeyLimitsUpdateEmptyError::new(8).into(), |e| {
+                matches!(e, TaskError::KeyLimitsRefused { key_id: 8, .. })
+            }),
+            (IdentityPublicKeyIsDisabledError::new(8).into(), |e| {
+                matches!(e, TaskError::IdentityKeyDisabled { key_id: 8, .. })
+            }),
+        ];
+
+        let contract_id = Identifier::random();
+        let fee_pot_cases: Vec<(ConsensusError, Expectation)> = vec![
+            (
+                ContractFeeClaimNotAllowedError::new(
+                    contract_id,
+                    ContractFeePot::Owner,
+                    Identifier::random(),
+                )
+                .into(),
+                |e| matches!(e, TaskError::ContractFeeClaimNotAllowed { .. }),
+            ),
+            (
+                ContractFeesAlreadyClaimedThisEpochError::new(
+                    contract_id,
+                    ContractFeePot::Owner,
+                    9,
+                )
+                .into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::ContractFeesAlreadyClaimedThisEpoch { epoch_index: 9, .. }
+                    )
+                },
+            ),
+            (
+                ContractFeesNothingToClaimError::new(contract_id, ContractFeePot::Moderators)
+                    .into(),
+                |e| matches!(e, TaskError::ContractFeesNothingToClaim { .. }),
+            ),
+        ];
+
+        for (cause, expected) in cases
+            .into_iter()
+            .chain(key_limit_cases)
+            .chain(fee_pot_cases)
+        {
+            let debug = format!("{cause:?}");
+            let error = TaskError::from(broadcast_rejection(cause));
+            assert!(expected(&error), "{debug} mapped to {error:?}");
+            assert!(
+                std::error::Error::source(&error).is_some(),
+                "{error:?} must keep the SDK error as its source"
+            );
+            let message = error.to_string();
+            assert!(message.ends_with('.'), "not a sentence: {message}");
+            for jargon in ["consensus", "state transition", "nonce", "SDK", "permille"] {
+                assert!(
+                    !message.contains(jargon),
+                    "{message} contains jargon {jargon}"
+                );
+            }
+        }
+    }
+
+    /// The refusals protocol versions 14 and 15 add on username, vote and
+    /// token flows map to their own variants, keep the SDK error as their
+    /// source and tell the user what to do instead.
+    #[test]
+    fn contest_vote_and_token_transfer_refusals_map_to_their_variants() {
+        use dash_sdk::dpp::consensus::basic::data_contract::NonTransferableTokenTradeableError;
+        use dash_sdk::dpp::consensus::state::document::document_contest_maximum_contenders_reached_error::DocumentContestMaximumContendersReachedError;
+        use dash_sdk::dpp::consensus::state::document::referenced_document_preceded_error::ReferencedDocumentPrecededError;
+        use dash_sdk::dpp::consensus::state::token::TokenNotTransferableError;
+        use dash_sdk::dpp::consensus::state::voting::vote_choice_not_allowed_for_vote_poll_error::VoteChoiceNotAllowedForVotePollError;
+        use dash_sdk::dpp::voting::vote_choices::resource_vote_choice::ResourceVoteChoice;
+        use dash_sdk::dpp::voting::vote_polls::VotePoll;
+        use dash_sdk::dpp::voting::vote_polls::contested_document_resource_vote_poll::ContestedDocumentResourceVotePoll;
+
+        type Expectation = fn(&TaskError) -> bool;
+        let token_id = Identifier::random();
+        let poll = ContestedDocumentResourceVotePoll {
+            contract_id: Identifier::random(),
+            document_type_name: "domain".to_string(),
+            index_name: "parentNameAndLabel".to_string(),
+            index_values: vec![
+                dash_sdk::dpp::platform_value::Value::from("dash"),
+                dash_sdk::dpp::platform_value::Value::from("alice"),
+            ],
+        };
+        let cases: Vec<(ConsensusError, Expectation, &str)> = vec![
+            (
+                DocumentContestMaximumContendersReachedError::new(poll.clone(), 1000).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::DocumentContestContendersLimitReached {
+                            max_contenders: 1000,
+                            ..
+                        }
+                    )
+                },
+                "Choose a different username.",
+            ),
+            (
+                TokenNotTransferableError::new(token_id, "transfer".to_string()).into(),
+                |e| matches!(e, TaskError::TokenNotTransferable { .. }),
+                "Use a different token.",
+            ),
+            (
+                VoteChoiceNotAllowedForVotePollError::new(
+                    VotePoll::ContestedDocumentResourceVotePoll(poll),
+                    ResourceVoteChoice::Lock,
+                )
+                .into(),
+                |e| matches!(e, TaskError::VoteChoiceNotAllowed { .. }),
+                "then vote again.",
+            ),
+            (
+                ReferencedDocumentPrecededError::new(
+                    Identifier::random(),
+                    Identifier::random(),
+                    "normalizedLabel".to_string(),
+                    "preorder".to_string(),
+                )
+                .into(),
+                |e| matches!(e, TaskError::ReferencedDocumentPreceded { .. }),
+                "Someone else asked for this username first.",
+            ),
+            (
+                NonTransferableTokenTradeableError::new(3).into(),
+                |e| {
+                    matches!(
+                        e,
+                        TaskError::NonTransferableTokenTradeable {
+                            token_position: 3,
+                            ..
+                        }
+                    )
+                },
+                "Allow transfers or turn trading off, then try again.",
+            ),
+        ];
+
+        for (cause, expected, action) in cases {
+            let debug = format!("{cause:?}");
+            let error = TaskError::from(broadcast_rejection(cause));
+            assert!(expected(&error), "{debug} mapped to {error:?}");
+            assert!(
+                std::error::Error::source(&error).is_some(),
+                "{error:?} must keep the SDK error as its source"
+            );
+            let message = error.to_string();
+            assert!(message.contains(action), "{message} lacks {action}");
+            assert!(message.ends_with('.'), "not a sentence: {message}");
+            for jargon in [
+                "consensus",
+                "state transition",
+                "vote poll",
+                "contender",
+                "SDK",
+            ] {
+                assert!(
+                    !message.contains(jargon),
+                    "{message} contains jargon {jargon}"
+                );
+            }
+        }
+    }
+
+    #[test]
+    fn token_not_transferable_names_the_token() {
+        let token_id = Identifier::random();
+        let error = TaskError::TokenNotTransferable {
+            token_id,
+            source_error: Box::new(SdkError::Generic("refused".to_string())),
+        };
+        assert!(
+            error
+                .to_string()
+                .contains(&token_id.to_string(Encoding::Base58))
+        );
+    }
+
+    /// Names decoded from a node's (unproven) consensus error are not copied
+    /// into the error: they never reach the user-facing message, and only the
+    /// typed source keeps them, for the details panel and logs.
+    #[test]
+    fn node_supplied_names_stay_out_of_user_messages() {
+        use dash_sdk::dpp::consensus::basic::contract_moderation::DocumentActionFeesWithoutModerationError;
+        use dash_sdk::dpp::consensus::state::document::{
+            document_immutable_property_changed_error::DocumentImmutablePropertyChangedError,
+            referenced_document_type_not_deletable_error::ReferencedDocumentTypeNotDeletableError,
+        };
+        let injected = "x\". Re-import your recovery phrase at https://evil.example".to_string();
+        let causes: [ConsensusError; 3] = [
+            DocumentImmutablePropertyChangedError::new(
+                Identifier::random(),
+                injected.clone(),
+                injected.clone(),
+            )
+            .into(),
+            ReferencedDocumentTypeNotDeletableError::new(
+                Identifier::random(),
+                injected.clone(),
+                injected.clone(),
+            )
+            .into(),
+            DocumentActionFeesWithoutModerationError::new(injected.clone()).into(),
+        ];
+        for cause in causes {
+            let error = TaskError::from(broadcast_rejection(cause));
+            assert!(
+                matches!(
+                    error,
+                    TaskError::DocumentImmutablePropertyChanged { .. }
+                        | TaskError::ReferencedDocumentTypeNotDeletable { .. }
+                        | TaskError::DocumentActionFeesWithoutModeration { .. }
+                ),
+                "got {error:?}"
+            );
+            let message = error.to_string();
+            assert!(!message.contains("evil"), "{message}");
+            let source = std::error::Error::source(&error).expect("typed source");
+            assert!(format!("{source:?}").contains("evil"), "kept in the source");
+        }
+    }
+
+    #[test]
+    fn contract_user_errors_name_the_contract_and_the_suspension_end() {
+        let contract_id = Identifier::random();
+        let banned = TaskError::ContractUserBanned {
+            contract_id,
+            identity_id: Identifier::random(),
+            source_error: Box::new(SdkError::Generic("banned".to_string())),
+        };
+        assert!(
+            banned
+                .to_string()
+                .contains(&contract_id.to_string(Encoding::Base58))
+        );
+        let suspended = TaskError::ContractUserSuspended {
+            contract_id,
+            identity_id: Identifier::random(),
+            until_ms: 1_758_140_722_000,
+            source_error: Box::new(SdkError::Generic("suspended".to_string())),
+        };
+        // Dates in messages follow the model's formatter: the user's time zone,
+        // like every other date the app shows.
+        let until = crate::model::datetime::local_date_time_from_unix_millis(1_758_140_722_000);
+        assert!(!until.is_empty());
+        assert!(
+            suspended.to_string().contains(&format!("until {until}.")),
+            "got: {suspended}"
+        );
+        let over_limit = TaskError::PreProgrammedDistributionOverLimit {
+            token_position: 0,
+            timestamp_ms: 1_758_140_722_000,
+            source_error: Box::new(SdkError::Generic("over".to_string())),
+        };
+        assert!(
+            over_limit
+                .to_string()
+                .contains(&format!("at {until} add up")),
+            "got: {over_limit}"
+        );
+    }
+
+    #[test]
+    fn budget_exceeded_names_both_amounts_in_dash() {
+        let error = TaskError::SigningKeyBudgetExceeded {
+            key_id: 1,
+            remaining_budget: 50_000_000_000,
+            required_budget: 100_000_000_000,
+            source_error: Box::new(SdkError::Generic("budget".to_string())),
+        };
+        let message = error.to_string();
+        assert!(message.contains("costs 1 DASH"), "got: {message}");
+        assert!(message.contains("only 0.5 DASH"), "got: {message}");
+    }
+
+    /// A second claim of a once-per-identity distribution maps to its own
+    /// variant carrying the ids, so the claim flow can remember the claim.
+    #[test]
+    fn once_per_identity_already_claimed_maps_to_its_variant() {
+        use dash_sdk::dpp::consensus::state::token::TokenOncePerIdentityDistributionAlreadyClaimedError;
+        let (token_id, identity_id) = (Identifier::random(), Identifier::random());
+        let consensus =
+            ConsensusError::from(TokenOncePerIdentityDistributionAlreadyClaimedError::new(
+                token_id,
+                identity_id,
+                1_758_140_722_000,
+            ));
+        let sdk_err = SdkError::StateTransitionBroadcastError(
+            dash_sdk::error::StateTransitionBroadcastError {
+                code: 40722,
+                message: "already claimed".to_string(),
+                cause: Some(consensus),
+            },
+        );
+        match TaskError::from(sdk_err) {
+            TaskError::TokenOncePerIdentityAlreadyClaimed {
+                token_id: t,
+                identity_id: i,
+                claimed_at_ms,
+                ..
+            } => {
+                assert_eq!(
+                    (t, i, claimed_at_ms),
+                    (token_id, identity_id, 1_758_140_722_000)
+                );
+            }
+            other => panic!("got {other:?}"),
+        }
+    }
+
+    /// An unclassified SDK failure behind a wallet-runtime token operation
+    /// keeps the operation, so the message names what did not complete.
+    #[test]
+    fn token_operation_failure_without_a_specific_cause_names_the_operation() {
+        let err =
+            TaskError::from_token_operation_failure("claim", SdkError::Generic("boom".to_string()));
+        assert!(
+            matches!(
+                err,
+                TaskError::TokenOperationFailed {
+                    operation: TokenOperationKind::Claim,
+                    ..
+                }
+            ),
+            "got {err:?}"
+        );
+        assert_eq!(
+            err.to_string(),
+            "The token claim did not complete. Check your connection and try again."
+        );
+    }
+
+    /// A token operation rejected with a specific consensus cause keeps the
+    /// specific variant: the operation label must not mask a better message.
+    #[test]
+    fn token_operation_failure_with_a_specific_cause_keeps_it() {
+        use dash_sdk::dpp::consensus::state::token::IdentityTokenAccountNotFrozenError;
+        let consensus = ConsensusError::from(IdentityTokenAccountNotFrozenError::new(
+            Identifier::random(),
+            Identifier::random(),
+            "Unfreeze".to_string(),
+        ));
+        let sdk_err = SdkError::StateTransitionBroadcastError(
+            dash_sdk::error::StateTransitionBroadcastError {
+                code: 40703,
+                message: "identity token account is not frozen".to_string(),
+                cause: Some(consensus),
+            },
+        );
+        let err = TaskError::from_token_operation_failure("unfreeze", sdk_err);
+        assert!(
+            matches!(err, TaskError::TokenAccountNotFrozen { .. }),
+            "got {err:?}"
+        );
+    }
+
+    /// Every label upstream emits today maps to its own kind; an unknown one
+    /// degrades to the generic kind instead of failing.
+    #[test]
+    fn token_operation_labels_map_to_kinds() {
+        for (label, kind) in [
+            ("claim", TokenOperationKind::Claim),
+            ("mint", TokenOperationKind::Mint),
+            ("burn", TokenOperationKind::Burn),
+            ("transfer", TokenOperationKind::Transfer),
+            ("freeze", TokenOperationKind::Freeze),
+            ("unfreeze", TokenOperationKind::Unfreeze),
+            (
+                "destroy frozen funds",
+                TokenOperationKind::DestroyFrozenFunds,
+            ),
+            ("pause", TokenOperationKind::Pause),
+            ("resume", TokenOperationKind::Resume),
+            ("set price", TokenOperationKind::SetPrice),
+            ("purchase", TokenOperationKind::Purchase),
+            ("config update", TokenOperationKind::ConfigUpdate),
+            (
+                "something new",
+                TokenOperationKind::Unrecognized {
+                    label: "something new",
+                },
+            ),
+        ] {
+            assert_eq!(
+                TokenOperationKind::from_upstream_label(label),
+                kind,
+                "{label}"
+            );
+        }
+    }
+
     #[test]
     fn test_identity_token_account_not_frozen_from_consensus_error() {
         use dash_sdk::dpp::consensus::state::token::IdentityTokenAccountNotFrozenError;
diff --git a/src/backend_task/identity/add_key_to_identity.rs b/src/backend_task/identity/add_key_to_identity.rs
index fb3954960..928fe47ee 100644
--- a/src/backend_task/identity/add_key_to_identity.rs
+++ b/src/backend_task/identity/add_key_to_identity.rs
@@ -2,9 +2,12 @@ use super::BackendTaskSuccessResult;
 use crate::backend_task::FeeResult;
 use crate::backend_task::error::TaskError;
 use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
 use crate::model::derived_identity_key::{
     derivation_index_limit, derivation_wallet, is_derivable_key_type, occupied_indices,
 };
+use crate::model::identity_key_limits::{contract_bounds_allowed, validate_key_limits};
+use crate::model::identity_key_usability::now_ms;
 use crate::model::qualified_identity::PrivateKeyTarget::{self, PrivateKeyOnMainIdentity};
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::qualified_identity::encrypted_key_storage::{
@@ -22,6 +25,7 @@ use dash_sdk::dpp::identity::hash::IdentityPublicKeyHashMethodsV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::{
     IdentityPublicKeyGettersV0, IdentityPublicKeySettersV0,
 };
+use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
 use dash_sdk::dpp::key_wallet::bip32::{DerivationPath, KeyDerivationType};
 use dash_sdk::dpp::prelude::UserFeeIncrease;
 use dash_sdk::dpp::state_transition::identity_update_transition::IdentityUpdateTransition;
@@ -31,6 +35,36 @@ use dash_sdk::platform::transition::broadcast::BroadcastStateTransition;
 use dash_sdk::platform::{Fetch, Identifier, Identity};
 
 impl AppContext {
+    fn validate_added_key_configuration(
+        &self,
+        public_key_to_add: &QualifiedIdentityPublicKey,
+    ) -> Result<(), TaskError> {
+        // Key limits (protocol version 14) are checked before anything is
+        // prompted for or broadcast: an older network cannot decode such a
+        // key, and a limit Platform refuses would still be charged.
+        if public_key_to_add.identity_public_key.has_limits() {
+            if !FeatureGate::IdentityKeyLimits.is_available(self) {
+                return Err(TaskError::KeyLimitsNotSupported);
+            }
+            validate_key_limits(&public_key_to_add.identity_public_key, now_ms())?;
+        }
+
+        {
+            let key = &public_key_to_add.identity_public_key;
+            if key.contract_bounds().is_some()
+                && !contract_bounds_allowed(
+                    key.purpose(),
+                    key.security_level(),
+                    FeatureGate::ContractBoundAuthenticationKeys.is_available(self),
+                )
+            {
+                return Err(TaskError::ContractBoundAuthenticationKeysNotSupported);
+            }
+        }
+
+        Ok(())
+    }
+
     pub(super) async fn add_key_to_identity(
         &self,
         sdk: &Sdk,
@@ -69,6 +103,7 @@ impl AppContext {
         index: u32,
         expected_key_id: KeyID,
     ) -> Result<BackendTaskSuccessResult, TaskError> {
+        self.validate_added_key_configuration(&key)?;
         let (identity, key) = self
             .prepare_derived_identity_key(&identity.identity.id(), key, index)
             .await?;
@@ -182,6 +217,8 @@ impl AppContext {
         //
         // A wallet-derived key has no private bytes to seal (it stays
         // protected by its wallet), so it needs no identity password (SEC-105).
+        self.validate_added_key_configuration(&public_key_to_add)?;
+
         let verify_scope = match material {
             NewKeyMaterial::Private(_) => {
                 self.protected_identity_verify_scope(&qualified_identity)?
@@ -641,7 +678,7 @@ mod tests {
     async fn derived_key_persists_as_path_and_signs_after_reload() {
         use crate::context::test_staging::stage_identity_with_vaulted_keys;
         use crate::model::derived_identity_key::test_support::fixture;
-        use dash_sdk::dpp::dashcore::secp256k1::{Message, Secp256k1, SecretKey};
+        use dash_sdk::dpp::secp256k1::{Message, SecretKey};
 
         let staged = stage_identity_with_vaulted_keys([0xAA; 32], [0xBB; 32]).await;
         let (mut identity, cache, seed_hash, seed) = fixture();
@@ -703,14 +740,14 @@ mod tests {
             .get_resolve_with_seed(&placement, &wallets, &seed, Network::Testnet)
             .unwrap()
             .unwrap();
-        let secp = Secp256k1::new();
-        let secret = SecretKey::from_slice(bytes.as_ref()).unwrap();
+
+        let secret = SecretKey::from_secret_bytes(*bytes).unwrap();
         let message = Message::from_digest([1; 32]);
-        let signature = secp.sign_ecdsa(&message, &secret);
-        secp.verify_ecdsa(
-            &message,
+        let signature = dash_sdk::dpp::secp256k1::ecdsa::sign(message, &secret);
+        dash_sdk::dpp::secp256k1::ecdsa::verify(
             &signature,
-            &cache.get(Network::Testnet, 0, 3).unwrap().inner,
+            message,
+            &cache.get(Network::Testnet, 0, 3).unwrap().inner.into(),
         )
         .unwrap();
     }
@@ -833,14 +870,14 @@ mod tests {
     /// The stage's identity as published after another device added a key
     /// (not from this wallet) at key id 1.
     fn network_record_with_foreign_key(stage: &DerivedStage) -> Identity {
-        use dash_sdk::dpp::dashcore::secp256k1::{PublicKey, Secp256k1, SecretKey};
+        use dash_sdk::dpp::secp256k1::{PublicKey, SecretKey};
         let mut record = stage.identity.identity.clone();
         let mut foreign = record.public_keys()[&0].clone();
         foreign.set_id(1);
         foreign.set_security_level(dash_sdk::dpp::identity::SecurityLevel::HIGH);
-        let secret = SecretKey::from_slice(&[9; 32]).unwrap();
+        let secret = SecretKey::from_secret_bytes([9; 32]).unwrap();
         foreign.set_data(
-            PublicKey::from_secret_key(&Secp256k1::new(), &secret)
+            PublicKey::from_secret_key(&secret)
                 .serialize()
                 .to_vec()
                 .into(),
@@ -1864,4 +1901,105 @@ mod tests {
             "nothing is written for an unloaded identity",
         );
     }
+
+    fn key_with_limits(total_budget: Option<u64>) -> QualifiedIdentityPublicKey {
+        use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
+        use dash_sdk::dpp::identity::{IdentityPublicKey, KeyType, Purpose, SecurityLevel};
+        QualifiedIdentityPublicKey {
+            identity_public_key: IdentityPublicKey::from(IdentityPublicKeyV0 {
+                id: 5,
+                purpose: Purpose::AUTHENTICATION,
+                security_level: SecurityLevel::HIGH,
+                contract_bounds: None,
+                key_type: KeyType::ECDSA_SECP256K1,
+                read_only: false,
+                data: vec![2; 33].into(),
+                disabled_at: None,
+            })
+            .with_limits(total_budget, Some(u64::MAX)),
+            in_wallet_at_derivation_path: None,
+        }
+    }
+
+    #[tokio::test]
+    async fn a_key_with_limits_needs_a_network_that_supports_them() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let sdk = dash_sdk::Sdk::new_mock();
+
+        // Not known yet (0), and mainnet's 13.
+        for version in [0, 13] {
+            ctx.set_platform_protocol_version(version);
+            let identity = super::super::key_limits_test_identity();
+            let result = ctx
+                .add_key_to_identity(&sdk, identity, key_with_limits(Some(1)), [1; 32])
+                .await;
+
+            assert!(
+                matches!(result, Err(TaskError::KeyLimitsNotSupported)),
+                "protocol {version}: got {result:?}"
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn a_bound_authentication_key_needs_a_network_that_admits_it() {
+        use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+        use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
+        use dash_sdk::dpp::identity::{IdentityPublicKey, KeyType, Purpose, SecurityLevel};
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        ctx.set_platform_protocol_version(13);
+        let sdk = dash_sdk::Sdk::new_mock();
+        let key = QualifiedIdentityPublicKey {
+            identity_public_key: IdentityPublicKey::from(IdentityPublicKeyV0 {
+                id: 5,
+                purpose: Purpose::AUTHENTICATION,
+                security_level: SecurityLevel::HIGH,
+                contract_bounds: Some(ContractBounds::SingleContract {
+                    id: dash_sdk::platform::Identifier::random(),
+                }),
+                key_type: KeyType::ECDSA_SECP256K1,
+                read_only: false,
+                data: vec![2; 33].into(),
+                disabled_at: None,
+            }),
+            in_wallet_at_derivation_path: None,
+        };
+
+        let result = ctx
+            .add_key_to_identity(&sdk, super::super::key_limits_test_identity(), key, [1; 32])
+            .await;
+
+        assert!(
+            matches!(
+                result,
+                Err(TaskError::ContractBoundAuthenticationKeysNotSupported)
+            ),
+            "got {result:?}"
+        );
+    }
+
+    #[tokio::test]
+    async fn a_key_with_a_zero_budget_is_refused_locally() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        ctx.set_platform_protocol_version(dash_sdk::dpp::version::v14::PROTOCOL_VERSION_14);
+        let sdk = dash_sdk::Sdk::new_mock();
+        let identity = super::super::key_limits_test_identity();
+
+        let result = ctx
+            .add_key_to_identity(&sdk, identity, key_with_limits(Some(0)), [1; 32])
+            .await;
+
+        assert!(
+            matches!(
+                result,
+                Err(TaskError::InvalidKeyLimits {
+                    source: crate::model::identity_key_limits::KeyLimitsError::ZeroBudget
+                })
+            ),
+            "got {result:?}"
+        );
+    }
 }
diff --git a/src/backend_task/identity/dpns_usernames.rs b/src/backend_task/identity/dpns_usernames.rs
index 3af5c4d0e..72473b787 100644
--- a/src/backend_task/identity/dpns_usernames.rs
+++ b/src/backend_task/identity/dpns_usernames.rs
@@ -1,4 +1,8 @@
 //! Identity-side username ops: availability checks and own-request status.
+//!
+//! TODO(dpns-marketplace): selling, buying and transferring usernames through
+//! the platform-wallet marketplace are not offered yet. See
+//! https://github.com/dashpay/dash-evo-tool/issues/1103
 
 use std::collections::BTreeMap;
 
@@ -91,9 +95,10 @@ impl AppContext {
     /// The lookup for a registered name with this normalized label.
     pub(super) fn dpns_domain_query(&self, normalized: &str) -> DocumentQuery {
         DocumentQuery {
+            integer_range_clauses: vec![],
             sub_queries: Vec::new(),
             select: SelectProjection::documents(),
-            data_contract: self.dpns_contract.clone(),
+            data_contract: self.dpns_contract(),
             document_type_name: "domain".to_string(),
             where_clauses: vec![
                 WhereClause {
@@ -127,7 +132,7 @@ impl AppContext {
     /// Convert a proved vote state into the pure snapshot the model decides on.
     fn contest_snapshot(&self, sdk: &Sdk, contenders: &Contenders) -> ContestSnapshot {
         let documents = self
-            .dpns_contract
+            .dpns_contract()
             .document_type_cloned_for_name("domain")
             .ok()
             .and_then(|document_type| {
@@ -440,9 +445,10 @@ mod tests {
 
     async fn sdk_with_owned_name(ctx: &AppContext, id: Identifier) -> Sdk {
         let query = DocumentQuery {
+            integer_range_clauses: vec![],
             sub_queries: vec![],
             select: SelectProjection::documents(),
-            data_contract: ctx.dpns_contract.clone(),
+            data_contract: ctx.dpns_contract(),
             document_type_name: "domain".into(),
             where_clauses: vec![WhereClause {
                 field: "records.identity".into(),
@@ -458,6 +464,8 @@ mod tests {
             start: None,
         };
         let document = Document::V0(dash_sdk::dpp::document::DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: Identifier::from([88; 32]),
             owner_id: id,
             creator_id: None,
@@ -604,7 +612,7 @@ mod tests {
             .expect_fetch_many::<Identifier, ContenderWithSerializedDocument, _, Contenders>(
                 ContestedDocumentVotePollDriveQuery {
                     vote_poll: crate::model::dpns_voting::dpns_vote_poll(
-                        &ctx.dpns_contract,
+                        &ctx.dpns_contract(),
                         &normalize_dpns_label("Alice"),
                     )
                     .unwrap(),
@@ -798,7 +806,7 @@ mod tests {
             .expect_fetch_many::<Identifier, ContenderWithSerializedDocument, _, Contenders>(
                 ContestedDocumentVotePollDriveQuery {
                     vote_poll: crate::model::dpns_voting::dpns_vote_poll(
-                        &ctx.dpns_contract,
+                        &ctx.dpns_contract(),
                         "d1ssh",
                     )
                     .unwrap(),
diff --git a/src/backend_task/identity/key_limits.rs b/src/backend_task/identity/key_limits.rs
new file mode 100644
index 000000000..d4f6f2ac4
--- /dev/null
+++ b/src/backend_task/identity/key_limits.rs
@@ -0,0 +1,467 @@
+//! Usage limits of identity authentication keys (protocol version 14).
+
+use std::collections::BTreeMap;
+
+use std::sync::Arc;
+
+use crate::backend_task::error::TaskError;
+use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
+use crate::model::identity_key_limits::{
+    KeyLimitsError, KeyLimitsRaise, ReviewedSignerUnusable, reviewed_key_limits_signer,
+};
+use crate::model::identity_key_usability::now_ms;
+use crate::model::qualified_identity::QualifiedIdentity;
+use dash_sdk::Sdk;
+use dash_sdk::dpp::fee::Credits;
+use dash_sdk::dpp::identity::KeyID;
+use dash_sdk::dpp::identity::accessors::{IdentityGettersV0, IdentitySettersV0};
+use dash_sdk::dpp::identity::signer::Signer;
+use dash_sdk::platform::Identity;
+use dash_sdk::platform::identity_keys_remaining_budgets::{
+    IdentityKeysRemainingBudgets, IdentityKeysRemainingBudgetsQuery,
+};
+use dash_sdk::platform::transition::update_identity_key_limits::UpdateIdentityKeyLimits;
+use dash_sdk::platform::{Fetch, Identifier};
+use dash_sdk::query_types::IdentityBalance;
+
+use super::BackendTaskSuccessResult;
+
+impl AppContext {
+    /// What is left of the budgets of `key_ids` of `identity_id`.
+    ///
+    /// One entry per requested key: `Some(credits)` for a budgeted key (zero
+    /// means the key can no longer sign), `None` for a key without a budget or
+    /// one Platform does not know.
+    pub(super) async fn fetch_key_remaining_budgets(
+        &self,
+        sdk: &Sdk,
+        identity_id: Identifier,
+        key_ids: Vec<KeyID>,
+    ) -> Result<BackendTaskSuccessResult, TaskError> {
+        // A network below protocol version 14 answers this query on no node,
+        // so a request would exhaust the SDK's address pool.
+        if !FeatureGate::IdentityKeyLimits.is_available(self) {
+            return Err(TaskError::KeyRemainingBudgetsNotSupported);
+        }
+        if key_ids.is_empty() {
+            return Ok(BackendTaskSuccessResult::IdentityKeyRemainingBudgets {
+                identity_id,
+                budgets: BTreeMap::new(),
+            });
+        }
+        let fetched = IdentityKeysRemainingBudgets::fetch(
+            sdk,
+            IdentityKeysRemainingBudgetsQuery {
+                identity_id,
+                key_ids: key_ids.clone(),
+            },
+        )
+        .await?
+        .unwrap_or_default();
+
+        Ok(BackendTaskSuccessResult::IdentityKeyRemainingBudgets {
+            identity_id,
+            budgets: remaining_budgets_by_key(&key_ids, &fetched),
+        })
+    }
+}
+
+impl AppContext {
+    /// Raise the limits of a key of `qualified_identity` exactly as reviewed
+    /// in `raise`.
+    ///
+    /// The key is read as Platform holds it now. If its limits are not the
+    /// ones the user reviewed (raised elsewhere meanwhile), nothing is signed:
+    /// the live keys replace the local copies and the raise is refused, so the
+    /// screen quotes it again. The same holds when the reviewed signer can no
+    /// longer sign it — another key is never picked in its place. The
+    /// updated key replaces the local copy.
+    pub(super) async fn raise_key_limits(
+        &self,
+        sdk: &Sdk,
+        qualified_identity: QualifiedIdentity,
+        raise: KeyLimitsRaise,
+    ) -> Result<BackendTaskSuccessResult, TaskError> {
+        if !FeatureGate::IdentityKeyLimits.is_available(self) {
+            return Err(TaskError::KeyLimitsNotSupported);
+        }
+        let identity_id = qualified_identity.identity.id();
+        let key_id = raise.key_id;
+        let identity = Identity::fetch_by_identifier(sdk, identity_id)
+            .await?
+            .ok_or(TaskError::IdentityMissingOnNetwork { identity_id })?;
+        let key = identity
+            .public_keys()
+            .get(&key_id)
+            .ok_or(TaskError::IdentityKeyNotFound { key_id })?;
+        let refusal = match raise.check_against(key, now_ms()) {
+            Err(error) => Some(TaskError::from(error)),
+            Ok(()) => {
+                reviewed_key_limits_signer(identity.public_keys(), raise.signing_key_id, |key| {
+                    qualified_identity.can_sign_with(key)
+                })
+                .err()
+                .map(refused_signer_error)
+            }
+        };
+        if let Some(refusal) = refusal {
+            // Nothing is signed. Keep the keys as Platform holds them, so
+            // the screen's next review quotes the live limits and picks its
+            // signer from the live key set.
+            let live_keys: Vec<_> = identity.public_keys().values().cloned().collect();
+            self.edit_local_qualified_identity(&identity_id, move |fresh| {
+                for key in live_keys {
+                    fresh.identity.add_public_key(key);
+                }
+                Ok(())
+            })?;
+            return Err(refusal);
+        }
+
+        let signing_key = identity
+            .public_keys()
+            .get(&raise.signing_key_id)
+            .cloned()
+            .ok_or(TaskError::NoKeyLimitsSigningKey)?;
+        let signer = Arc::new(qualified_identity);
+
+        let updated = identity
+            .update_key_limits(
+                sdk,
+                key_id,
+                raise.total_budget,
+                raise.expires_at,
+                Some(&signing_key),
+                Arc::clone(&signer),
+                None,
+            )
+            .await?;
+
+        // The update paid a fee, but its proof holds only the rewritten key:
+        // read the balance after it, proved, so the stored identity does not
+        // overstate what later fees can draw on.
+        let balance = IdentityBalance::fetch(sdk, identity_id)
+            .await
+            .map_err(TaskError::from);
+        self.finish_raise(identity_id, updated, balance)
+    }
+}
+
+impl AppContext {
+    /// Store the outcome of a raise the network accepted: `key` as rewritten,
+    /// and `balance`, the identity's balance read after the update.
+    fn finish_raise(
+        &self,
+        identity_id: Identifier,
+        key: dash_sdk::dpp::identity::IdentityPublicKey,
+        balance: Result<Option<Credits>, TaskError>,
+    ) -> Result<BackendTaskSuccessResult, TaskError> {
+        let (balance, balance_error) = match balance {
+            Ok(Some(balance)) => (Some(balance), None),
+            Ok(None) => (None, Some(None)),
+            Err(error) => (None, Some(Some(Box::new(error)))),
+        };
+        self.persist_raised_key(&identity_id, key.clone(), balance)?;
+        // The raise is made and its key stored; only the balance is stale.
+        if let Some(source) = balance_error {
+            return Err(TaskError::KeyLimitsRaisedButBalanceNotRefreshed { source });
+        }
+        Ok(BackendTaskSuccessResult::IdentityKeyLimitsRaised { identity_id, key })
+    }
+
+    /// Store `key`, whose limits the network has just raised, and `balance`,
+    /// when read, on the record of `identity_id`, in one write. The raise is
+    /// already on the network, so a failure here is reported as
+    /// [`TaskError::KeyLimitsRaisedButNotSaved`], not as a failed raise.
+    fn persist_raised_key(
+        &self,
+        identity_id: &Identifier,
+        key: dash_sdk::dpp::identity::IdentityPublicKey,
+        balance: Option<Credits>,
+    ) -> Result<(), TaskError> {
+        self.edit_local_qualified_identity(identity_id, move |fresh| {
+            fresh.identity.add_public_key(key);
+            if let Some(balance) = balance {
+                fresh.identity.set_balance(balance);
+            }
+            Ok(())
+        })
+        .map(|_| ())
+        .map_err(|source| TaskError::KeyLimitsRaisedButNotSaved {
+            source: Box::new(source),
+        })
+    }
+}
+
+/// The error for a reviewed signer Platform no longer accepts.
+fn refused_signer_error(reason: ReviewedSignerUnusable) -> TaskError {
+    match reason {
+        ReviewedSignerUnusable::SignerChanged => KeyLimitsError::SignerChanged.into(),
+        ReviewedSignerUnusable::NoSigner => TaskError::NoKeyLimitsSigningKey,
+    }
+}
+
+/// One entry per requested key id, in key id order: the remaining budget
+/// Platform reported, `None` when it reported none.
+fn remaining_budgets_by_key(
+    key_ids: &[KeyID],
+    fetched: &IdentityKeysRemainingBudgets,
+) -> BTreeMap<KeyID, Option<Credits>> {
+    key_ids
+        .iter()
+        .map(|key_id| (*key_id, fetched.get(key_id).copied().flatten()))
+        .collect()
+}
+
+#[cfg(test)]
+pub(super) mod tests {
+    use super::*;
+    use crate::backend_task::identity::IdentityTask;
+    use crate::backend_task::{BackendTask, BackendTaskContext};
+    use crate::model::qualified_identity::{IdentityStatus, IdentityType};
+    use dash_sdk::dpp::dashcore::Network;
+    use dash_sdk::dpp::version::PlatformVersion;
+
+    pub(crate) fn user_identity() -> QualifiedIdentity {
+        let identity =
+            Identity::create_basic_identity(Identifier::random(), PlatformVersion::latest())
+                .expect("basic identity");
+        QualifiedIdentity {
+            identity,
+            associated_voter_identity: None,
+            associated_operator_identity: None,
+            associated_owner_key_id: None,
+            identity_type: IdentityType::User,
+            alias: None,
+            private_keys: Default::default(),
+            dpns_names: vec![],
+            associated_wallets: BTreeMap::new(),
+            secret_access: None,
+            wallet_index: None,
+            top_ups: Default::default(),
+            status: IdentityStatus::Active,
+            network: Network::Testnet,
+        }
+    }
+
+    /// A reviewed signer replaced on Platform asks for a fresh review; only
+    /// when no key can sign at all is the user told to import one.
+    #[test]
+    fn a_changed_signer_asks_for_a_new_review_not_a_key_import() {
+        let changed = refused_signer_error(ReviewedSignerUnusable::SignerChanged);
+        assert!(matches!(
+            changed,
+            TaskError::InvalidKeyLimits {
+                source: KeyLimitsError::SignerChanged
+            }
+        ));
+        assert!(changed.to_string().contains("Review the change again"));
+
+        assert!(matches!(
+            refused_signer_error(ReviewedSignerUnusable::NoSigner),
+            TaskError::NoKeyLimitsSigningKey
+        ));
+    }
+
+    /// Protocol versions below 14: not known yet (0), and mainnet's 13.
+    const PRE_V14_PROTOCOL_VERSIONS: [u32; 2] = [0, 13];
+
+    /// A raise the network accepted stores the rewritten key and the balance
+    /// read after it, so the stored balance reflects the update's fee.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn a_raise_stores_the_key_and_the_balance_after_its_fee() {
+        use crate::context::test_staging::stage_identity_with_vaulted_keys;
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
+
+        let staged = stage_identity_with_vaulted_keys([0xA1; 32], [0xB1; 32]).await;
+        let ctx = &staged.ctx;
+        let stored = ctx
+            .get_local_qualified_identity(&staged.id)
+            .expect("read")
+            .expect("staged");
+        let key = dash_sdk::dpp::identity::IdentityPublicKey::random_key(
+            7,
+            Some(7),
+            PlatformVersion::latest(),
+        )
+        .with_limits(Some(9_000), None);
+        let before = stored.identity.balance();
+
+        let result = ctx.finish_raise(staged.id, key.clone(), Ok(Some(before + 1_234)));
+
+        assert!(
+            matches!(
+                result,
+                Ok(BackendTaskSuccessResult::IdentityKeyLimitsRaised { .. })
+            ),
+            "got {result:?}"
+        );
+        let after = ctx
+            .get_local_qualified_identity(&staged.id)
+            .expect("read")
+            .expect("staged");
+        assert_eq!(after.identity.balance(), before + 1_234);
+        assert_eq!(
+            after
+                .identity
+                .public_keys()
+                .get(&key.id())
+                .and_then(|k| k.total_budget()),
+            Some(9_000)
+        );
+    }
+
+    /// A balance that cannot be read after an accepted raise does not make the
+    /// raise a failure: the key is stored, and the user is told to refresh.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn an_unread_balance_after_a_raise_still_stores_the_key() {
+        use crate::context::test_staging::stage_identity_with_vaulted_keys;
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
+
+        let staged = stage_identity_with_vaulted_keys([0xA2; 32], [0xB2; 32]).await;
+        let ctx = &staged.ctx;
+        let stored = ctx
+            .get_local_qualified_identity(&staged.id)
+            .expect("read")
+            .expect("staged");
+        let key = dash_sdk::dpp::identity::IdentityPublicKey::random_key(
+            7,
+            Some(7),
+            PlatformVersion::latest(),
+        )
+        .with_limits(Some(9_000), None);
+
+        for balance in [Err(TaskError::IdentityNotFoundLocally), Ok(None)] {
+            let result = ctx.finish_raise(staged.id, key.clone(), balance);
+            assert!(
+                matches!(
+                    result,
+                    Err(TaskError::KeyLimitsRaisedButBalanceNotRefreshed { .. })
+                ),
+                "got {result:?}"
+            );
+        }
+        let after = ctx
+            .get_local_qualified_identity(&staged.id)
+            .expect("read")
+            .expect("staged");
+        assert_eq!(
+            after
+                .identity
+                .public_keys()
+                .get(&key.id())
+                .and_then(|k| k.total_budget()),
+            Some(9_000)
+        );
+        assert_eq!(after.identity.balance(), stored.identity.balance());
+    }
+
+    /// A raise the network accepted is reported as made, not as failed, when
+    /// storing the raised key on this device fails afterward.
+    #[test]
+    fn a_raise_that_cannot_be_saved_is_reported_as_made() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let identity = user_identity();
+        let key = dash_sdk::dpp::identity::IdentityPublicKey::random_key(
+            1,
+            Some(1),
+            PlatformVersion::latest(),
+        );
+
+        // Nothing is stored for this identity, so the write fails.
+        let result = ctx.persist_raised_key(&identity.identity.id(), key, Some(1));
+
+        assert!(
+            matches!(result, Err(TaskError::KeyLimitsRaisedButNotSaved { .. })),
+            "got {result:?}"
+        );
+    }
+
+    /// Before protocol version 14 is confirmed, no limits update is built or
+    /// broadcast: an older network cannot decode it.
+    #[tokio::test]
+    async fn raising_limits_is_refused_until_the_network_supports_them() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let sdk = Sdk::new_mock();
+
+        for version in PRE_V14_PROTOCOL_VERSIONS {
+            ctx.set_platform_protocol_version(version);
+            let raise = KeyLimitsRaise {
+                key_id: 1,
+                seen_total_budget: Some(1),
+                seen_expires_at: None,
+                total_budget: Some(2),
+                expires_at: None,
+                signing_key_id: 0,
+            };
+            let result = ctx.raise_key_limits(&sdk, user_identity(), raise).await;
+
+            assert!(
+                matches!(result, Err(TaskError::KeyLimitsNotSupported)),
+                "protocol {version}: got {result:?}"
+            );
+        }
+    }
+
+    /// Before protocol version 14 is confirmed, the remaining-budget query is
+    /// not sent: an older network does not answer it, on any node.
+    #[tokio::test]
+    async fn remaining_budgets_are_not_queried_until_the_network_supports_them() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let sdk = Sdk::new_mock();
+
+        for version in PRE_V14_PROTOCOL_VERSIONS {
+            ctx.set_platform_protocol_version(version);
+            for key_ids in [vec![1, 2], vec![]] {
+                let result = ctx
+                    .fetch_key_remaining_budgets(&sdk, Identifier::random(), key_ids)
+                    .await;
+                assert!(
+                    matches!(result, Err(TaskError::KeyRemainingBudgetsNotSupported)),
+                    "protocol {version}: got {result:?}"
+                );
+            }
+        }
+    }
+
+    /// A failed raise must reach the screen it came from, keyed by identity
+    /// and key, so that screen re-enables its form.
+    #[test]
+    fn a_raise_is_attributed_to_its_identity_and_key() {
+        let identity = user_identity();
+        let identity_id = identity.identity.id();
+        let task = BackendTask::IdentityTask(IdentityTask::RaiseKeyLimits {
+            identity: Box::new(identity),
+            raise: KeyLimitsRaise {
+                key_id: 7,
+                seen_total_budget: Some(1),
+                seen_expires_at: None,
+                total_budget: Some(2),
+                expires_at: None,
+                signing_key_id: 0,
+            },
+        });
+        assert_eq!(
+            BackendTaskContext::from(&task).raise_key_limits_target(),
+            Some((identity_id, 7))
+        );
+    }
+
+    #[test]
+    fn every_requested_key_gets_an_entry() {
+        let fetched: IdentityKeysRemainingBudgets = [(1, Some(500)), (2, None), (3, Some(0))]
+            .into_iter()
+            .collect();
+        let by_key = remaining_budgets_by_key(&[1, 2, 3, 4], &fetched);
+        assert_eq!(
+            by_key,
+            BTreeMap::from([(1, Some(500)), (2, None), (3, Some(0)), (4, None)])
+        );
+    }
+}
diff --git a/src/backend_task/identity/load_identity.rs b/src/backend_task/identity/load_identity.rs
index e6e687210..b7dc03e53 100644
--- a/src/backend_task/identity/load_identity.rs
+++ b/src/backend_task/identity/load_identity.rs
@@ -19,7 +19,7 @@ use crate::model::wallet::{Wallet, WalletSeedHash};
 use crate::ui::identity::add_new_identity_screen::MAX_IDENTITY_INDEX;
 use dash_sdk::Sdk;
 use dash_sdk::dashcore_rpc::dashcore::PrivateKey;
-use dash_sdk::dashcore_rpc::dashcore::key::Secp256k1;
+
 use dash_sdk::dpp::dashcore::ProTxHash;
 use dash_sdk::dpp::dashcore::hashes::Hash;
 use dash_sdk::dpp::identity::KeyType;
@@ -268,10 +268,7 @@ impl AppContext {
                 if let Ok(private_key) =
                     PrivateKey::from_byte_array(&voting_private_key_bytes, self.network)
                 {
-                    let voting_address = private_key
-                        .public_key(&Secp256k1::new())
-                        .pubkey_hash()
-                        .to_byte_array();
+                    let voting_address = private_key.public_key().pubkey_hash().to_byte_array();
                     let voter_identifier = voter_identity_id(
                         ProTxHash::from_byte_array(identity_id.to_buffer()),
                         &voting_address,
@@ -334,7 +331,6 @@ impl AppContext {
                 })
                 .collect::<Result<Vec<PrivateKey>, TaskError>>()?;
 
-            let secp = Secp256k1::new();
             #[allow(clippy::type_complexity)]
             let (public_key_lookup, public_key_hash_lookup): (
                 HashMap<Vec<u8>, [u8; 32]>,
@@ -342,12 +338,12 @@ impl AppContext {
             ) = input_private_keys
                 .into_iter()
                 .map(|private_key| {
-                    let public_key = private_key.public_key(&secp);
+                    let public_key = private_key.public_key();
                     let public_key_bytes = public_key.to_bytes();
                     let pub_key_hash = public_key.pubkey_hash().to_byte_array();
                     (
-                        (public_key_bytes, private_key.inner.secret_bytes()),
-                        (pub_key_hash, private_key.inner.secret_bytes()),
+                        (public_key_bytes, *private_key.inner.to_bytes()),
+                        (pub_key_hash, *private_key.inner.to_bytes()),
                     )
                 })
                 .unzip();
@@ -1042,7 +1038,7 @@ mod tests {
             .unwrap()
             .unwrap();
         let private_key = PrivateKey::from_byte_array(&rand::random(), Network::Testnet).unwrap();
-        let address = private_key.public_key(&Secp256k1::new()).pubkey_hash();
+        let address = private_key.public_key().pubkey_hash();
         let other_node = Identifier::from([0x75; 32]);
         let other_voter =
             Identifier::create_voter_identifier(other_node.as_bytes(), address.as_ref());
@@ -1125,7 +1121,7 @@ mod tests {
             .unwrap()
             .unwrap();
         let private_key = PrivateKey::from_byte_array(&rand::random(), Network::Testnet).unwrap();
-        let address = private_key.public_key(&Secp256k1::new()).pubkey_hash();
+        let address = private_key.public_key().pubkey_hash();
         let voter = Identifier::create_voter_identifier(staged.id.as_bytes(), address.as_ref());
         let mut voter_identity =
             Identity::create_basic_identity(voter, PlatformVersion::latest()).unwrap();
diff --git a/src/backend_task/identity/mod.rs b/src/backend_task/identity/mod.rs
index fb0a12944..4bdc82a69 100644
--- a/src/backend_task/identity/mod.rs
+++ b/src/backend_task/identity/mod.rs
@@ -1,6 +1,9 @@
 mod add_key_to_identity;
 mod auth_pubkey_resolve;
 mod discover_identities;
+mod key_limits;
+#[cfg(test)]
+pub(crate) use key_limits::tests::user_identity as key_limits_test_identity;
 mod dpns_usernames;
 mod load_identity;
 mod load_identity_by_dpns_name;
@@ -548,6 +551,19 @@ pub enum IdentityTask {
     },
     RefreshIdentity(QualifiedIdentity),
     RefreshLoadedIdentitiesOwnedDPNSNames,
+    /// Read what is left of the budgets of `key_ids` of `identity_id`
+    /// (protocol version 14 key limits). Read-only.
+    FetchKeyRemainingBudgets {
+        identity_id: Identifier,
+        key_ids: Vec<KeyID>,
+    },
+    /// Raise the limits of one of the identity's keys (protocol version 14)
+    /// exactly as the user reviewed them: refused, not recomputed, when the
+    /// key's limits moved meanwhile.
+    RaiseKeyLimits {
+        identity: Box<QualifiedIdentity>,
+        raise: crate::model::identity_key_limits::KeyLimitsRaise,
+    },
     /// Check whether a username label can be requested right now.
     CheckUsernameAvailability {
         /// The identity that would request it.
@@ -647,7 +663,7 @@ pub fn build_identity_registration_with_seed(
     identity_index: u32,
     funding_amount: Duffs,
 ) -> Result<IdentityRegistrationInfo, TaskError> {
-    let dashpay_contract_id = app_context.dashpay_contract.id();
+    let dashpay_contract_id = app_context.dashpay_contract().id();
     let key_specs = default_identity_key_specs(dashpay_contract_id);
     let network = app_context.network;
 
@@ -955,6 +971,16 @@ impl AppContext {
             IdentityTask::CheckLegacyRecovery { identity_id } => {
                 self.check_legacy_recovery(identity_id)
             }
+            IdentityTask::FetchKeyRemainingBudgets {
+                identity_id,
+                key_ids,
+            } => {
+                self.fetch_key_remaining_budgets(sdk, identity_id, key_ids)
+                    .await
+            }
+            IdentityTask::RaiseKeyLimits { identity, raise } => {
+                self.raise_key_limits(sdk, *identity, raise).await
+            }
             IdentityTask::RecoverLegacyIdentityData {
                 identity_id,
                 approved,
@@ -1372,10 +1398,7 @@ mod tests {
     /// rejected or the wallet could not sign for its own identity.
     #[test]
     fn identity_key_entry_public_matches_private_derivation() {
-        use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
-
         let seed = [0x42u8; 64];
-        let secp = Secp256k1::new();
 
         for network in [Network::Testnet, Network::Mainnet] {
             let wallet = Wallet::new_from_seed(seed, network, None, None).expect("build wallet");
@@ -1413,8 +1436,8 @@ mod tests {
                         .to_priv();
 
                     assert_eq!(
-                        entry.public_key.inner.serialize(),
-                        private_key.public_key(&secp).inner.serialize(),
+                        entry.public_key.inner.to_compressed(),
+                        private_key.public_key().inner.to_compressed(),
                         "public/private key drift at ({network:?}, id={identity_index}, key={key_index})"
                     );
 
@@ -1501,12 +1524,12 @@ mod tests {
             .expect("resolve master")
             .expect("master present");
         // The resolved private key's public key must match the spec's public key.
-        let secp = dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new();
-        let resolved_pub = dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&stored.1[..])
+
+        let resolved_pub = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(*stored.1)
             .expect("secret")
-            .public_key(&secp);
+            .public_key();
         assert_eq!(
-            master.public_key.inner.serialize(),
+            master.public_key.inner.to_compressed(),
             resolved_pub.serialize(),
             "stored path resolves to the spec's public key"
         );
diff --git a/src/backend_task/identity/refresh_loaded_identities_dpns_names.rs b/src/backend_task/identity/refresh_loaded_identities_dpns_names.rs
index 863e6b4c8..f0cdc4277 100644
--- a/src/backend_task/identity/refresh_loaded_identities_dpns_names.rs
+++ b/src/backend_task/identity/refresh_loaded_identities_dpns_names.rs
@@ -97,9 +97,10 @@ impl AppContext {
     /// The lookup for every DPNS name whose records point at `identity_id`.
     pub(super) fn owned_dpns_names_query(&self, identity_id: Identifier) -> DocumentQuery {
         DocumentQuery {
+            integer_range_clauses: vec![],
             sub_queries: Vec::new(),
             select: SelectProjection::documents(),
-            data_contract: self.dpns_contract.clone(),
+            data_contract: self.dpns_contract(),
             document_type_name: "domain".to_string(),
             where_clauses: vec![WhereClause {
                 field: "records.identity".to_string(),
@@ -177,6 +178,8 @@ mod tests {
     /// Mock the owned-names lookup of `owner` to return one name.
     async fn expect_owned_name(sdk: &mut dash_sdk::Sdk, ctx: &AppContext, owner: Identifier) {
         let document = Document::V0(dash_sdk::dpp::document::DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: owner,
             owner_id: owner,
             creator_id: None,
diff --git a/src/backend_task/identity/register_dpns_name.rs b/src/backend_task/identity/register_dpns_name.rs
index 6fb7313a8..ca130a762 100644
--- a/src/backend_task/identity/register_dpns_name.rs
+++ b/src/backend_task/identity/register_dpns_name.rs
@@ -1,3 +1,4 @@
+use crate::model::identity_key_usability::SigningScope;
 use std::sync::Arc;
 use std::sync::atomic::{AtomicBool, Ordering};
 
@@ -30,7 +31,7 @@ use dash_sdk::{
 
 use super::refresh_loaded_identities_dpns_names::name_acquired_at;
 use super::{BackendTaskSuccessResult, RegisterDpnsNameInput};
-use crate::model::dpns_usernames::{dpns_signing_requirement, key_can_sign_documents};
+use crate::model::dpns_usernames::{chosen_key_can_sign_documents, dpns_signing_requirement};
 
 fn rebrand_dpns_domain_conflict(error: TaskError) -> TaskError {
     match error {
@@ -98,6 +99,7 @@ async fn broadcast_name_registration<F, Fut>(
     identity: &QualifiedIdentity,
     signing_key: IdentityPublicKey,
     label: &str,
+    approved_contest_fee: u64,
     register: F,
 ) -> Result<Document, BroadcastFailure>
 where
@@ -108,6 +110,7 @@ where
     let preorder_confirmed = Arc::new(AtomicBool::new(false));
     let confirmed = Arc::clone(&preorder_confirmed);
     let input = SdkRegistrationInput {
+        contest_fund: Some(approved_contest_fee),
         label: label.to_owned(),
         identity: identity.identity.clone(),
         identity_public_key: signing_key,
@@ -151,7 +154,7 @@ impl AppContext {
             return Err(TaskError::InvalidDpnsName { validation });
         }
 
-        let dpns_contract = self.dpns_contract.clone();
+        let dpns_contract = self.dpns_contract();
 
         let qualified_identity = input.qualified_identity;
 
@@ -188,10 +191,20 @@ impl AppContext {
             Some(key_id) => qualified_identity
                 .identity
                 .get_public_key_by_id(key_id)
+                // A key the user chose may have expired: the chooser offers
+                // it with a warning, and Platform decides by network time.
                 .filter(|key| {
-                    key_can_sign_documents(key, dpns_signing_requirement(&self.dpns_contract))
+                    chosen_key_can_sign_documents(
+                        key,
+                        dpns_signing_requirement(&self.dpns_contract()),
+                    )
                 }),
-            None => qualified_identity.document_signing_key(&preorder_document_type),
+            None => qualified_identity.document_signing_key(
+                SigningScope::ContractWide {
+                    contract_id: dpns_contract.id(),
+                },
+                &preorder_document_type,
+            ),
         }
         .ok_or(TaskError::NoDocumentSigningKey)?;
 
@@ -214,6 +227,7 @@ impl AppContext {
             &qualified_identity,
             public_key.clone(),
             &input.name_input,
+            input.approved_contest_fee,
             register,
         )
         .await
@@ -760,7 +774,7 @@ mod tests {
         let confirmed_preorder = domain_document(identity.identity.id(), "alice-123");
 
         let failure =
-            broadcast_name_registration(&identity, key, "alice-123", |input| async move {
+            broadcast_name_registration(&identity, key, "alice-123", 0, |input| async move {
                 // As the SDK does: report the confirmed first document if asked to.
                 if let Some(report_confirmed) = input.preorder_callback {
                     report_confirmed(&confirmed_preorder);
@@ -776,6 +790,33 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn registration_never_auto_quotes_above_the_approved_contest_fund() {
+        for approved in [0, 50_000_000_000] {
+            let identity = bare_identity(4);
+            let key = dash_sdk::platform::IdentityPublicKey::random_key(
+                1,
+                Some(4),
+                PlatformVersion::latest(),
+            );
+            let _ = broadcast_name_registration(
+                &identity,
+                key,
+                "alice",
+                approved,
+                |input| async move {
+                    assert_eq!(
+                        input.contest_fund,
+                        Some(approved),
+                        "The SDK must receive the exact approved cap, including zero."
+                    );
+                    Err(unproven_broadcast_failure())
+                },
+            )
+            .await;
+        }
+    }
+
     /// With no node to confirm the first document, the broadcast stops there.
     #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
     async fn broadcast_that_cannot_confirm_the_first_document_reports_that_stage() {
@@ -789,7 +830,7 @@ mod tests {
             PlatformVersion::latest(),
         );
 
-        let failure = broadcast_name_registration(&identity, key, "alice-123", |input| {
+        let failure = broadcast_name_registration(&identity, key, "alice-123", 0, |input| {
             sdk.register_dpns_name(input)
         })
         .await
@@ -907,6 +948,8 @@ mod tests {
     /// A registered-name document as the network returns it for `label`.
     fn domain_document(owner: Identifier, label: &str) -> Document {
         Document::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: Identifier::from([0x5D; 32]),
             owner_id: owner,
             creator_id: None,
@@ -950,7 +993,7 @@ mod tests {
             .expect_fetch_many::<Identifier, ContenderWithSerializedDocument, _, Contenders>(
                 ContestedDocumentVotePollDriveQuery {
                     vote_poll: crate::model::dpns_voting::dpns_vote_poll(
-                        &ctx.dpns_contract,
+                        &ctx.dpns_contract(),
                         &normalize_dpns_label(label),
                     )
                     .expect("vote poll"),
diff --git a/src/backend_task/identity/top_up_identity.rs b/src/backend_task/identity/top_up_identity.rs
index 8a6915f62..8303e2afb 100644
--- a/src/backend_task/identity/top_up_identity.rs
+++ b/src/backend_task/identity/top_up_identity.rs
@@ -259,7 +259,8 @@ impl AppContext {
             // Unreachable from here — the caller builds only the two modes
             // above — but this is a funds path, so an upstream funding mode
             // this path cannot build fails closed instead of panicking.
-            AssetLockFunding::DrainAccountBalance { .. } => {
+            AssetLockFunding::DrainAccountBalance { .. }
+            | AssetLockFunding::DrainWalletBalance { .. } => {
                 return Err(TaskError::TopUpFundingMethodUnsupported);
             }
         };
diff --git a/src/backend_task/migration/finish_unwire.rs b/src/backend_task/migration/finish_unwire.rs
index 8f48fbc81..721eda3de 100644
--- a/src/backend_task/migration/finish_unwire.rs
+++ b/src/backend_task/migration/finish_unwire.rs
@@ -518,7 +518,7 @@ async fn refresh_dapi_nodes_once_with_legacy_check<D, F, L>(
         return;
     }
 
-    if let Err(error) = Arc::clone(app_context).reinit_core_client_and_sdk() {
+    if let Err(error) = app_context.rebuild_connection().await {
         tracing::warn!(
             target = "migration::finish_unwire",
             ?network,
@@ -3955,7 +3955,7 @@ mod tests {
         use crate::wallet_backend::single_key::{
             SingleKeyView, label_for_address, single_key_namespace_id,
         };
-        use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
         use dash_sdk::dpp::dashcore::{Address, Network, PrivateKey, PublicKey};
 
         let dir = tempfile::tempdir().expect("tempdir");
@@ -3970,7 +3970,7 @@ mod tests {
         let priv_key = PrivateKey::from_byte_array(&raw, Network::Testnet).expect("priv");
         let pub_key = PublicKey {
             compressed: priv_key.compressed,
-            inner: priv_key.inner.public_key(&Secp256k1::new()),
+            inner: priv_key.inner.public_key(),
         };
         let address = Address::p2pkh(&pub_key, Network::Testnet).to_string();
         let key_hash = crate::model::wallet::single_key::ClosedSingleKey::compute_key_hash(&raw);
diff --git a/src/backend_task/migration/legacy_restore.rs b/src/backend_task/migration/legacy_restore.rs
index 3dfe0e3b2..888c17b15 100644
--- a/src/backend_task/migration/legacy_restore.rs
+++ b/src/backend_task/migration/legacy_restore.rs
@@ -365,12 +365,12 @@ mod tests {
     #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
     async fn review_regression_restore_counts_unreadable_protected_keys() {
         use crate::model::wallet::single_key::ClosedSingleKey;
-        use dash_sdk::dpp::dashcore::{Address, PrivateKey, PublicKey, secp256k1::Secp256k1};
+        use dash_sdk::dpp::dashcore::{Address, PrivateKey, PublicKey};
         let dir = tempfile::tempdir().expect("tempdir");
         let ctx = app_context(dir.path());
         let raw = [0x39; 32];
         let private = PrivateKey::from_byte_array(&raw, ctx.network).unwrap();
-        let public = PublicKey::new(private.inner.public_key(&Secp256k1::new()));
+        let public = PublicKey::new(private.inner.public_key());
         let address = Address::p2pkh(&public, ctx.network).to_string();
         let password = format!("test-password-{}", dir.path().display());
         let envelope = ClosedSingleKey::encrypt_private_key(&raw, &password).unwrap();
diff --git a/src/backend_task/migration/single_key_restore.rs b/src/backend_task/migration/single_key_restore.rs
index fd0db97cf..dacfc4065 100644
--- a/src/backend_task/migration/single_key_restore.rs
+++ b/src/backend_task/migration/single_key_restore.rs
@@ -29,7 +29,6 @@
 
 use std::sync::Arc;
 
-use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
 use dash_sdk::dpp::dashcore::{Address, Network, PrivateKey, PublicKey};
 use rusqlite::{Connection, OpenFlags};
 use zeroize::Zeroizing;
@@ -333,10 +332,10 @@ pub(super) fn derive_p2pkh_address(wif: &str, network: Network) -> Result<String
     let priv_key = PrivateKey::from_wif(wif).map_err(|source| TaskError::InvalidWif {
         source: Box::new(source),
     })?;
-    let secp = Secp256k1::new();
+
     let pub_key = PublicKey {
         compressed: priv_key.compressed,
-        inner: priv_key.inner.public_key(&secp),
+        inner: priv_key.inner.public_key(),
     };
     Ok(Address::p2pkh(&pub_key, network).to_string())
 }
@@ -389,10 +388,10 @@ mod tests {
             nonce,
         } = ClosedSingleKey::encrypt_private_key(raw_key, password).expect("encrypt");
         let priv_key = PrivateKey::from_byte_array(raw_key, network).expect("priv");
-        let secp = Secp256k1::new();
+
         let pub_key = PublicKey {
             compressed: priv_key.compressed,
-            inner: priv_key.inner.public_key(&secp),
+            inner: priv_key.inner.public_key(),
         };
         let address = Address::p2pkh(&pub_key, network).to_string();
         let key_hash = ClosedSingleKey::compute_key_hash(raw_key);
@@ -406,7 +405,7 @@ mod tests {
                 ciphertext,
                 salt,
                 nonce,
-                pub_key.inner.serialize().to_vec(),
+                pub_key.inner.to_compressed().to_vec(),
                 address,
                 alias,
                 network.to_string(),
@@ -449,7 +448,7 @@ mod tests {
 
         // And the recovered key bytes equal the original.
         let mut buf = [0u8; 32];
-        buf.copy_from_slice(&parsed.inner[..]);
+        buf.copy_from_slice(&*parsed.inner.to_bytes());
         assert_eq!(buf, raw, "recovered key must equal the original");
     }
 
diff --git a/src/backend_task/migration/v093_upgrade.rs b/src/backend_task/migration/v093_upgrade.rs
index 582fe4d5b..c7ee70312 100644
--- a/src/backend_task/migration/v093_upgrade.rs
+++ b/src/backend_task/migration/v093_upgrade.rs
@@ -113,7 +113,7 @@ fn secrets() -> &'static TestSecrets {
 fn random_private_key() -> [u8; 32] {
     loop {
         let bytes = rand::random::<[u8; 32]>();
-        if dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&bytes).is_ok() {
+        if dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(bytes).is_ok() {
             return bytes;
         }
     }
@@ -132,13 +132,12 @@ const V093_MASTERNODE_BLOB_HEX: &str = "00bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
 
 /// Populate only key payloads, preserving the captured v0.9.3 encoding layout.
 fn v093_masternode_blob() -> Vec<u8> {
-    use dash_sdk::dpp::dashcore::{
-        hashes::{Hash, hash160},
-        secp256k1::{PublicKey, Secp256k1, SecretKey},
-    };
+    use dash_sdk::dpp::dashcore::hashes::{Hash, hash160};
+    use dash_sdk::dpp::secp256k1::PublicKey;
     let public_hash = |key: &[u8; 32]| {
-        let key = SecretKey::from_slice(key).expect("generated valid key");
-        let public = PublicKey::from_secret_key(&Secp256k1::new(), &key);
+        let key = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(*(key))
+            .expect("generated valid key");
+        let public = PublicKey::from_secret_key(&key);
         hex::encode(hash160::Hash::hash(&public.serialize()).to_byte_array())
     };
     let encoded = V093_MASTERNODE_BLOB_HEX
@@ -1642,12 +1641,11 @@ const SKIPPED_PROTECTED_ADDRESS: &str = "XprotectedPaperKeyAddress";
 
 /// The P2PKH address of [`SKIPPED_SINGLE_KEY`] on mainnet.
 fn skipped_single_key_address() -> String {
-    use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
     use dash_sdk::dpp::dashcore::{Address, PrivateKey, PublicKey};
     let key = PrivateKey::from_byte_array(&SKIPPED_SINGLE_KEY, Network::Mainnet).expect("key");
     let public = PublicKey {
         compressed: true,
-        inner: key.inner.public_key(&Secp256k1::new()),
+        inner: key.inner.public_key(),
     };
     Address::p2pkh(&public, Network::Mainnet).to_string()
 }
diff --git a/src/backend_task/mod.rs b/src/backend_task/mod.rs
index b0a3878e7..55e7ac283 100644
--- a/src/backend_task/mod.rs
+++ b/src/backend_task/mod.rs
@@ -1,36 +1,36 @@
 use crate::app::TaskResult;
-use crate::backend_task::error::{DapiAddressAvailability, TaskError};
 use crate::backend_task::contested_names::ContestedResourceTask;
 use crate::backend_task::contract::ContractTask;
 use crate::backend_task::core::{CoreItem, CoreTask};
-use crate::backend_task::dashpay::{DashPayTask, ContactData};
+use crate::backend_task::dashpay::{ContactData, DashPayTask};
 use crate::backend_task::document::DocumentTask;
+use crate::backend_task::error::{DapiAddressAvailability, TaskError};
 use crate::backend_task::identity::IdentityTask;
 use crate::backend_task::platform_info::{PlatformInfoTaskRequestType, PlatformInfoTaskResult};
 use crate::backend_task::system_task::SystemTask;
 use crate::backend_task::wallet::WalletTask;
 use crate::context::AppContext;
 use crate::context::identity_load_registry::IdentityLoadToken;
-use crate::model::masternode_input::decode_identity_id;
 use crate::model::dpns_voting::{
     DpnsScheduledVoteClearOutcome, DpnsScheduledVoteKey, DpnsVoteOperationId, DpnsVoteTargetKey,
 };
-use dash_sdk::dpp::address_funds::PlatformAddress;
-use dash_sdk::dpp::dashcore::Network;
-use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
-use dash_sdk::dpp::key_wallet::bip32::DerivationPath;
+use crate::model::grovestark_prover::ProofDataOutput;
+use crate::model::masternode_input::decode_identity_id;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::{PlatformAddressUpdates, WalletSeedHash};
-use crate::model::grovestark_prover::ProofDataOutput;
 use crate::ui::tokens::tokens_screen::{
     ContractDescriptionInfo, IdentityTokenIdentifier, TokenInfo,
 };
 use crate::utils::egui_mpsc::SenderAsync;
 use crate::utils::tasks::TaskManager;
 use contested_names::ScheduledDPNSVote;
+use dash_sdk::dpp::address_funds::PlatformAddress;
 use dash_sdk::dpp::balances::credits::TokenAmount;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_function::evaluate_interval::IntervalEvaluationExplanation;
+use dash_sdk::dpp::dashcore::Network;
+use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_function;
 use dash_sdk::dpp::group::group_action::GroupAction;
+use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
+use dash_sdk::dpp::key_wallet::bip32::DerivationPath;
 use dash_sdk::dpp::prelude::DataContract;
 use dash_sdk::dpp::state_transition::StateTransition;
 use dash_sdk::dpp::tokens::token_pricing_schedule::TokenPricingSchedule;
@@ -38,19 +38,20 @@ use dash_sdk::platform::proto::get_documents_request::get_documents_request_v0::
 use dash_sdk::platform::{Document, DocumentQuery, Identifier};
 use dash_sdk::query_types::{Documents, IndexMap};
 use futures::future::join_all;
+use grovestark::GroveSTARKTask;
+use migration::MigrationTask;
+use shielded::ShieldedTask;
 use std::collections::BTreeMap;
 use std::future::Future;
 use std::sync::Arc;
 use std::sync::atomic::{AtomicU64, Ordering};
 use std::time::Duration;
-use migration::MigrationTask;
-use shielded::ShieldedTask;
 use tokens::TokenTask;
-use grovestark::GroveSTARKTask;
 
 pub mod broadcast_state_transition;
 pub mod contested_names;
 pub mod contract;
+pub mod contract_fee_pots;
 pub mod core;
 pub mod dapi_discovery;
 pub mod dashpay;
@@ -60,6 +61,8 @@ pub mod grovestark;
 pub mod identity;
 pub mod migration;
 pub mod platform_info;
+#[cfg(test)]
+mod protocol_13_transitions;
 pub mod register_contract;
 pub mod shielded;
 pub mod system_task;
@@ -382,6 +385,13 @@ pub enum BackendTaskContext {
     LegacyRecoveryCheck(Identifier),
     /// The restore of one identity's approved legacy-recovery items.
     LegacyRecoveryRestore(Identifier),
+    /// The read of what is left of one identity's key budgets.
+    KeyRemainingBudgets(Identifier),
+    /// The raise of one identity key's limits.
+    RaiseKeyLimits {
+        identity_id: Identifier,
+        key_id: dash_sdk::dpp::identity::KeyID,
+    },
     /// Warming the identity-auth public-key cache for one wallet identity
     /// index, so a screen can tell its own failed warm from other errors.
     IdentityAuthPubkeyWarm {
@@ -582,6 +592,29 @@ impl BackendTaskContext {
         }
     }
 
+    /// The identity whose key budgets this operation read, or `None` for
+    /// anything else.
+    pub(crate) fn key_remaining_budgets_identity(&self) -> Option<Identifier> {
+        match self.operation() {
+            Self::KeyRemainingBudgets(identity_id) => Some(*identity_id),
+            _ => None,
+        }
+    }
+
+    /// The identity key whose limits this operation raised, or `None` for
+    /// anything else.
+    pub(crate) fn raise_key_limits_target(
+        &self,
+    ) -> Option<(Identifier, dash_sdk::dpp::identity::KeyID)> {
+        match self.operation() {
+            Self::RaiseKeyLimits {
+                identity_id,
+                key_id,
+            } => Some((*identity_id, *key_id)),
+            _ => None,
+        }
+    }
+
     /// The identity whose legacy-recovery offer this operation belongs to, or
     /// `None` for anything else. A screen showing the recovery affordance uses
     /// it to tell its own failed check or restore from any other task's error
@@ -676,6 +709,16 @@ impl From<&BackendTask> for BackendTaskContext {
                 identity_id,
                 ..
             }) => Self::LegacyRecoveryRestore(*identity_id),
+            BackendTask::IdentityTask(IdentityTask::FetchKeyRemainingBudgets {
+                identity_id,
+                ..
+            }) => Self::KeyRemainingBudgets(*identity_id),
+            BackendTask::IdentityTask(IdentityTask::RaiseKeyLimits { identity, raise }) => {
+                Self::RaiseKeyLimits {
+                    identity_id: identity.identity.id(),
+                    key_id: raise.key_id,
+                }
+            }
             BackendTask::IdentityTask(IdentityTask::RefreshIdentity(identity)) => {
                 Self::IdentityRefresh(identity.identity.id())
             }
@@ -810,7 +853,7 @@ pub enum BackendTaskSuccessResult {
     TokenEstimatedNonClaimedPerpetualDistributionAmountWithExplanation(
         IdentityTokenIdentifier,
         TokenAmount,
-        IntervalEvaluationExplanation,
+        distribution_function::evaluate_interval::IntervalEvaluationExplanation,
     ),
     ContractsWithDescriptions(
         BTreeMap<Identifier, (Option<ContractDescriptionInfo>, Vec<TokenInfo>)>,
@@ -1026,6 +1069,8 @@ pub enum BackendTaskSuccessResult {
     SetTokenPrice(FeeResult),
     DestroyedFrozenFunds(FeeResult),
     ClaimedTokens(FeeResult),
+    /// The once-per-identity claim note of this pair was forgotten.
+    OncePerIdentityClaimHintCleared(IdentityTokenIdentifier),
     UpdatedTokenConfig(String, FeeResult), // The config item that was updated
     FetchedTokenBalances,
     /// A requested foreground refresh found the upstream balance sync already
@@ -1083,6 +1128,39 @@ pub enum BackendTaskSuccessResult {
         /// The identity whose key protection was removed.
         identity_id: Identifier,
     },
+    /// What is left of the budgets of an identity's keys, one entry per
+    /// requested key: `Some(credits)` for a budgeted key (zero means spent),
+    /// `None` for a key without a budget.
+    IdentityKeyRemainingBudgets {
+        identity_id: Identifier,
+        budgets: std::collections::BTreeMap<
+            dash_sdk::dpp::identity::KeyID,
+            Option<dash_sdk::dpp::fee::Credits>,
+        >,
+    },
+    /// Both fee pots of a contract, as Platform holds them.
+    ContractFeePots {
+        contract_id: Identifier,
+        pots: dash_sdk::platform::contract_fee_pots::ContractFeePots,
+        /// The seated moderation team, which claims an elected contract's
+        /// moderators pot instead of its interim team.
+        seated_moderators: crate::model::contract_fee_pots::SeatedModerators,
+    },
+    /// A contract fee pot was paid out. `claimant_balance` is the claiming
+    /// identity's balance after the claim, `remaining_credits` what is left
+    /// in the pot.
+    ContractFeesClaimed {
+        contract_id: Identifier,
+        pot: dash_sdk::dpp::data_contract::document_type::action_fees::ContractFeePot,
+        claimant_balance: Option<dash_sdk::dpp::fee::Credits>,
+        remaining_credits: dash_sdk::dpp::fee::Credits,
+    },
+    /// The limits of an identity key were raised; `key` is the key as
+    /// Platform now stores it.
+    IdentityKeyLimitsRaised {
+        identity_id: Identifier,
+        key: dash_sdk::dpp::identity::IdentityPublicKey,
+    },
     /// What the preserved legacy database could restore for this identity.
     /// Descriptors only — public key metadata, never key bytes. An empty plan
     /// means there is nothing to offer and the recovery affordance stays hidden.
@@ -1430,7 +1508,7 @@ impl AppContext {
                 Ok(self.run_migration_task(migration_task).await?)
             }
             BackendTask::ReinitCoreClientAndSdk => {
-                Arc::clone(self).reinit_core_client_and_sdk()?;
+                self.rebuild_connection().await?;
                 Ok(BackendTaskSuccessResult::CoreClientReinitialized)
             }
             BackendTask::SwitchNetwork { network, start_spv } => {
diff --git a/src/backend_task/platform_info.rs b/src/backend_task/platform_info.rs
index fff1f014f..9be022f90 100644
--- a/src/backend_task/platform_info.rs
+++ b/src/backend_task/platform_info.rs
@@ -1,11 +1,13 @@
 use crate::backend_task::BackendTaskSuccessResult;
 use crate::backend_task::error::TaskError;
-use crate::context::{AppContext, DET_PLATFORM_VERSION};
+use crate::context::AppContext;
 use crate::model::datetime;
-use crate::model::fee_estimation::PlatformFeeEstimator;
+use chrono::{LocalResult, prelude::*};
+use chrono_humanize::{Accuracy, HumanTime, Tense};
 use dash_sdk::Error as SdkError;
 use dash_sdk::Sdk;
 use dash_sdk::dashcore_rpc::RpcApi;
+use dash_sdk::dpp::address_funds::PlatformAddress;
 use dash_sdk::dpp::block::extended_epoch_info::{
     ExtendedEpochInfo, v0::ExtendedEpochInfoV0Getters,
 };
@@ -13,22 +15,19 @@ use dash_sdk::dpp::core_types::validator_set::v0::ValidatorSetV0Getters;
 use dash_sdk::dpp::dashcore::hashes::Hash;
 use dash_sdk::dpp::dashcore::{Address, Network, ScriptBuf};
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
-use dash_sdk::dpp::data_contracts::SystemDataContract;
-use dash_sdk::dpp::data_contracts::withdrawals_contract::WithdrawalStatus;
-use dash_sdk::dpp::data_contracts::withdrawals_contract::v1::document_types::withdrawal::properties::{
-    AMOUNT, STATUS, TRANSACTION_INDEX,
+use dash_sdk::dpp::data_contracts::withdrawals_contract::{
+    WithdrawalStatus,
+    v1::document_types::withdrawal::properties::{AMOUNT, STATUS, TRANSACTION_INDEX},
 };
 use dash_sdk::dpp::document::{Document, DocumentV0Getters};
 use dash_sdk::dpp::fee::Credits;
 use dash_sdk::dpp::platform_value::Value;
 use dash_sdk::dpp::platform_value::btreemap_extensions::BTreeValueMapHelper;
 use dash_sdk::dpp::state_transition::identity_credit_withdrawal_transition::fields::OUTPUT_SCRIPT;
-use dash_sdk::dpp::system_data_contracts::load_system_data_contract;
 use dash_sdk::dpp::version::PlatformVersion;
 use dash_sdk::dpp::withdrawal::daily_withdrawal_limit::daily_withdrawal_limit;
 use dash_sdk::dpp::{dash_to_credits, version::ProtocolVersionVoteCount};
-use dash_sdk::drive::query::{SelectProjection, OrderClause, WhereClause, WhereOperator};
-use dash_sdk::dpp::address_funds::PlatformAddress;
+use dash_sdk::drive::query::{OrderClause, SelectProjection, WhereClause, WhereOperator};
 use dash_sdk::platform::fetch_current_no_parameters::FetchCurrent;
 use dash_sdk::platform::proto::get_documents_request::get_documents_request_v0::Start;
 use dash_sdk::platform::{
@@ -38,8 +37,6 @@ use dash_sdk::query_types::{
     AddressInfo, CurrentQuorumsInfo, NoParamQuery, ProtocolVersionUpgrades, TotalCreditsInPlatform,
 };
 use std::sync::Arc;
-use chrono::{LocalResult, prelude::*};
-use chrono_humanize::{Accuracy, HumanTime, Tense};
 
 #[derive(Debug, Clone, PartialEq)]
 pub enum PlatformInfoTaskRequestType {
@@ -79,7 +76,9 @@ pub struct WithdrawalRecord {
     /// Amount in credits (atomic units).
     pub amount_credits: u64,
     /// Withdrawal status: `"queued"`, `"pooled"`, `"broadcasted"`,
-    /// `"complete"`, `"expired"`, or `"failed"`.
+    /// `"complete"`, `"expired"`, or `"failed"`. `"failed"` is terminal: the
+    /// payout was too small to ever be mined, and its credits are not returned
+    /// (they stay locked in the Core credit pool).
     pub status: String,
     /// Destination Dash address decoded from the output script, or `None` when
     /// the script does not map to a standard address on this network.
@@ -252,15 +251,11 @@ fn format_extended_epoch_info(
     )
 }
 
-/// The degraded rendering used when the live epoch fetch fails.
-///
+/// The epoch summary shown when the current epoch cannot be read.
 /// `protocol_version` is `None` while the connected network has not confirmed
-/// one. The fee multiplier here is the app's own default, and the copy says so
-/// rather than claiming anything about what networks charge: with the fetch
-/// failed, this build cannot know that. A user comparing the figure against a
-/// network that raised its fees has to be able to tell which of the two the app
-/// is charging by.
-fn format_hardcoded_current_epoch_info(
+/// one; `fee_multiplier_permille` is the last known multiplier, not a fresh
+/// network reading.
+fn format_unavailable_current_epoch_info(
     protocol_version: Option<u32>,
     fee_multiplier_permille: u64,
 ) -> String {
@@ -269,16 +264,16 @@ fn format_hardcoded_current_epoch_info(
         Some(protocol_version) => format!(
             "Current Epoch Information:\n\
              • Protocol Version: {protocol_version}\n\
-             • Fee Multiplier: {fee_multiplier}x (a fixed value, not read from the network)\n\n\
-             Epoch details could not be read from the network just now. The multiplier shown \
-             is this app's default, not a value read from the network. Try again in a moment."
+             • Fee Multiplier: {fee_multiplier}x (the last known value, not a fresh reading)\n\n\
+             The current epoch could not be read from the network. Fee estimates use the last \
+             known fee multiplier. Refresh again in a moment to read the current one."
         ),
         None => format!(
             "Current Epoch Information:\n\
              • Protocol Version: the connected network has not confirmed one yet.\n\
-             • Fee Multiplier: {fee_multiplier}x (a fixed value, not read from the network)\n\n\
-             Epoch details could not be read from the network just now. The multiplier shown \
-             is this app's default, not a value read from the network. Try again in a moment."
+             • Fee Multiplier: {fee_multiplier}x (the last known value, not a fresh reading)\n\n\
+             The current epoch could not be read from the network. Fee estimates use the last \
+             known fee multiplier. Refresh again in a moment to read the current one."
         ),
     }
 }
@@ -321,51 +316,26 @@ fn format_current_quorums_info(current_quorums_info: &CurrentQuorumsInfo) -> Str
     result
 }
 
-/// The daily withdrawal limit at [`DET_PLATFORM_VERSION`], never at the
-/// newest version the upstream crates know.
+/// The daily withdrawal limit the network enforces, at `platform_version` —
+/// never at whatever version the upstream crates happen to know best.
 ///
 /// Protocol 13 uses `daily_withdrawal_limit` v1, a flat 2000 Dash that ignores
 /// the total. Protocol 14 (v2) derives it from the total credits Platform held a
 /// day ago, which the SDK cannot query; passing today's total is an accepted
-/// gap for this display-only figure once DET moves to protocol 14.
-fn local_daily_withdrawal_limit(
+/// gap for this display-only figure.
+fn network_daily_withdrawal_limit(
     total_credits_on_platform: Credits,
+    platform_version: &PlatformVersion,
 ) -> Result<Credits, WithdrawalParseError> {
-    daily_withdrawal_limit(Some(total_credits_on_platform), DET_PLATFORM_VERSION)
+    daily_withdrawal_limit(Some(total_credits_on_platform), platform_version)
         .map_err(|e| WithdrawalParseError::DailyLimit(Box::new(e)))
 }
 
-/// The Withdrawals system contract at [`DET_PLATFORM_VERSION`].
-/// The `status` values a finished withdrawal can carry, as the
-/// `RecentlyCompletedWithdrawals` filter sends them.
-///
-/// `FAILED` (5) exists only in the v2 withdrawals schema (protocol 14); the v1
-/// schema this build loads stops at `EXPIRED` (4). Sending it at protocol 13 is
-/// still correct and deliberate: a JSON-schema `enum` constrains documents being
-/// created, not query values. Nothing in the query path checks membership — the
-/// `status` property is typed as a plain integer, and
-/// `DocumentPropertyType::encode_value_for_tree_keys` encodes any value that
-/// converts to it. So the out-of-enum member encodes, matches nothing on a
-/// protocol-13 network (which cannot produce a failed withdrawal), and leaves
-/// `COMPLETE` and `EXPIRED` matching as usual — while keeping the query complete
-/// once the network, and DET's version pin, reach protocol 14.
-fn completed_withdrawal_statuses() -> Vec<Value> {
-    vec![
-        Value::U8(WithdrawalStatus::COMPLETE as u8),
-        Value::U8(WithdrawalStatus::EXPIRED as u8),
-        Value::U8(WithdrawalStatus::FAILED as u8),
-    ]
-}
-
-fn withdrawals_contract() -> Result<DataContract, TaskError> {
-    load_system_data_contract(SystemDataContract::Withdrawals, DET_PLATFORM_VERSION)
-        .map_err(|e| TaskError::from(SdkError::Protocol(e)))
-}
-
 fn format_withdrawal_documents_with_daily_limit(
     withdrawal_documents: &[Document],
     total_credits_on_platform: Credits,
     network: Network,
+    platform_version: &PlatformVersion,
 ) -> Result<String, WithdrawalParseError> {
     let total_amount: Credits = withdrawal_documents
         .iter()
@@ -384,7 +354,8 @@ fn format_withdrawal_documents_with_daily_limit(
         .map(|document| format_withdrawal_line(document, network))
         .collect::<Result<Vec<String>, WithdrawalParseError>>()?;
 
-    let daily_withdrawal_limit = local_daily_withdrawal_limit(total_credits_on_platform)?;
+    let daily_withdrawal_limit =
+        network_daily_withdrawal_limit(total_credits_on_platform, platform_version)?;
 
     Ok(format!(
         "Withdrawal Information:\n\n\
@@ -470,6 +441,17 @@ fn format_withdrawal_line(
     ))
 }
 
+/// Shown under a withdrawal history holding a failed withdrawal: that status
+/// is terminal and, unlike an expired one, never gives the credits back.
+const FAILED_WITHDRAWAL_NOTE: &str = "A failed withdrawal was too small to ever be paid out on the Dash network. Its amount is not returned to the identity. Withdraw larger amounts to avoid this.";
+
+/// Whether any of `documents` is a withdrawal in the terminal failed status.
+fn any_withdrawal_failed(documents: &[Document]) -> bool {
+    documents.iter().any(|document| {
+        document.properties().get_integer::<u8>(STATUS).ok() == Some(WithdrawalStatus::FAILED as u8)
+    })
+}
+
 /// Format one completed/expired/failed withdrawal document as a single line keyed by
 /// on-chain transaction index and last-update time:
 /// `"TX #<index>: <amount> Dash for <owner> to <address> (<status>) at <time>"`.
@@ -594,6 +576,37 @@ fn build_withdrawals_result(
 }
 
 impl AppContext {
+    /// Fetches the current epoch — authenticated by proof — and adopts its
+    /// fee multiplier and protocol version. The only path by which the fee
+    /// multiplier cache changes: document action fee agreements are signed
+    /// against it, so it must never come from an unproven source.
+    pub(crate) async fn refresh_current_epoch(
+        &self,
+        sdk: &Sdk,
+    ) -> Result<ExtendedEpochInfo, Box<SdkError>> {
+        // Captured together before the read: a read on an SDK a rebuild has
+        // replaced, or begun before it, is never adopted.
+        let (generation, on_current_sdk) = self.connection_snapshot_for(sdk);
+        let epoch_info = ExtendedEpochInfo::fetch_current(sdk)
+            .await
+            .map_err(Box::new)?;
+        if on_current_sdk {
+            self.adopt_epoch_info(generation, &epoch_info);
+        }
+        Ok(epoch_info)
+    }
+
+    /// Adopts the fee multiplier and protocol version of a proved epoch read
+    /// on connection `generation` (see `AppContext::adopt_epoch`).
+    fn adopt_epoch_info(&self, generation: u64, epoch_info: &ExtendedEpochInfo) {
+        self.adopt_epoch(
+            generation,
+            epoch_info.index(),
+            epoch_info.fee_multiplier_permille(),
+            epoch_info.protocol_version(),
+        );
+    }
+
     pub async fn run_platform_info_task(
         self: &Arc<Self>,
         request: PlatformInfoTaskRequestType,
@@ -624,15 +637,9 @@ impl AppContext {
                 ))
             }
             PlatformInfoTaskRequestType::CurrentEpochInfo => {
-                // The live fetch is proved: `ExtendedEpochInfo::fetch_current` resolves the
-                // current epoch with two explicit-start queries the proof verifier accepts
-                // (dashpay/platform#4231, in this repo's pin). Its protocol version is a
-                // network observation, so it feeds the ratchet directly.
-                match ExtendedEpochInfo::fetch_current(sdk).await {
+                match self.refresh_current_epoch(sdk).await {
                     Ok(epoch_info) => {
                         let fee_multiplier = epoch_info.fee_multiplier_permille();
-                        self.set_fee_multiplier_permille(fee_multiplier);
-                        self.set_platform_protocol_version(epoch_info.protocol_version());
 
                         let mut formatted =
                             format_extended_epoch_info(epoch_info, self.network, true);
@@ -647,38 +654,36 @@ impl AppContext {
                     Err(error) => {
                         tracing::warn!(
                             %error,
-                            "Current-epoch fetch failed; falling back to the cached fee \
-                             multiplier and the protocol-version ratchet"
+                            "Current epoch fetch failed; keeping the last known fee multiplier"
                         );
-
-                        // Without the epoch, the network's version is learned from the
-                        // ratchet a proved DPNS fetch drives. Only a successful fetch proves
-                        // it came from the network, not the local seed.
-                        match DataContract::fetch(sdk, self.dpns_contract.id()).await {
-                            Ok(_) => {
-                                self.set_platform_protocol_version(sdk.protocol_version_number())
+                        // Without the epoch, the network's version is learned from
+                        // the ratchet a proved DPNS fetch drives. Only a successful
+                        // fetch proves it came from the network, not the local seed.
+                        let (generation, on_current_sdk) = self.connection_snapshot_for(sdk);
+                        match DataContract::fetch(sdk, self.dpns_contract().id()).await {
+                            Ok(_) if on_current_sdk => {
+                                self.raise_platform_protocol_version_on(
+                                    generation,
+                                    sdk.protocol_version_number(),
+                                );
                             }
+                            Ok(_) => {}
                             Err(error) => tracing::warn!(
                                 %error,
                                 "Protocol-version ratchet trigger (DPNS contract fetch) failed; \
                                  the network's protocol version stays unconfirmed"
                             ),
                         }
-
-                        // 1000 permille (1.0x) is what the network actually stores, not a
-                        // placeholder: an epoch's multiplier is written from
-                        // `platform_version.fee_version.uses_version_fee_multiplier_permille`,
-                        // and both fee schedules in the pinned crate declare `Some(1000)`.
-                        let fee_multiplier = PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE;
-                        self.set_fee_multiplier_permille(fee_multiplier);
-
                         let confirmed = match self.platform_protocol_version() {
                             0 => None,
                             version => Some(version),
                         };
                         Ok(BackendTaskSuccessResult::PlatformInfo(
                             PlatformInfoTaskResult::TextResult(
-                                format_hardcoded_current_epoch_info(confirmed, fee_multiplier),
+                                format_unavailable_current_epoch_info(
+                                    confirmed,
+                                    self.fee_multiplier_permille(),
+                                ),
                             ),
                         ))
                     }
@@ -741,12 +746,11 @@ impl AppContext {
                 }
             }
             PlatformInfoTaskRequestType::CurrentWithdrawalsInQueue => {
-                let withdrawal_contract = withdrawals_contract()?;
-
                 let queued_document_query = DocumentQuery {
+                    integer_range_clauses: vec![],
                     sub_queries: Vec::new(),
                     select: SelectProjection::documents(),
-                    data_contract: Arc::new(withdrawal_contract),
+                    data_contract: self.withdraws_contract(),
                     document_type_name: "withdrawal".to_string(),
                     where_clauses: vec![],
                     time_range_clauses: Vec::new(),
@@ -771,6 +775,7 @@ impl AppContext {
                             &withdrawal_docs,
                             total_credits.0,
                             self.network,
+                            self.connected_platform_version(),
                         )?;
                         Ok(BackendTaskSuccessResult::PlatformInfo(
                             PlatformInfoTaskResult::TextResult(formatted),
@@ -788,17 +793,20 @@ impl AppContext {
                 }
             }
             PlatformInfoTaskRequestType::RecentlyCompletedWithdrawals => {
-                let withdrawal_contract = withdrawals_contract()?;
-
                 let completed_document_query = DocumentQuery {
+                    integer_range_clauses: vec![],
                     sub_queries: Vec::new(),
                     select: SelectProjection::documents(),
-                    data_contract: Arc::new(withdrawal_contract),
+                    data_contract: self.withdraws_contract(),
                     document_type_name: "withdrawal".to_string(),
                     where_clauses: vec![WhereClause {
                         field: "status".to_string(),
                         operator: WhereOperator::In,
-                        value: Value::Array(completed_withdrawal_statuses()),
+                        value: Value::Array(vec![
+                            Value::U8(WithdrawalStatus::COMPLETE as u8),
+                            Value::U8(WithdrawalStatus::EXPIRED as u8),
+                            Value::U8(WithdrawalStatus::FAILED as u8),
+                        ]),
                     }],
                     time_range_clauses: Vec::new(),
                     group_by: Vec::new(),
@@ -857,7 +865,7 @@ impl AppContext {
                         .map(|document| format_completed_withdrawal_line(document, self.network))
                         .collect::<Result<Vec<String>, WithdrawalParseError>>()?;
 
-                    let formatted = format!(
+                    let mut formatted = format!(
                         "Recent Withdrawal History:\n\n\
                          Total Amount: {:.8} Dash\n\
                          Count: {} withdrawals\n\n\
@@ -866,6 +874,10 @@ impl AppContext {
                         withdrawal_docs.len(),
                         amounts.join("\n    ")
                     );
+                    if any_withdrawal_failed(&withdrawal_docs) {
+                        formatted.push_str("\n\n");
+                        formatted.push_str(FAILED_WITHDRAWAL_NOTE);
+                    }
 
                     Ok(BackendTaskSuccessResult::PlatformInfo(
                         PlatformInfoTaskResult::TextResult(formatted),
@@ -877,15 +889,17 @@ impl AppContext {
                 limit,
                 start_after,
             } => {
-                let withdrawal_contract = withdrawals_contract()?;
-
                 // `0` is the upstream sentinel for "default limit"; clamp the
                 // requested page so the cursor heuristic has a known bound.
                 let page_limit = limit.unwrap_or(50).clamp(1, 100);
                 let start = start_after.map(|id| Start::StartAfter(id.to_buffer().to_vec()));
 
                 let statuses = if completed {
-                    completed_withdrawal_statuses()
+                    vec![
+                        Value::U8(WithdrawalStatus::COMPLETE as u8),
+                        Value::U8(WithdrawalStatus::EXPIRED as u8),
+                        Value::U8(WithdrawalStatus::FAILED as u8),
+                    ]
                 } else {
                     vec![
                         Value::U8(WithdrawalStatus::QUEUED as u8),
@@ -910,9 +924,10 @@ impl AppContext {
                 ];
 
                 let query = DocumentQuery {
+                    integer_range_clauses: vec![],
                     sub_queries: Vec::new(),
                     select: SelectProjection::documents(),
-                    data_contract: Arc::new(withdrawal_contract),
+                    data_contract: self.withdraws_contract(),
                     document_type_name: "withdrawal".to_string(),
                     where_clauses,
                     time_range_clauses: Vec::new(),
@@ -995,145 +1010,188 @@ impl AppContext {
 mod tests {
     use super::*;
 
-    /// The withdrawal limit follows DET's protocol version, not the newest one
-    /// upstream knows: protocol 13 keeps the flat 2000 Dash, where protocol 14
-    /// reports 15% of the total, capped at 4000 Dash.
-    ///
-    /// `dash_to_credits!` stringifies its argument and parses the text, so a
-    /// Rust numeric separator is not a digit to it: `dash_to_credits!(1_000_000)`
-    /// silently evaluates to 0 credits. Never write a separator inside this
-    /// macro. The total is asserted below, and the protocol-14 expectation is
-    /// pinned to the 4000 Dash cap — a value only a genuinely large total
-    /// produces, so a zeroed total fails the test instead of passing it for the
-    /// wrong reason (at 0 credits, protocol 14 returns its 500 Dash floor).
+    fn withdrawal_with_status(status: WithdrawalStatus) -> Document {
+        use dash_sdk::dpp::document::DocumentV0;
+        let mut properties = std::collections::BTreeMap::new();
+        properties.insert(STATUS.to_string(), Value::U8(status as u8));
+        Document::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
+            properties,
+            ..Default::default()
+        })
+    }
+
+    /// The limit is whatever the network's own protocol version says it is,
+    /// never a version fixed in this build: protocol 13 reports a flat 2000
+    /// Dash whatever the total, protocol 14 derives it from that total (15% of
+    /// it, `SYSTEM_LIMITS_V4.daily_withdrawal_limit_percent`, never below the
+    /// 500 Dash maximum withdrawal).
     #[test]
-    fn daily_withdrawal_limit_uses_det_platform_version_not_latest() {
+    fn daily_withdrawal_limit_follows_the_given_platform_version() {
+        // `dash_to_credits!` stringifies its argument and parses the digits, so
+        // a `1_000_000` written with separators silently reads as no credits.
         let total = dash_to_credits!(1000000);
-        assert_eq!(
-            total,
-            1_000_000 * dash_to_credits!(1),
-            "the total must really be a million Dash"
-        );
+        let v13 = PlatformVersion::get(13).expect("protocol 13");
+        let v14 = PlatformVersion::get(14).expect("protocol 14");
 
-        let det_limit = local_daily_withdrawal_limit(total).expect("limit");
-        assert_eq!(det_limit, dash_to_credits!(2000));
         assert_eq!(
-            det_limit,
-            daily_withdrawal_limit(Some(total), DET_PLATFORM_VERSION).expect("limit")
+            network_daily_withdrawal_limit(total, v13).expect("limit"),
+            dash_to_credits!(2000)
         );
-
-        let latest_limit =
-            daily_withdrawal_limit(Some(total), PlatformVersion::latest()).expect("limit");
         assert_eq!(
-            latest_limit,
-            dash_to_credits!(4000),
-            "protocol 14 caps a million-Dash total at 4000 Dash"
+            network_daily_withdrawal_limit(total, v14).expect("limit"),
+            dash_to_credits!(150000)
         );
-        assert_ne!(
-            det_limit, latest_limit,
-            "the limit must not follow PlatformVersion::latest()"
+        // A small total falls back to the maximum single withdrawal.
+        assert_eq!(
+            network_daily_withdrawal_limit(dash_to_credits!(1000), v14).expect("limit"),
+            dash_to_credits!(500)
         );
     }
 
-    /// The Withdrawals contract used for queries is loaded at DET's protocol
+    /// A proved epoch sets both the fee multiplier cache and the protocol
     /// version.
     #[test]
-    fn withdrawals_contract_uses_det_platform_version() {
-        let expected =
-            load_system_data_contract(SystemDataContract::Withdrawals, DET_PLATFORM_VERSION)
-                .expect("contract");
-        assert_eq!(withdrawals_contract().expect("contract"), expected);
-        assert_eq!(DET_PLATFORM_VERSION.protocol_version, 13);
+    fn a_proved_epoch_updates_the_fee_multiplier_and_protocol_version() {
+        use dash_sdk::dpp::block::extended_epoch_info::v0::ExtendedEpochInfoV0;
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        ctx.set_fee_multiplier_permille(1000);
+
+        ctx.adopt_epoch_info(
+            ctx.connection_generation(),
+            &ExtendedEpochInfo::V0(ExtendedEpochInfoV0 {
+                index: 7,
+                first_block_time: 0,
+                first_block_height: 0,
+                first_core_block_height: 0,
+                fee_multiplier_permille: 1_500,
+                protocol_version: 14,
+            }),
+        );
+
+        assert_eq!(ctx.fee_multiplier_permille(), 1_500);
+        assert_eq!(ctx.platform_protocol_version(), 14);
+    }
+
+    /// Epoch reads can finish out of order: an older epoch arriving after a
+    /// newer one must not put back its fee multiplier or protocol version.
+    #[test]
+    fn an_older_epoch_does_not_overwrite_a_newer_one() {
+        use dash_sdk::dpp::block::extended_epoch_info::v0::ExtendedEpochInfoV0;
+        let epoch = |index, fee_multiplier_permille, protocol_version| {
+            ExtendedEpochInfo::V0(ExtendedEpochInfoV0 {
+                index,
+                first_block_time: 0,
+                first_block_height: 0,
+                first_core_block_height: 0,
+                fee_multiplier_permille,
+                protocol_version,
+            })
+        };
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+
+        ctx.adopt_epoch_info(ctx.connection_generation(), &epoch(8, 1_500, 14));
+        ctx.adopt_epoch_info(ctx.connection_generation(), &epoch(7, 1_000, 13));
+        assert_eq!(ctx.fee_multiplier_permille(), 1_500);
+        assert_eq!(ctx.platform_protocol_version(), 14);
+
+        // The same or a newer epoch is adopted; the protocol version never
+        // goes back.
+        ctx.adopt_epoch_info(ctx.connection_generation(), &epoch(8, 1_600, 14));
+        assert_eq!(ctx.fee_multiplier_permille(), 1_600);
+        ctx.adopt_epoch_info(ctx.connection_generation(), &epoch(9, 1_700, 13));
+        assert_eq!(ctx.fee_multiplier_permille(), 1_700);
+        assert_eq!(ctx.platform_protocol_version(), 14);
     }
 
-    /// The completed-withdrawal filter keeps `FAILED` even though the schema
-    /// this build loads stops at `EXPIRED`: a schema `enum` constrains
-    /// documents, not query values, and every status encodes into the `status`
-    /// property's key representation at both schema versions.
+    /// Rebuilding the connection resets everything learned from the old one:
+    /// the protocol version goes back to unknown, the fee multiplier to the
+    /// default, and the next proved epoch is adopted whatever its index.
     #[test]
-    fn completed_withdrawal_filter_encodes_at_both_schema_versions() {
-        use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
-        use dash_sdk::dpp::data_contract::document_type::accessors::DocumentTypeV0Getters;
+    fn a_rebuilt_connection_starts_from_unknown_protocol_and_default_fees() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        ctx.adopt_epoch(ctx.connection_generation(), 8, 1_500, 14);
 
+        ctx.replace_connection(Arc::new(Sdk::new_mock()));
+
+        assert_eq!(ctx.platform_protocol_version(), 0);
         assert_eq!(
-            completed_withdrawal_statuses(),
-            vec![Value::U8(3), Value::U8(4), Value::U8(5)],
-            "COMPLETE, EXPIRED and FAILED, in that order"
+            ctx.fee_multiplier_permille(),
+            crate::model::fee_estimation::PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE
         );
+        assert!(ctx.adopt_epoch(ctx.connection_generation(), 2, 1_100, 13));
+        assert_eq!(ctx.fee_multiplier_permille(), 1_100);
+        assert_eq!(ctx.platform_protocol_version(), 13);
+    }
 
-        let status_property = |version| {
-            let contract = load_system_data_contract(SystemDataContract::Withdrawals, version)
-                .expect("withdrawals contract");
-            contract
-                .document_type_cloned_for_name("withdrawal")
-                .expect("withdrawal document type")
-                .properties()
-                .get("status")
-                .expect("status property")
-                .clone()
-        };
+    /// An epoch read that started on the old connection and finishes after
+    /// the rebuild is dropped, so it cannot be the new connection's first
+    /// adoption.
+    #[test]
+    fn an_epoch_read_from_before_a_rebuild_is_dropped() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let before_rebuild = ctx.connection_generation();
+
+        ctx.replace_connection(Arc::new(Sdk::new_mock()));
 
-        // v1 (protocol 13, what DET loads) and v2 (protocol 14) differ only in
-        // the enum's last member, so the property type is identical.
-        let det = status_property(DET_PLATFORM_VERSION);
-        let latest = status_property(PlatformVersion::latest());
+        assert!(!ctx.adopt_epoch(before_rebuild, 9, 1_500, 14));
+        assert_eq!(ctx.platform_protocol_version(), 0);
         assert_eq!(
-            det.property_type, latest.property_type,
-            "the status property type must not differ across schema versions"
+            ctx.fee_multiplier_permille(),
+            crate::model::fee_estimation::PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE
         );
+    }
 
-        // FAILED is outside the v1 enum, yet encodes for the query exactly like
-        // the statuses that are inside it.
-        for status in completed_withdrawal_statuses() {
-            assert!(
-                det.property_type
-                    .encode_value_for_tree_keys(&status)
-                    .is_ok(),
-                "status {status:?} must encode against the protocol-13 schema"
-            );
-        }
+    /// A failed withdrawal keeps its credits locked, so the history says so
+    /// exactly when one is listed; an expired one is refunded and needs no note.
+    #[test]
+    fn only_a_failed_withdrawal_triggers_the_not_refunded_note() {
+        assert!(any_withdrawal_failed(&[
+            withdrawal_with_status(WithdrawalStatus::COMPLETE),
+            withdrawal_with_status(WithdrawalStatus::FAILED),
+        ]));
+        assert!(!any_withdrawal_failed(&[
+            withdrawal_with_status(WithdrawalStatus::COMPLETE),
+            withdrawal_with_status(WithdrawalStatus::EXPIRED),
+        ]));
+        assert!(FAILED_WITHDRAWAL_NOTE.contains("not returned"));
     }
 
     #[test]
-    fn epoch_fallback_reports_protocol_version_and_the_default_fee_multiplier() {
+    fn unavailable_epoch_reports_protocol_version_and_the_last_known_fee_multiplier() {
         assert_eq!(
-            format_hardcoded_current_epoch_info(Some(12), 1000),
+            format_unavailable_current_epoch_info(Some(14), 1000),
             "Current Epoch Information:\n\
-             • Protocol Version: 12\n\
-             • Fee Multiplier: 1x (a fixed value, not read from the network)\n\n\
-             Epoch details could not be read from the network just now. The multiplier shown \
-             is this app's default, not a value read from the network. Try again in a moment."
+             • Protocol Version: 14\n\
+             • Fee Multiplier: 1x (the last known value, not a fresh reading)\n\n\
+             The current epoch could not be read from the network. Fee estimates use the last \
+             known fee multiplier. Refresh again in a moment to read the current one."
         );
     }
 
-    /// The multiplier is presented as this app's default, never as a live
-    /// reading and never as a claim about what networks charge — with the fetch
-    /// failed, the app cannot know that. A user comparing the figure against a
-    /// network that raised its fees must be able to see which of the two the app
-    /// is charging by.
+    /// The multiplier is presented as stale, never as a live reading: a user
+    /// comparing it against a network that raised its fees must be able to see
+    /// which of the two the app is charging by.
     #[test]
-    fn epoch_fallback_never_presents_the_fee_multiplier_as_a_network_reading() {
+    fn unavailable_epoch_never_presents_the_fee_multiplier_as_a_network_reading() {
         for protocol_version in [None, Some(12)] {
-            let formatted = format_hardcoded_current_epoch_info(protocol_version, 1500);
+            let formatted = format_unavailable_current_epoch_info(protocol_version, 1500);
             assert!(
                 formatted
-                    .contains("• Fee Multiplier: 1.5x (a fixed value, not read from the network)"),
-                "the multiplier must be shown as fixed, got: {formatted}"
-            );
-            assert!(
-                formatted.contains("is this app's default, not a value read from the network"),
-                "the degraded copy must name the default as the app's own, got: {formatted}"
-            );
-            assert!(
-                !formatted.contains("every network charges"),
-                "a failed fetch cannot support a claim about what networks charge: {formatted}"
+                    .contains("• Fee Multiplier: 1.5x (the last known value, not a fresh reading)"),
+                "the multiplier must be shown as stale, got: {formatted}"
             );
         }
     }
 
     #[test]
-    fn epoch_fallback_never_reports_an_unconfirmed_protocol_version_as_a_number() {
-        let formatted = format_hardcoded_current_epoch_info(None, 1000);
+    fn unavailable_epoch_never_reports_an_unconfirmed_protocol_version_as_a_number() {
+        let formatted = format_unavailable_current_epoch_info(None, 1000);
         assert!(
             formatted
                 .contains("• Protocol Version: the connected network has not confirmed one yet."),
@@ -1141,33 +1199,29 @@ mod tests {
         );
     }
 
-    /// Fee estimates must not keep running on whatever multiplier a previous
-    /// refresh happened to leave behind: when the live epoch fetch fails (here,
-    /// against a mock SDK that answers nothing), the task republishes the
-    /// default one.
+    /// A failed epoch fetch must not reset a multiplier a previous live read
+    /// published: the last known value is closer to the network's than any
+    /// fixed default, and the report names the value it keeps.
     #[tokio::test]
-    async fn epoch_fallback_republishes_the_default_fee_multiplier() {
+    async fn failed_epoch_fetch_keeps_the_last_known_fee_multiplier() {
         let temp_dir = tempfile::tempdir().expect("tempdir");
         let ctx = crate::context::test_support::test_app_context(temp_dir.path());
         let sdk = dash_sdk::Sdk::new_mock();
-        ctx.set_fee_multiplier_permille(7_777);
+        ctx.set_fee_multiplier_permille(1_500);
 
         let result = ctx
             .run_platform_info_task(PlatformInfoTaskRequestType::CurrentEpochInfo, &sdk)
             .await
             .expect("a failed epoch fetch degrades to a text result");
 
-        assert_eq!(
-            ctx.fee_multiplier_permille(),
-            PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE
-        );
+        assert_eq!(ctx.fee_multiplier_permille(), 1_500);
         let BackendTaskSuccessResult::PlatformInfo(PlatformInfoTaskResult::TextResult(text)) =
             result
         else {
-            panic!("the degraded epoch path returns a text result");
+            panic!("a failed epoch fetch returns a text result");
         };
         assert!(
-            text.contains("• Fee Multiplier: 1x"),
+            text.contains("• Fee Multiplier: 1.5x (the last known value"),
             "the reported multiplier must match the cached one, got: {text}"
         );
     }
diff --git a/src/backend_task/protocol_13_transitions.rs b/src/backend_task/protocol_13_transitions.rs
new file mode 100644
index 000000000..69c477542
--- /dev/null
+++ b/src/backend_task/protocol_13_transitions.rs
@@ -0,0 +1,360 @@
+//! State transitions built the way DET builds them on a protocol 13 network
+//! (mainnet and testnet today): only encodings protocol 13 decodes.
+
+use std::collections::BTreeMap;
+use std::sync::Arc;
+
+use async_trait::async_trait;
+use dash_sdk::dpp::ProtocolError;
+use dash_sdk::dpp::address_funds::AddressWitness;
+use dash_sdk::dpp::dashcore::Network;
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+use dash_sdk::dpp::data_contract::config::DataContractConfig;
+use dash_sdk::dpp::data_contract::document_type::DocumentType;
+use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::DocumentActionFeeAgreement;
+use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::v0::DocumentActionFeeAgreementV0;
+use dash_sdk::dpp::document::{Document, DocumentV0};
+use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
+use dash_sdk::dpp::identity::signer::Signer;
+use dash_sdk::dpp::identity::{Identity, IdentityPublicKey, KeyType, Purpose, SecurityLevel};
+use dash_sdk::dpp::platform_value::{BinaryData, Identifier, platform_value};
+use dash_sdk::dpp::prelude::UserFeeIncrease;
+use dash_sdk::dpp::state_transition::StateTransition;
+use dash_sdk::dpp::state_transition::batch_transition::BatchTransition;
+use dash_sdk::dpp::state_transition::batch_transition::batched_transition::BatchedTransition;
+use dash_sdk::dpp::state_transition::batch_transition::batched_transition::document_transition::DocumentTransitionV0Methods;
+use dash_sdk::dpp::state_transition::batch_transition::document_base_transition::DocumentBaseTransition;
+use dash_sdk::dpp::state_transition::batch_transition::methods::StateTransitionCreationOptions;
+use dash_sdk::dpp::state_transition::batch_transition::methods::v0::DocumentsBatchTransitionMethodsV0;
+use dash_sdk::dpp::state_transition::identity_update_transition::IdentityUpdateTransition;
+use dash_sdk::dpp::state_transition::identity_update_transition::methods::IdentityUpdateTransitionMethodsV0;
+use dash_sdk::dpp::state_transition::public_key_in_creation::IdentityPublicKeyInCreation;
+use dash_sdk::dpp::version::PlatformVersion;
+
+use crate::context::AppContext;
+use crate::context::test_support::test_app_context_for_network;
+
+/// Signs everything with placeholder bytes: these tests check what is
+/// encoded, not signature validity.
+#[derive(Debug)]
+struct PlaceholderSigner;
+
+#[async_trait]
+impl Signer<IdentityPublicKey> for PlaceholderSigner {
+    async fn sign(
+        &self,
+        _key: &IdentityPublicKey,
+        _data: &[u8],
+    ) -> Result<BinaryData, ProtocolError> {
+        Ok(BinaryData::new(vec![0; 65]))
+    }
+
+    async fn sign_create_witness(
+        &self,
+        _key: &IdentityPublicKey,
+        _data: &[u8],
+    ) -> Result<AddressWitness, ProtocolError> {
+        Err(ProtocolError::Generic(
+            "no address witnesses here".to_string(),
+        ))
+    }
+
+    fn can_sign_with(&self, _key: &IdentityPublicKey) -> bool {
+        true
+    }
+}
+
+/// A mainnet context, which builds at protocol 13 until the network says
+/// otherwise.
+fn mainnet_context() -> (tempfile::TempDir, Arc<AppContext>, &'static PlatformVersion) {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    let ctx = test_app_context_for_network(tmp.path(), Network::Mainnet);
+    let platform_version = ctx.platform_version();
+    assert_eq!(platform_version.protocol_version, 13);
+    (tmp, ctx, platform_version)
+}
+
+fn plain_key(id: u32, security_level: SecurityLevel) -> IdentityPublicKey {
+    IdentityPublicKey::from(IdentityPublicKeyV0 {
+        id,
+        purpose: Purpose::AUTHENTICATION,
+        security_level,
+        contract_bounds: None,
+        key_type: KeyType::ECDSA_SECP256K1,
+        read_only: false,
+        data: vec![2; 33].into(),
+        disabled_at: None,
+    })
+}
+
+/// A key without limits, added on a protocol 13 network, goes out as the
+/// version 0 key encoding protocol 13 decodes.
+#[tokio::test]
+async fn a_plain_key_is_added_in_the_protocol_13_encoding() {
+    let (_tmp, _ctx, platform_version) = mainnet_context();
+    let mut identity = Identity::create_basic_identity(Identifier::from([4; 32]), platform_version)
+        .expect("identity");
+    identity.add_public_key(plain_key(0, SecurityLevel::MASTER));
+
+    let transition = IdentityUpdateTransition::try_from_identity_with_signer(
+        &identity,
+        &0,
+        vec![plain_key(1, SecurityLevel::HIGH)],
+        vec![],
+        1,
+        UserFeeIncrease::default(),
+        &PlaceholderSigner,
+        platform_version,
+        None,
+    )
+    .await
+    .expect("identity update");
+
+    let StateTransition::IdentityUpdate(IdentityUpdateTransition::V0(update)) = transition else {
+        panic!("expected a version 0 identity update, got {transition:?}");
+    };
+    assert_eq!(update.add_public_keys.len(), 1);
+    assert!(matches!(
+        update.add_public_keys[0],
+        IdentityPublicKeyInCreation::V0(_)
+    ));
+}
+
+fn note_contract(platform_version: &PlatformVersion) -> dash_sdk::platform::DataContract {
+    use dash_sdk::dpp::data_contract::v1::DataContractV1;
+
+    let id = Identifier::from([8; 32]);
+    let config = DataContractConfig::default_for_version(platform_version).expect("config");
+    let schema = platform_value!({
+        "type": "object",
+        "properties": {"name": {"type": "string", "position": 0, "maxLength": 63_u32}},
+        "required": ["name"],
+        "additionalProperties": false,
+    });
+    let note = DocumentType::try_from_schema(
+        id,
+        1,
+        config.version(),
+        "note",
+        schema,
+        None,
+        &BTreeMap::new(),
+        &config,
+        true,
+        &mut Vec::new(),
+        platform_version,
+    )
+    .expect("document type");
+    dash_sdk::platform::DataContract::V1(DataContractV1 {
+        id,
+        version: 1,
+        owner_id: Identifier::from([7; 32]),
+        document_types: BTreeMap::from([("note".to_string(), note)]),
+        config,
+        schema_defs: None,
+        groups: BTreeMap::new(),
+        tokens: BTreeMap::new(),
+        keywords: vec![],
+        created_at: None,
+        updated_at: None,
+        created_at_block_height: None,
+        updated_at_block_height: None,
+        created_at_epoch: None,
+        updated_at_epoch: None,
+        description: None,
+    })
+}
+
+fn note(owner_id: Identifier) -> Document {
+    Document::V0(DocumentV0 {
+        moderated_at: None,
+        moderated_by: None,
+        id: Identifier::from([9; 32]),
+        owner_id,
+        creator_id: None,
+        properties: BTreeMap::from([("name".to_string(), "hello".into())]),
+        revision: Some(1),
+        created_at: None,
+        updated_at: None,
+        transferred_at: None,
+        created_at_block_height: None,
+        updated_at_block_height: None,
+        transferred_at_block_height: None,
+        created_at_core_block_height: None,
+        updated_at_core_block_height: None,
+        transferred_at_core_block_height: None,
+        contract_version: None,
+    })
+}
+
+async fn create_note(
+    platform_version: &PlatformVersion,
+    options: Option<StateTransitionCreationOptions>,
+) -> Result<StateTransition, Box<ProtocolError>> {
+    let contract = note_contract(platform_version);
+    let document_type = contract.document_type_for_name("note").expect("note type");
+    let owner_id = Identifier::from([4; 32]);
+    BatchTransition::new_document_creation_transition_from_document(
+        note(owner_id),
+        document_type,
+        [3; 32],
+        &plain_key(1, SecurityLevel::HIGH),
+        1,
+        UserFeeIncrease::default(),
+        None,
+        &PlaceholderSigner,
+        platform_version,
+        options,
+    )
+    .await
+    .map_err(Box::new)
+}
+
+/// A document created on a protocol 13 network uses a document base that
+/// protocol 13 decodes: not the protocol 14 one that carries a fee agreement.
+#[tokio::test]
+async fn a_document_is_created_in_the_protocol_13_encoding() {
+    let (_tmp, _ctx, platform_version) = mainnet_context();
+
+    let transition = create_note(platform_version, None)
+        .await
+        .expect("document create");
+
+    let StateTransition::Batch(batch) = transition else {
+        panic!("expected a batch, got {transition:?}");
+    };
+    let base = match &batch {
+        BatchTransition::V0(v0) => v0.transitions[0].base().clone(),
+        BatchTransition::V1(v1) => match &v1.transitions[0] {
+            BatchedTransition::Document(document) => document.base().clone(),
+            other => panic!("expected a document transition, got {other:?}"),
+        },
+    };
+    assert!(
+        !matches!(base, DocumentBaseTransition::V2(_)),
+        "protocol 13 cannot decode {base:?}"
+    );
+}
+
+/// A fee agreement cannot be encoded for a protocol 13 network: building
+/// fails locally instead of producing a transition every node rejects.
+#[tokio::test]
+async fn a_fee_agreement_is_refused_on_protocol_13() {
+    let (_tmp, _ctx, platform_version) = mainnet_context();
+    let options = StateTransitionCreationOptions {
+        action_fee_agreement: Some(DocumentActionFeeAgreement::V0(
+            DocumentActionFeeAgreementV0 {
+                owner: 5,
+                moderators: 0,
+                fee_multiplier: None,
+            },
+        )),
+        ..Default::default()
+    };
+
+    assert!(
+        options
+            .validate_base_carries_action_fee_agreement(platform_version)
+            .is_err()
+    );
+    assert!(create_note(platform_version, Some(options)).await.is_err());
+}
+
+/// A key with limits built at protocol 13 (the feature gate and the SDK's
+/// version can disagree during the 13 → 14 switch) is either refused or keeps
+/// its limits; it never goes out as an unlimited version 0 key.
+#[tokio::test]
+async fn a_limited_key_built_at_protocol_13_never_loses_its_limits() {
+    use dash_sdk::dpp::state_transition::public_key_in_creation::accessors::IdentityPublicKeyInCreationV1Getters;
+
+    let (_tmp, _ctx, platform_version) = mainnet_context();
+    let mut identity = Identity::create_basic_identity(Identifier::from([5; 32]), platform_version)
+        .expect("identity");
+    identity.add_public_key(plain_key(0, SecurityLevel::MASTER));
+    let limited =
+        plain_key(1, SecurityLevel::HIGH).with_limits(Some(5_000), Some(2_000_000_000_000));
+
+    let built = IdentityUpdateTransition::try_from_identity_with_signer(
+        &identity,
+        &0,
+        vec![limited],
+        vec![],
+        1,
+        UserFeeIncrease::default(),
+        &PlaceholderSigner,
+        platform_version,
+        None,
+    )
+    .await;
+
+    let Ok(transition) = built else {
+        return; // Refused: nothing reaches the network.
+    };
+    let StateTransition::IdentityUpdate(IdentityUpdateTransition::V0(update)) = transition else {
+        panic!("expected a version 0 identity update, got {transition:?}");
+    };
+    let IdentityPublicKeyInCreation::V1(added) = &update.add_public_keys[0] else {
+        panic!("the limits were dropped: {:?}", update.add_public_keys[0]);
+    };
+    assert_eq!(added.total_budget(), Some(5_000));
+    assert_eq!(added.expires_at(), Some(2_000_000_000_000));
+}
+
+/// A token contract with a once-per-identity distribution, encoded at
+/// protocol 13, either fails to encode or keeps the distribution; it is never
+/// silently rewritten to version 0 rules without it.
+#[test]
+fn once_per_identity_rules_encoded_at_protocol_13_are_never_dropped() {
+    use dash_sdk::dpp::data_contract::accessors::v1::DataContractV1Getters;
+    use dash_sdk::dpp::data_contract::associated_token::token_configuration::TokenConfiguration;
+    use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+    use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::TokenDistributionRules;
+    use dash_sdk::dpp::data_contract::v1::DataContractV1;
+    use dash_sdk::dpp::serialization::{
+        PlatformDeserializableWithPotentialValidationFromVersionedStructureUntrusted,
+        PlatformSerializableWithPlatformVersion,
+    };
+
+    let (_tmp, _ctx, platform_version) = mainnet_context();
+    let mut config = TokenConfigurationV0::default_most_restrictive();
+    let TokenDistributionRules::V0(rules) = config.distribution_rules.clone() else {
+        panic!("the default rules are version 0");
+    };
+    config.distribution_rules =
+        crate::model::token::distribution_rules_with_once_per_identity(rules, Some(25));
+    let contract = dash_sdk::platform::DataContract::V1(DataContractV1 {
+        id: Identifier::from([9; 32]),
+        version: 1,
+        owner_id: Identifier::from([4; 32]),
+        document_types: BTreeMap::new(),
+        config: DataContractConfig::default_for_version(platform_version).expect("config"),
+        schema_defs: None,
+        groups: BTreeMap::new(),
+        tokens: BTreeMap::from([(0, TokenConfiguration::V0(config))]),
+        keywords: vec![],
+        created_at: None,
+        updated_at: None,
+        created_at_block_height: None,
+        updated_at_block_height: None,
+        created_at_epoch: None,
+        updated_at_epoch: None,
+        description: None,
+    });
+
+    let Ok(bytes) = contract.serialize_to_bytes_with_platform_version(platform_version) else {
+        return; // Refused: nothing reaches the network.
+    };
+    let decoded = dash_sdk::platform::DataContract::versioned_deserialize_untrusted(
+        &bytes,
+        false,
+        PlatformVersion::latest(),
+    )
+    .expect("decodes");
+    let token = decoded.tokens().get(&0).expect("the token");
+    assert_eq!(
+        crate::model::token::once_per_identity_amount(token),
+        Some(25),
+        "the once-per-identity distribution was dropped"
+    );
+}
diff --git a/src/backend_task/shielded/mod.rs b/src/backend_task/shielded/mod.rs
index c988bfd56..be0c365db 100644
--- a/src/backend_task/shielded/mod.rs
+++ b/src/backend_task/shielded/mod.rs
@@ -11,6 +11,9 @@ use dash_sdk::dpp::address_funds::{OrchardAddress, PlatformAddress};
 use dash_sdk::dpp::dashcore::Address;
 use std::sync::Arc;
 
+// TODO(shielded-identity-transfers): moving credits between identities and the
+// shielded pool (protocol version 14), and shielding to another wallet, are not
+// offered yet. See https://github.com/dashpay/dash-evo-tool/issues/1105
 /// The shielded-pool operations DET dispatches into the upstream
 /// `platform-wallet` coordinator.
 ///
diff --git a/src/backend_task/tokens/claim_tokens.rs b/src/backend_task/tokens/claim_tokens.rs
index f9df054df..2636ed783 100644
--- a/src/backend_task/tokens/claim_tokens.rs
+++ b/src/backend_task/tokens/claim_tokens.rs
@@ -1,6 +1,7 @@
 use crate::backend_task::BackendTaskSuccessResult;
 use crate::backend_task::error::TaskError;
 use crate::context::AppContext;
+use crate::model::identity_key_usability::now_ms;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::request_type::RequestType;
 use dash_sdk::Sdk;
@@ -43,7 +44,12 @@ impl AppContext {
             builder = builder.with_state_transition_creation_options(options);
         }
 
-        self.execute_token_op(
+        let token_id = data_contract.token_id(token_position);
+        let claimer_id = actor_identity.identity.id();
+        // The block time the proved claim document carries, when it does.
+        let mut proved_claim_time: Option<u64> = None;
+        let result = self
+            .execute_token_op(
             async {
                 sdk.token_claim(builder, &signing_key, actor_identity)
                     .await
@@ -53,6 +59,10 @@ impl AppContext {
             },
             |result| {
                 // Using the result, update the balance of the claimer identity
+                proved_claim_time = match &result {
+                    ClaimResult::Document(document)
+                    | ClaimResult::GroupActionWithDocument(_, document) => document.created_at(),
+                };
                 if let Some(token_id) = data_contract.token_id(token_position) {
                     match result {
                         // Standard claim result - extract claimer and amount from document
@@ -99,6 +109,139 @@ impl AppContext {
             },
             BackendTaskSuccessResult::ClaimedTokens,
         )
-        .await
+        .await;
+
+        match token_id {
+            Some(token_id) if distribution_type == TokenDistributionType::OncePerIdentity => {
+                settle_once_per_identity_claim(result, proved_claim_time, now_ms(), |at| {
+                    self.record_once_per_identity_claim(&token_id, &claimer_id, at)
+                })
+            }
+            _ => result,
+        }
+    }
+}
+
+/// The outcome of a once-per-identity claim attempt, after recording a
+/// successful claim with `record` at its claim time.
+///
+/// The claim cannot be undone, and the record is what keeps the screen from
+/// offering it again, so a failed record turns the success into
+/// [`TaskError::TokensClaimedButClaimNotRecorded`]: the user learns the claim
+/// was made and is not invited to try it again.
+fn settle_once_per_identity_claim(
+    result: Result<BackendTaskSuccessResult, TaskError>,
+    proved_claim_time: Option<u64>,
+    now_ms: u64,
+    record: impl FnOnce(u64) -> Result<(), TaskError>,
+) -> Result<BackendTaskSuccessResult, TaskError> {
+    match once_per_identity_claim_time(&result, proved_claim_time, now_ms) {
+        Some(claimed_at_ms) => match record(claimed_at_ms) {
+            Ok(()) => result,
+            Err(source) => Err(TaskError::TokensClaimedButClaimNotRecorded {
+                source: Box::new(source),
+            }),
+        },
+        None => result,
+    }
+}
+
+/// When to record a once-per-identity claim hint for this claim attempt:
+/// only after a successful claim, whose result is proof-backed, at the block
+/// time of the proved claim document (the local clock when it carries none).
+///
+/// A refusal as "already claimed" records nothing: that consensus error comes
+/// from the node DET talked to, unproven, and upstream offers no proved query
+/// for the claim status, so trusting it would let one hostile node mark an
+/// entitlement as spent on this device.
+fn once_per_identity_claim_time(
+    result: &Result<BackendTaskSuccessResult, TaskError>,
+    proved_claim_time: Option<u64>,
+    now_ms: u64,
+) -> Option<u64> {
+    result
+        .as_ref()
+        .ok()
+        .map(|_| proved_claim_time.unwrap_or(now_ms))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::backend_task::FeeResult;
+
+    fn claimed() -> Result<BackendTaskSuccessResult, TaskError> {
+        Ok(BackendTaskSuccessResult::ClaimedTokens(
+            FeeResult::estimated_only(1),
+        ))
+    }
+
+    #[test]
+    fn a_successful_claim_is_recorded_at_its_proved_block_time() {
+        assert_eq!(
+            once_per_identity_claim_time(&claimed(), Some(7), 9),
+            Some(7)
+        );
+        assert_eq!(
+            once_per_identity_claim_time(&claimed(), None, 9),
+            Some(9),
+            "the local clock when the document carries no time"
+        );
+    }
+
+    /// A claim that succeeded but could not be recorded is reported as made
+    /// and not recorded, not as a plain success the device then forgets.
+    #[test]
+    fn a_claim_that_cannot_be_recorded_says_so() {
+        let mut recorded_at = None;
+        let settled = settle_once_per_identity_claim(claimed(), Some(7), 9, |at| {
+            recorded_at = Some(at);
+            Err(TaskError::IdentityNotFoundLocally)
+        });
+
+        assert_eq!(recorded_at, Some(7));
+        assert!(
+            matches!(
+                settled,
+                Err(TaskError::TokensClaimedButClaimNotRecorded { .. })
+            ),
+            "got {settled:?}"
+        );
+    }
+
+    /// A recorded claim keeps its success; a failed claim is passed on and
+    /// records nothing.
+    #[test]
+    fn a_recorded_claim_or_a_failed_claim_is_passed_on() {
+        let settled = settle_once_per_identity_claim(claimed(), Some(7), 9, |_| Ok(()));
+        assert!(matches!(
+            settled,
+            Ok(BackendTaskSuccessResult::ClaimedTokens(_))
+        ));
+
+        let settled =
+            settle_once_per_identity_claim(Err(TaskError::MasterKeyNotFound), Some(7), 9, |_| {
+                panic!("a failed claim records nothing")
+            });
+        assert!(matches!(settled, Err(TaskError::MasterKeyNotFound)));
+    }
+
+    /// An "already claimed" refusal is unproven node output: never recorded,
+    /// whichever identity it names.
+    #[test]
+    fn a_refusal_or_any_other_error_is_not_recorded() {
+        for identity_id in [Identifier::random(), Identifier::random()] {
+            let refused = Err(TaskError::TokenOncePerIdentityAlreadyClaimed {
+                token_id: Identifier::random(),
+                identity_id,
+                claimed_at_ms: 5,
+                source_error: Box::new(dash_sdk::Error::Generic("claimed".to_string())),
+            });
+            assert_eq!(once_per_identity_claim_time(&refused, Some(7), 9), None);
+        }
+        assert_eq!(
+            once_per_identity_claim_time(&Err(TaskError::MasterKeyNotFound), Some(7), 9),
+            None
+        );
     }
 }
diff --git a/src/backend_task/tokens/mod.rs b/src/backend_task/tokens/mod.rs
index 9d3b3304c..caa89ee4d 100644
--- a/src/backend_task/tokens/mod.rs
+++ b/src/backend_task/tokens/mod.rs
@@ -17,6 +17,7 @@ use dash_sdk::{
         data_contract::{
             TokenConfiguration, TokenContractPosition,
             associated_token::{
+                token_configuration::accessors::v1::TokenConfigurationV1Setters,
                 token_configuration::v0::TokenConfigurationV0,
                 token_configuration_convention::TokenConfigurationConvention,
                 token_configuration_localization::{
@@ -96,6 +97,9 @@ pub struct TokenContractParams {
     pub groups: BTreeMap<GroupContractPosition, Group>,
     pub document_schemas: Option<BTreeMap<String, serde_json::Value>>,
     pub marketplace_rules: ChangeControlRules,
+    /// Whether holders may move the token to another identity. `false` needs
+    /// a version 1 token configuration (protocol version 14).
+    pub transferable: bool,
 }
 
 #[derive(Debug, Clone, PartialEq)]
@@ -113,6 +117,9 @@ pub enum TokenTask {
     /// ordering so the row disappears, and record the dismissal so later
     /// refreshes do not re-watch the pair.
     StopTrackingTokenBalance(IdentityTokenIdentifier),
+    /// Forget the note that an identity may already have taken its
+    /// once-per-identity claim of a token (the user dismissed it).
+    ClearOncePerIdentityClaimHint(IdentityTokenIdentifier),
     QueryDescriptionsByKeyword(String, Option<Start>),
     FetchTokenByContractId(Identifier),
     FetchTokenByTokenId(Identifier),
@@ -246,6 +253,38 @@ impl AppContext {
         Ok(make_success(FeeResult::estimated_only(estimated_fee)))
     }
 
+    /// Version 1 distribution rules (a once-per-identity distribution) only
+    /// decode on networks that accept them; refuse them elsewhere before
+    /// anything is signed.
+    fn ensure_distribution_rules_supported(
+        &self,
+        rules: &TokenDistributionRules,
+    ) -> Result<(), TaskError> {
+        match rules {
+            TokenDistributionRules::V0(_) => Ok(()),
+            TokenDistributionRules::V1(_)
+                if crate::context::feature_gate::FeatureGate::TokenOncePerIdentityDistribution
+                    .is_available(self) =>
+            {
+                Ok(())
+            }
+            TokenDistributionRules::V1(_) => Err(TaskError::TokenOncePerIdentityNotSupported),
+        }
+    }
+
+    /// A token that cannot be transferred needs a version 1 token
+    /// configuration, which only decodes on networks that accept it; refuse it
+    /// elsewhere before anything is signed.
+    fn ensure_transferability_supported(&self, transferable: bool) -> Result<(), TaskError> {
+        if transferable
+            || crate::context::feature_gate::FeatureGate::NonTransferableTokens.is_available(self)
+        {
+            Ok(())
+        } else {
+            Err(TaskError::NonTransferableTokenNotSupported)
+        }
+    }
+
     pub async fn run_token_task(
         self: &Arc<Self>,
         task: TokenTask,
@@ -258,6 +297,8 @@ impl AppContext {
                 signing_key,
                 params,
             } => {
+                self.ensure_distribution_rules_supported(&params.distribution_rules)?;
+                self.ensure_transferability_supported(params.transferable)?;
                 params
                     .contract_keywords
                     .iter()
@@ -553,6 +594,12 @@ impl AppContext {
                     Err(e) => Err(TaskError::from(e)),
                 }
             }
+            TokenTask::ClearOncePerIdentityClaimHint(pair) => {
+                self.clear_once_per_identity_claim(&pair.token_id, &pair.identity_id)?;
+                Ok(BackendTaskSuccessResult::OncePerIdentityClaimHintCleared(
+                    pair,
+                ))
+            }
             TokenTask::SaveTokenLocally(token_info) => {
                 let token_id = token_info.token_id;
                 self.insert_token(
@@ -670,6 +717,7 @@ impl AppContext {
             groups,
             document_schemas,
             marketplace_rules,
+            transferable,
         } = params;
 
         // 1) Create the V1 struct first to get the contract ID
@@ -761,13 +809,19 @@ impl AppContext {
         token_config_v0.distribution_rules = distribution_rules;
         token_config_v0.description = token_description;
 
-        // All tokens are created NotTradeable; a future SDK will add more modes.
+        // Tokens are created NotTradeable. Tradeable needs protocol version 15
+        // (TOKEN_MARKETPLACE_INITIAL_PROTOCOL_VERSION) and a transferable token,
+        // and DET has no way to list a token or make an offer for it yet.
         token_config_v0.marketplace_rules = TokenMarketplaceRules::V0(TokenMarketplaceRulesV0 {
             trade_mode: TokenTradeMode::NotTradeable,
             trade_mode_change_rules: marketplace_rules,
         });
 
-        let token_config = TokenConfiguration::V0(token_config_v0);
+        let mut token_config = TokenConfiguration::V0(token_config_v0);
+        // Upgrades to a version 1 configuration only for a token that cannot
+        // be transferred, so a transferable token keeps the format every
+        // network accepts.
+        token_config.set_transferable(transferable);
 
         // 7) Insert this token config at position 0
         contract_v1
@@ -783,6 +837,49 @@ impl AppContext {
 mod tests {
     use super::*;
 
+    /// Once-per-identity rules are refused until the network accepts them;
+    /// version 0 rules always pass.
+    #[test]
+    fn once_per_identity_rules_need_a_network_that_accepts_them() {
+        use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        let TokenDistributionRules::V0(v0) =
+            TokenConfigurationV0::default_most_restrictive().distribution_rules
+        else {
+            panic!("the default rules are version 0");
+        };
+        let v1 =
+            crate::model::token::distribution_rules_with_once_per_identity(v0.clone(), Some(5));
+        let v0 = TokenDistributionRules::V0(v0);
+
+        ctx.set_platform_protocol_version(13);
+        assert!(ctx.ensure_distribution_rules_supported(&v0).is_ok());
+        assert!(matches!(
+            ctx.ensure_distribution_rules_supported(&v1),
+            Err(TaskError::TokenOncePerIdentityNotSupported)
+        ));
+        ctx.set_platform_protocol_version(14);
+        assert!(ctx.ensure_distribution_rules_supported(&v1).is_ok());
+    }
+
+    /// A token that cannot be transferred is refused until the network
+    /// accepts one; a transferable token always passes.
+    #[test]
+    fn non_transferable_tokens_need_a_network_that_accepts_them() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+
+        ctx.set_platform_protocol_version(13);
+        assert!(ctx.ensure_transferability_supported(true).is_ok());
+        assert!(matches!(
+            ctx.ensure_transferability_supported(false),
+            Err(TaskError::NonTransferableTokenNotSupported)
+        ));
+        ctx.set_platform_protocol_version(14);
+        assert!(ctx.ensure_transferability_supported(false).is_ok());
+    }
+
     #[tokio::test]
     async fn token_lookup_timeout_is_typed_and_actionable() {
         let error = crate::backend_task::await_network_request_with_timeout(
diff --git a/src/backend_task/tokens/query_tokens.rs b/src/backend_task/tokens/query_tokens.rs
index a481fefcd..0767c1c63 100644
--- a/src/backend_task/tokens/query_tokens.rs
+++ b/src/backend_task/tokens/query_tokens.rs
@@ -26,12 +26,10 @@ impl AppContext {
         sdk: &Sdk,
     ) -> Result<BackendTaskSuccessResult, TaskError> {
         // -- 1. fetch keyword -> contractId docs
-        let mut kw_query =
-            DocumentQuery::new(self.keyword_search_contract.clone(), "contractKeywords").map_err(
-                |e| TaskError::TokenQueryError {
-                    detail: format!("Failed to create document query: {}", e),
-                },
-            )?;
+        let mut kw_query = DocumentQuery::new(self.keyword_search_contract(), "contractKeywords")
+            .map_err(|e| TaskError::TokenQueryError {
+            detail: format!("Failed to create document query: {}", e),
+        })?;
         kw_query.limit = 100;
         kw_query.start = cursor.clone();
         kw_query = kw_query.with_where(WhereClause {
@@ -71,10 +69,11 @@ impl AppContext {
 
         for cid in &contract_ids {
             let mut desc_query =
-                DocumentQuery::new(self.keyword_search_contract.clone(), "shortDescription")
-                    .map_err(|e| TaskError::TokenQueryError {
+                DocumentQuery::new(self.keyword_search_contract(), "shortDescription").map_err(
+                    |e| TaskError::TokenQueryError {
                         detail: format!("Failed to create document query: {}", e),
-                    })?;
+                    },
+                )?;
             desc_query.limit = 1;
             desc_query = desc_query.with_where(WhereClause {
                 field: "contractId".into(),
diff --git a/src/backend_task/tokens/update_token_config.rs b/src/backend_task/tokens/update_token_config.rs
index c81668bc2..9d16d7a95 100644
--- a/src/backend_task/tokens/update_token_config.rs
+++ b/src/backend_task/tokens/update_token_config.rs
@@ -27,6 +27,7 @@ impl AppContext {
         group_info: Option<GroupStateTransitionInfoStatus>,
         sdk: &Sdk,
     ) -> Result<BackendTaskSuccessResult, TaskError> {
+        validate_supported_change(&change_item)?;
         tracing::trace!(
             ?group_info,
             ?identity_token_info,
@@ -126,3 +127,38 @@ impl AppContext {
         ))
     }
 }
+
+fn validate_supported_change(item: &TokenConfigurationChangeItem) -> Result<(), TaskError> {
+    if crate::model::token::token_change_item_is_supported(item) {
+        Ok(())
+    } else {
+        Err(TaskError::TokenShieldedConfigurationUnsupported)
+    }
+}
+
+#[cfg(test)]
+mod sdk_adapter_tests {
+    use super::*;
+    use dash_sdk::dpp::data_contract::change_control_rules::authorized_action_takers::AuthorizedActionTakers;
+
+    #[test]
+    fn backend_rejects_shielded_configuration_before_submission() {
+        for item in [
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoing(17),
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingControlGroup(
+                AuthorizedActionTakers::NoOne,
+            ),
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingAdminGroup(
+                AuthorizedActionTakers::NoOne,
+            ),
+        ] {
+            assert!(matches!(
+                validate_supported_change(&item),
+                Err(TaskError::TokenShieldedConfigurationUnsupported)
+            ));
+        }
+        assert!(
+            validate_supported_change(&TokenConfigurationChangeItem::MaxSupply(Some(17))).is_ok()
+        );
+    }
+}
diff --git a/src/backend_task/wallet/derive_identity_key_for_display.rs b/src/backend_task/wallet/derive_identity_key_for_display.rs
index 1d7efe1f2..52dd10322 100644
--- a/src/backend_task/wallet/derive_identity_key_for_display.rs
+++ b/src/backend_task/wallet/derive_identity_key_for_display.rs
@@ -28,7 +28,9 @@ impl AppContext {
         let network = self.network;
         let wif = self
             .with_identity_secret_key(identity_id, target.clone(), key_id, |secret_key| {
-                let private_key = PrivateKey::new(secret_key, network);
+                let private_key =
+                    PrivateKey::from_byte_array(secret_key.as_secret_bytes(), network)
+                        .map_err(|_| TaskError::IdentityKeyMalformed)?;
                 Ok(Secret::new(private_key.to_wif()))
             })
             .await?;
diff --git a/src/backend_task/wallet/mod.rs b/src/backend_task/wallet/mod.rs
index 1d7011244..64afbe9ec 100644
--- a/src/backend_task/wallet/mod.rs
+++ b/src/backend_task/wallet/mod.rs
@@ -18,14 +18,15 @@ use crate::model::qualified_identity::PrivateKeyTarget;
 use crate::model::wallet::WalletSeedHash;
 use dash_sdk::dpp::address_funds::PlatformAddress;
 use dash_sdk::dpp::balances::credits::Credits;
+use dash_sdk::dpp::dashcore::ecdsa::EcdsaRecSignature;
 use dash_sdk::dpp::dashcore::hashes::Hash;
-use dash_sdk::dpp::dashcore::secp256k1::{Message, Secp256k1, SecretKey};
-use dash_sdk::dpp::dashcore::sign_message::{MessageSignature, signed_msg_hash};
+use dash_sdk::dpp::dashcore::sign_message::{self, signed_msg_hash};
 use dash_sdk::dpp::dashcore::{OutPoint, PrivateKey};
 use dash_sdk::dpp::identity::core_script::CoreScript;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
 use dash_sdk::dpp::identity::{KeyID, KeyType};
 use dash_sdk::dpp::key_wallet::bip32::DerivationPath;
+use dash_sdk::dpp::secp256k1::{Message, SecretKey};
 use dash_sdk::platform::Identifier;
 use std::collections::BTreeMap;
 use std::sync::Arc;
@@ -40,11 +41,19 @@ pub(crate) fn dash_signed_message(
     secret_key: &SecretKey,
     compressed: bool,
 ) -> String {
-    let secp = Secp256k1::new();
     let message_hash = signed_msg_hash(message);
     let digest = Message::from_digest(*message_hash.as_byte_array());
-    let recoverable = secp.sign_ecdsa_recoverable(&digest, secret_key);
-    MessageSignature::new(recoverable, compressed).to_base64()
+    let recoverable = dash_sdk::dpp::secp256k1::ecdsa::RecoverableSignature::sign_ecdsa_recoverable(
+        digest, secret_key,
+    );
+    let (recovery_id, _) = recoverable.serialize_compact();
+    let envelope = EcdsaRecSignature::from_parts(
+        recoverable.to_standard().into(),
+        recovery_id.to_u8(),
+        compressed,
+    )
+    .expect("a recovery id from signing is in range");
+    sign_message::to_base64(envelope)
 }
 
 impl AppContext {
@@ -183,7 +192,7 @@ impl AppContext {
                     .ok_or(TaskError::IdentityKeyMissing)?;
                 // Present-but-malformed key bytes are distinct from a
                 // genuinely absent key and from a signing/derivation failure.
-                let secret_key = SecretKey::from_byte_array(key).map_err(|detail| {
+                let secret_key = SecretKey::from_secret_bytes(*key).map_err(|detail| {
                     tracing::warn!(error = %detail, "Identity-key secret construction failed");
                     TaskError::IdentityKeyMalformed
                 })?;
@@ -375,13 +384,13 @@ mod tests {
     use crate::utils::tasks::TaskManager;
     use crate::wallet_backend::IdentityKeyView;
     use dash_sdk::dpp::dashcore::Network;
-    use dash_sdk::dpp::dashcore::secp256k1::PublicKey;
-    use dash_sdk::dpp::dashcore::sign_message::{MessageSignature, signed_msg_hash};
+    use dash_sdk::dpp::dashcore::sign_message::{self, signed_msg_hash};
     use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
     use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
     use dash_sdk::dpp::identity::{Identity, Purpose, SecurityLevel};
     use dash_sdk::dpp::key_wallet::bip32::ChildNumber;
     use dash_sdk::dpp::platform_value::BinaryData;
+    use dash_sdk::dpp::secp256k1::PublicKey;
     use dash_sdk::dpp::version::PlatformVersion;
     use dash_sdk::platform::IdentityPublicKey;
     use std::sync::atomic::{AtomicBool, Ordering};
@@ -506,22 +515,43 @@ mod tests {
     /// hardcoded recovery header would fail ~50% of the time here. Both the
     /// wallet-key and identity-key signers call this one helper.
     fn assert_recovers(compressed: bool) {
-        let secp = Secp256k1::new();
-        let secret_key = SecretKey::from_byte_array(&[0x42u8; 32]).expect("valid secret");
-        let expected_pubkey = PublicKey::from_secret_key(&secp, &secret_key);
+        let secret_key = SecretKey::from_secret_bytes([0x42u8; 32]).expect("valid secret");
+        let expected_pubkey = PublicKey::from_secret_key(&secret_key);
         let message = "Bilby was here";
 
         let base64 = dash_signed_message(message, &secret_key, compressed);
-        let parsed = MessageSignature::from_base64(&base64).expect("valid envelope");
-        assert_eq!(parsed.compressed, compressed);
+        let parsed = sign_message::from_base64(&base64).expect("valid envelope");
+        assert_eq!(parsed.is_compressed().expect("valid header"), compressed);
 
-        let recovered = parsed
-            .recover_pubkey(&secp, signed_msg_hash(message))
+        let recovered = sign_message::recover_pubkey(&parsed, signed_msg_hash(message))
             .expect("recovers a public key");
-        assert_eq!(recovered.inner, expected_pubkey);
+        assert_eq!(PublicKey::from(recovered.inner), expected_pubkey);
         assert_eq!(recovered.compressed, compressed);
     }
 
+    /// The envelope keeps the layout the previous encoder produced: a header
+    /// byte `27 + recovery id` (`+ 4` when compressed), then the compact
+    /// `r || s` of the same deterministic signature.
+    #[test]
+    fn the_envelope_keeps_its_byte_layout() {
+        use dash_sdk::dpp::secp256k1::Message;
+        use dash_sdk::dpp::secp256k1::ecdsa::RecoverableSignature;
+        let message = "Bilby was here";
+        let secret_key = SecretKey::from_secret_bytes([0x42u8; 32]).expect("valid secret");
+        let digest = Message::from_digest(*signed_msg_hash(message).as_byte_array());
+        let (recovery_id, compact) =
+            RecoverableSignature::sign_ecdsa_recoverable(digest, &secret_key).serialize_compact();
+        for compressed in [false, true] {
+            let mut expected = [0u8; 65];
+            expected[0] = 27 + recovery_id.to_u8() + if compressed { 4 } else { 0 };
+            expected[1..].copy_from_slice(&compact);
+            let encoded =
+                sign_message::from_base64(&dash_signed_message(message, &secret_key, compressed))
+                    .expect("valid envelope");
+            assert_eq!(encoded.as_bytes(), &expected);
+        }
+    }
+
     #[test]
     fn recovers_signer_pubkey_compressed() {
         assert_recovers(true);
@@ -603,7 +633,7 @@ mod tests {
 
         let bytes = fixture
             .ctx
-            .with_identity_secret_key(identity_id, MAIN, 7, |key| Ok(key.secret_bytes()))
+            .with_identity_secret_key(identity_id, MAIN, 7, |key| Ok(key.to_secret_bytes()))
             .await
             .expect("a key that matches its record must resolve");
 
@@ -746,7 +776,7 @@ mod tests {
 
         let bytes = fixture
             .ctx
-            .with_identity_secret_key(identity_id, MAIN, 7, |key| Ok(key.secret_bytes()))
+            .with_identity_secret_key(identity_id, MAIN, 7, |key| Ok(key.to_secret_bytes()))
             .await
             .expect("the sibling placement's live bytes must be served");
 
diff --git a/src/backend_task/wallet/rename_wallet.rs b/src/backend_task/wallet/rename_wallet.rs
index 963687315..b2f86c08c 100644
--- a/src/backend_task/wallet/rename_wallet.rs
+++ b/src/backend_task/wallet/rename_wallet.rs
@@ -94,8 +94,8 @@ mod tests {
     use crate::utils::tasks::TaskManager;
     use crate::wallet_backend::kv_test_support::InMemoryKv;
     use crate::wallet_backend::{DetKv, DetScope};
-    use dash_sdk::dpp::dashcore::secp256k1::SecretKey;
     use dash_sdk::dpp::dashcore::{Network, PrivateKey};
+    use dash_sdk::dpp::secp256k1::SecretKey;
     use platform_wallet_storage::{KvError, KvStore, ObjectId};
     use std::sync::{Condvar, Mutex};
     use std::time::Duration;
@@ -804,8 +804,10 @@ mod tests {
         let f = fixture().await;
         let backend = f.ctx.wallet_backend().expect("backend");
         // Mint a deterministic throwaway key rather than committing a WIF.
-        let sk = SecretKey::from_byte_array(&[0x11u8; 32]).expect("valid scalar");
-        let wif = PrivateKey::new(sk, Network::Testnet).to_wif();
+        let sk = SecretKey::from_secret_bytes([0x11u8; 32]).expect("valid scalar");
+        let wif = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .to_wif();
         let (imported, display_wallet) = f
             .ctx
             .import_single_key_wif(
@@ -850,8 +852,10 @@ mod tests {
         use crate::model::wallet::alias::AliasSource;
         let f = fixture().await;
         let backend = f.ctx.wallet_backend().expect("backend");
-        let key = SecretKey::from_byte_array(&[0x33; 32]).expect("valid scalar");
-        let wif = PrivateKey::new(key, Network::Testnet).to_wif();
+        let key = SecretKey::from_secret_bytes([0x33; 32]).expect("valid scalar");
+        let wif = PrivateKey::from_byte_array(key.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .to_wif();
         let (first, retained) = f
             .ctx
             .import_single_key_wif(
@@ -902,8 +906,10 @@ mod tests {
     async fn rename_single_key_blank_alias_resets_to_default_name() {
         let f = fixture().await;
         let backend = f.ctx.wallet_backend().expect("backend");
-        let sk = SecretKey::from_byte_array(&[0x22u8; 32]).expect("valid scalar");
-        let wif = PrivateKey::new(sk, Network::Testnet).to_wif();
+        let sk = SecretKey::from_secret_bytes([0x22u8; 32]).expect("valid scalar");
+        let wif = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .to_wif();
         let address = backend
             .single_key()
             .import_wif(
diff --git a/src/backend_task/wallet/sign_message_with_key.rs b/src/backend_task/wallet/sign_message_with_key.rs
index c0f4cf28c..c52dd6a58 100644
--- a/src/backend_task/wallet/sign_message_with_key.rs
+++ b/src/backend_task/wallet/sign_message_with_key.rs
@@ -6,9 +6,9 @@ use crate::backend_task::error::TaskError;
 use crate::backend_task::wallet::dash_signed_message;
 use crate::context::AppContext;
 use crate::model::wallet::WalletSeedHash;
-use dash_sdk::dpp::dashcore::secp256k1::SecretKey;
 use dash_sdk::dpp::identity::KeyType;
 use dash_sdk::dpp::key_wallet::bip32::DerivationPath;
+use dash_sdk::dpp::secp256k1::SecretKey;
 use std::sync::Arc;
 
 impl AppContext {
@@ -40,7 +40,7 @@ impl AppContext {
                 &derivation_path,
                 TaskError::WalletMessageSigningFailed,
                 |private_key| {
-                    let secret_key = SecretKey::from_byte_array(&private_key.inner.secret_bytes())
+                    let secret_key = SecretKey::from_secret_bytes(*private_key.inner.to_bytes())
                         .map_err(|detail| {
                             tracing::warn!(error = %detail, "Sign-message secret key construction failed");
                             TaskError::WalletMessageSigningFailed
diff --git a/src/context/connection_status.rs b/src/context/connection_status.rs
index 5aa973425..9c2715a4b 100644
--- a/src/context/connection_status.rs
+++ b/src/context/connection_status.rs
@@ -15,6 +15,10 @@ const REFRESH_DISCONNECTED: Duration = Duration::from_secs(1);
 
 const SPV_PEER_DEGRADED_TIMEOUT: Duration = Duration::from_secs(30);
 
+/// Tooltip line shown once wallet sync data could not be saved.
+const WALLET_SYNC_FAULT_HINT: &str =
+    "Some wallet data could not be saved. Restart Dash Evo Tool to try again.";
+
 /// Five-state connection indicator matching the UI's colored circle.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 #[repr(u8)]
@@ -88,6 +92,12 @@ pub struct ConnectionStatus {
     spv_no_peers_since: Mutex<Option<Instant>>,
     dapi_total_endpoints: AtomicU16,
     dapi_available_endpoints: AtomicU16,
+    /// Mirror of the wallet backend's sync fault latch: wallet sync data could
+    /// not be saved, so the saved sync height is held back and the missing
+    /// range is scanned again on the next start. Upstream raises no event for
+    /// it, so the frame-loop refresh polls it. Leaves the overall state alone:
+    /// the connection itself is healthy.
+    wallet_sync_fault: AtomicBool,
 }
 
 /// Downloaded-notes progress for an in-flight shielded sync pass (DET-shaped —
@@ -131,6 +141,7 @@ impl ConnectionStatus {
             spv_no_peers_since: Mutex::new(None),
             dapi_total_endpoints: AtomicU16::new(0),
             dapi_available_endpoints: AtomicU16::new(0),
+            wallet_sync_fault: AtomicBool::new(false),
         }
     }
 
@@ -150,6 +161,7 @@ impl ConnectionStatus {
             }
         });
         self.masternodes_ready.store(false, Ordering::Relaxed);
+        self.wallet_sync_fault.store(false, Ordering::Relaxed);
         self.spv_connected_peers.store(0, Ordering::Relaxed);
         *self
             .spv_no_peers_since
@@ -368,6 +380,14 @@ impl ConnectionStatus {
 
     /// Current SPV connected peer count (push-based from the wallet-backend
     /// `EventBridge` `on_network_event` callback).
+    pub fn set_wallet_sync_fault(&self, faulted: bool) {
+        self.wallet_sync_fault.store(faulted, Ordering::Relaxed);
+    }
+
+    pub fn wallet_sync_fault(&self) -> bool {
+        self.wallet_sync_fault.load(Ordering::Relaxed)
+    }
+
     pub fn spv_connected_peers(&self) -> u16 {
         self.spv_connected_peers.load(Ordering::Relaxed)
     }
@@ -493,7 +513,12 @@ impl ConnectionStatus {
         } else {
             ""
         };
-        format!("{header}\n{spv_label}{degraded_warning}\n{dapi_status}")
+        let sync_fault_hint = if self.wallet_sync_fault() {
+            format!("\n{WALLET_SYNC_FAULT_HINT}")
+        } else {
+            String::new()
+        };
+        format!("{header}\n{spv_label}{degraded_warning}\n{dapi_status}{sync_fault_hint}")
     }
 
     /// Updates internal connection state from a task result.
@@ -532,6 +557,14 @@ impl ConnectionStatus {
 
         self.refresh_dapi(app_context);
         // SPV status is push-based; no RPC chain lock polling.
+
+        // Upstream raises no event when it refuses to save wallet sync data,
+        // so its latch is polled here, on the same cadence as DAPI.
+        // TODO(wallet-sync-fault-headless): headless (MCP/CLI) runs have no
+        // frame loop, so nothing mirrors the fault there yet.
+        if let Ok(backend) = app_context.wallet_backend() {
+            self.set_wallet_sync_fault(backend.sync_fault_detected());
+        }
         AppAction::None
     }
 
@@ -1145,4 +1178,44 @@ mod tests {
             "reset must clear in-flight shielded tree progress"
         );
     }
+
+    #[test]
+    fn tooltip_tells_the_user_to_restart_after_a_wallet_sync_fault() {
+        let status = ConnectionStatus::new();
+        assert!(!status.wallet_sync_fault());
+        assert!(!status.tooltip_text().contains(WALLET_SYNC_FAULT_HINT));
+
+        status.set_wallet_sync_fault(true);
+        assert!(status.wallet_sync_fault());
+        let tooltip = status.tooltip_text();
+        assert!(tooltip.contains(WALLET_SYNC_FAULT_HINT), "{tooltip}");
+        assert!(
+            WALLET_SYNC_FAULT_HINT.ends_with("Restart Dash Evo Tool to try again."),
+            "the hint must say what to do"
+        );
+    }
+
+    /// The connection itself is healthy after a wallet sync fault, so the
+    /// indicator keeps its colour.
+    #[test]
+    fn wallet_sync_fault_leaves_the_overall_state_alone() {
+        let status = ConnectionStatus::new();
+        status.set_dapi_status(3, 3);
+        status.set_spv_status(SpvStatus::Running);
+        status.set_spv_connected_peers(4);
+        status.set_wallet_sync_fault(true);
+        status.refresh_state();
+        assert_eq!(status.overall_state(), OverallConnectionState::Synced);
+    }
+
+    #[test]
+    fn reset_clears_the_wallet_sync_fault() {
+        let status = ConnectionStatus::new();
+        status.set_wallet_sync_fault(true);
+        status.reset();
+        assert!(
+            !status.wallet_sync_fault(),
+            "another network's wallets start without the fault"
+        );
+    }
 }
diff --git a/src/context/contested_names_db.rs b/src/context/contested_names_db.rs
index aabd34e81..3a219f3e7 100644
--- a/src/context/contested_names_db.rs
+++ b/src/context/contested_names_db.rs
@@ -21,6 +21,7 @@ use crate::model::dpns_voting::{
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::utils::time::now_ms;
 use crate::wallet_backend::{DetScope, KvAdapterError};
+#[cfg(test)]
 use dash_sdk::dpp::dashcore::Network;
 use dash_sdk::dpp::data_contract::document_type::DocumentTypeRef;
 use dash_sdk::dpp::document::DocumentV0Getters;
@@ -120,12 +121,7 @@ impl StoredContestedName {
         self.locked || self.awarded_to.is_some()
     }
 
-    fn to_contested_name(&self, network: Network) -> ContestedName {
-        let join_window = crate::model::dpns::contest_durations(
-            network,
-            crate::context::default_platform_version(&network),
-        )
-        .join;
+    fn to_contested_name(&self, join_window: Duration) -> ContestedName {
         let awarded_to_id = self.awarded_to.map(Identifier::from);
 
         // Match pre-C6 semantics: state is computed from the latest
@@ -234,7 +230,15 @@ impl AppContext {
         let mut out = Vec::with_capacity(keys.len());
         for key in keys {
             match kv.get::<StoredContestedName>(DetScope::Global, &key) {
-                Ok(Some(stored)) => out.push(stored.to_contested_name(self.network)),
+                Ok(Some(stored)) => out.push(
+                    stored.to_contested_name(
+                        crate::model::dpns::contest_durations(
+                            self.network,
+                            self.platform_version(),
+                        )
+                        .join,
+                    ),
+                ),
                 Ok(None) => {}
                 Err(e) => tracing::warn!(
                     key = %key,
@@ -262,7 +266,13 @@ impl AppContext {
                 Ok(Some(stored)) => match stored.end_time {
                     Some(t) if t <= current_timestamp => {}
                     _ => {
-                        let contest = stored.to_contested_name(self.network);
+                        let contest = stored.to_contested_name(
+                            crate::model::dpns::contest_durations(
+                                self.network,
+                                self.platform_version(),
+                            )
+                            .join,
+                        );
                         if !contest.is_unread() {
                             out.push(contest);
                         }
@@ -1420,6 +1430,22 @@ mod tests {
     // Decode: contest state branches the cache resolves at read time.
     // ----------------------------------------------------------------
 
+    #[test]
+    fn to_contested_name_uses_the_supplied_protocol_join_window() {
+        let stored = StoredContestedName {
+            contestants: vec![contestant(1, Some(now_ms() - 60_000))],
+            ..Default::default()
+        };
+        assert_eq!(
+            stored.to_contested_name(Duration::from_secs(120)).state,
+            ContestState::Joinable
+        );
+        assert_eq!(
+            stored.to_contested_name(Duration::from_secs(30)).state,
+            ContestState::Ongoing
+        );
+    }
+
     #[test]
     fn to_contested_name_reports_won_by_when_awarded() {
         let stored = StoredContestedName {
@@ -1427,7 +1453,7 @@ mod tests {
             awarded_to: Some([7u8; 32]),
             ..Default::default()
         };
-        let cn = stored.to_contested_name(Network::Testnet);
+        let cn = stored.to_contested_name(Duration::from_secs(45 * 60));
         assert_eq!(cn.state, ContestState::WonBy(Identifier::from([7u8; 32])));
         assert_eq!(cn.awarded_to, Some(Identifier::from([7u8; 32])));
     }
@@ -1439,7 +1465,7 @@ mod tests {
             locked: true,
             ..Default::default()
         };
-        let cn = stored.to_contested_name(Network::Testnet);
+        let cn = stored.to_contested_name(Duration::from_secs(45 * 60));
         assert_eq!(cn.state, ContestState::Locked);
         assert!(cn.awarded_to.is_none());
     }
@@ -1455,7 +1481,7 @@ mod tests {
             ..Default::default()
         };
         assert_eq!(
-            stored.to_contested_name(Network::Testnet).state,
+            stored.to_contested_name(Duration::from_secs(45 * 60)).state,
             ContestState::Locked
         );
     }
@@ -1469,7 +1495,7 @@ mod tests {
             contestants: vec![contestant(1, None), contestant(2, None)],
             ..Default::default()
         };
-        let cn = stored.to_contested_name(Network::Testnet);
+        let cn = stored.to_contested_name(Duration::from_secs(45 * 60));
         assert_eq!(cn.state, ContestState::Unknown);
         assert_eq!(cn.contestants.as_ref().map(Vec::len), Some(2));
     }
@@ -1482,7 +1508,7 @@ mod tests {
             contestants: vec![contestant(3, Some(100))],
             ..Default::default()
         };
-        let cn = stored.to_contested_name(Network::Testnet);
+        let cn = stored.to_contested_name(Duration::from_secs(45 * 60));
         let mapped = &cn.contestants.unwrap()[0];
         assert_eq!(mapped.id, Identifier::from([3u8; 32]));
         assert_eq!(mapped.name, "name-3");
@@ -1685,8 +1711,8 @@ mod tests {
         use dash_sdk::dpp::block::block_info::BlockInfo;
         use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
         let (_temp_dir, context, _history) = cold_history(3);
-        let document_type = context
-            .dpns_contract
+        let dpns_contract = context.dpns_contract();
+        let document_type = dpns_contract
             .document_type_for_name("domain")
             .expect("domain document type");
         let answer = |winner| Contenders {
diff --git a/src/context/contract_token_db.rs b/src/context/contract_token_db.rs
index 2bb044e63..de2235710 100644
--- a/src/context/contract_token_db.rs
+++ b/src/context/contract_token_db.rs
@@ -69,6 +69,26 @@ fn untracked_token_prefix(token_id: &Identifier) -> String {
     )
 }
 
+/// Key prefix for the once-per-identity claim hint of one token, filed under
+/// the claiming identity's [`DetScope::Identity`] scope (so it goes with the
+/// identity). The full key is `det:token_once_claimed:v1:<token_id_base58>`;
+/// the value is the time of the claim in milliseconds (the block time of the
+/// proved claim document, or the local clock when it carries none).
+///
+/// An advisory hint, not an authority: Platform offers no proved query for
+/// "has this identity claimed", so DET records only the claims it saw succeed
+/// (proof-backed), never a node's unproven "already claimed" refusal. The UI
+/// warns with it but still lets the user claim, and the user can dismiss it.
+const ONCE_PER_IDENTITY_CLAIM_PREFIX: &str = "det:token_once_claimed:v1:";
+
+fn once_per_identity_claim_key(token_id: &Identifier) -> String {
+    format!(
+        "{}{}",
+        ONCE_PER_IDENTITY_CLAIM_PREFIX,
+        token_id.to_string(Encoding::Base58)
+    )
+}
+
 fn contract_key(contract_id: &Identifier) -> String {
     format!(
         "{}{}",
@@ -130,11 +150,11 @@ impl AppContext {
 
         // Pin the system contracts at the head of the list, in display order.
         let system_contracts = [
-            (&self.dpns_contract, "dpns"),
-            (&self.token_history_contract, "token_history"),
-            (&self.withdraws_contract, "withdrawals"),
-            (&self.keyword_search_contract, "keyword_search"),
-            (&self.dashpay_contract, "dashpay"),
+            (self.dpns_contract(), "dpns"),
+            (self.token_history_contract(), "token_history"),
+            (self.withdraws_contract(), "withdrawals"),
+            (self.keyword_search_contract(), "keyword_search"),
+            (self.dashpay_contract(), "dashpay"),
         ];
         for (index, (contract, alias)) in system_contracts.into_iter().enumerate() {
             contracts.insert(
@@ -425,6 +445,37 @@ impl AppContext {
         Ok(())
     }
 
+    /// When `identity_id` took its once-per-identity claim of `token_id`, as
+    /// far as this device knows (see [`ONCE_PER_IDENTITY_CLAIM_PREFIX`]).
+    pub fn once_per_identity_claimed_at(
+        &self,
+        token_id: &Identifier,
+        identity_id: &Identifier,
+    ) -> std::result::Result<Option<u64>, TaskError> {
+        once_per_identity_claimed_at_in(&self.det_kv()?, token_id, identity_id)
+    }
+
+    /// Remember that `identity_id` took its once-per-identity claim of
+    /// `token_id` at `claimed_at_ms`. Idempotent.
+    pub fn record_once_per_identity_claim(
+        &self,
+        token_id: &Identifier,
+        identity_id: &Identifier,
+        claimed_at_ms: u64,
+    ) -> std::result::Result<(), TaskError> {
+        record_once_per_identity_claim_in(&self.det_kv()?, token_id, identity_id, claimed_at_ms)
+    }
+
+    /// Forget the once-per-identity claim hint of `identity_id` for
+    /// `token_id` (the user dismissed it). Idempotent.
+    pub fn clear_once_per_identity_claim(
+        &self,
+        token_id: &Identifier,
+        identity_id: &Identifier,
+    ) -> std::result::Result<(), TaskError> {
+        clear_once_per_identity_claim_in(&self.det_kv()?, token_id, identity_id)
+    }
+
     /// Every identity-token pair the user stopped tracking.
     pub fn untracked_token_balances(
         &self,
@@ -757,6 +808,49 @@ fn parse_untracked_key(key: &str) -> Option<IdentityTokenIdentifier> {
     })
 }
 
+/// When `identity_id` took its once-per-identity claim of `token_id`, as
+/// recorded on this device.
+fn once_per_identity_claimed_at_in(
+    kv: &DetKv,
+    token_id: &Identifier,
+    identity_id: &Identifier,
+) -> std::result::Result<Option<u64>, TaskError> {
+    let identity = identity_id.to_buffer();
+    kv.get(
+        DetScope::Identity(&identity),
+        &once_per_identity_claim_key(token_id),
+    )
+    .map_err(token_err)
+}
+
+fn record_once_per_identity_claim_in(
+    kv: &DetKv,
+    token_id: &Identifier,
+    identity_id: &Identifier,
+    claimed_at_ms: u64,
+) -> std::result::Result<(), TaskError> {
+    let identity = identity_id.to_buffer();
+    kv.put(
+        DetScope::Identity(&identity),
+        &once_per_identity_claim_key(token_id),
+        &claimed_at_ms,
+    )
+    .map_err(token_err)
+}
+
+fn clear_once_per_identity_claim_in(
+    kv: &DetKv,
+    token_id: &Identifier,
+    identity_id: &Identifier,
+) -> std::result::Result<(), TaskError> {
+    let identity = identity_id.to_buffer();
+    kv.delete(
+        DetScope::Identity(&identity),
+        &once_per_identity_claim_key(token_id),
+    )
+    .map_err(token_err)
+}
+
 /// Dismiss one pair. A single upsert of that pair's marker — idempotent, and
 /// independent of every other pair's marker.
 fn mark_untracked_in(
@@ -854,6 +948,7 @@ where
 mod tests {
     use super::*;
     use crate::wallet_backend::kv_test_support::{InMemoryKv, StallingReadKv};
+    use dash_sdk::dpp::version::PlatformVersion;
     use platform_wallet_storage::{KvError, KvStore, ObjectId};
     use std::sync::{Arc, Mutex};
 
@@ -865,6 +960,63 @@ mod tests {
         Identifier::from([b; 32])
     }
 
+    /// The once-per-identity claim hint is per (identity, token) and holds
+    /// the claim time.
+    #[test]
+    fn once_per_identity_claim_hint_is_per_identity_and_token() {
+        let kv = empty_kv();
+        let (token, other_token) = (ident(1), ident(2));
+        let (identity, other_identity) = (ident(3), ident(4));
+
+        assert_eq!(
+            once_per_identity_claimed_at_in(&kv, &token, &identity).unwrap(),
+            None
+        );
+        record_once_per_identity_claim_in(&kv, &token, &identity, 42).unwrap();
+        clear_once_per_identity_claim_in(&kv, &token, &identity).unwrap();
+        assert_eq!(
+            once_per_identity_claimed_at_in(&kv, &token, &identity).unwrap(),
+            None,
+            "a dismissed hint is gone"
+        );
+        record_once_per_identity_claim_in(&kv, &token, &identity, 42).unwrap();
+        assert_eq!(
+            once_per_identity_claimed_at_in(&kv, &token, &identity).unwrap(),
+            Some(42)
+        );
+        assert_eq!(
+            once_per_identity_claimed_at_in(&kv, &other_token, &identity).unwrap(),
+            None
+        );
+        assert_eq!(
+            once_per_identity_claimed_at_in(&kv, &token, &other_identity).unwrap(),
+            None
+        );
+    }
+
+    /// Stored token configurations are bincode blobs; version 0 distribution
+    /// rules (every token before protocol version 14) keep decoding as version
+    /// 0, and version 1 rules (a once-per-identity distribution) round-trip.
+    #[test]
+    fn stored_token_configs_with_either_rules_version_round_trip() {
+        use crate::model::token::distribution_rules_with_once_per_identity;
+        use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+        use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::TokenDistributionRules;
+
+        let v0_config = TokenConfigurationV0::default_most_restrictive();
+        let TokenDistributionRules::V0(rules) = v0_config.distribution_rules.clone() else {
+            panic!("the default rules are version 0");
+        };
+        let mut v1_config = v0_config.clone();
+        v1_config.distribution_rules = distribution_rules_with_once_per_identity(rules, Some(7));
+
+        for config in [v0_config, v1_config] {
+            let config = TokenConfiguration::V0(config);
+            let bytes = bincode::encode_to_vec(&config, config::standard()).unwrap();
+            assert_eq!(decode_token_config(&bytes).unwrap(), config);
+        }
+    }
+
     fn stored_token(alias: &str, contract: u8, position: u16) -> StoredToken {
         StoredToken {
             config_bytes: vec![0xAB, 0xCD, 0xEF],
@@ -926,6 +1078,159 @@ mod tests {
         assert_eq!(decoded, token);
     }
 
+    /// A user contract as DET builds one at `platform_version`: a document
+    /// type with a unique index (charging `action_fees`, if given), and a token.
+    fn user_contract_at(
+        platform_version: &PlatformVersion,
+        action_fees: Option<dash_sdk::dpp::platform_value::Value>,
+    ) -> DataContract {
+        use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+        use dash_sdk::dpp::data_contract::config::DataContractConfig;
+        use dash_sdk::dpp::data_contract::document_type::DocumentType;
+        use dash_sdk::dpp::data_contract::v1::DataContractV1;
+        use dash_sdk::dpp::platform_value::platform_value;
+        use std::collections::BTreeMap;
+
+        let id = ident(8);
+        let config = DataContractConfig::default_for_version(platform_version).expect("config");
+        let mut schema = platform_value!({
+            "type": "object",
+            "properties": {"name": {"type": "string", "position": 0, "maxLength": 63_u32}},
+            "required": ["name"],
+            "indices": [{"name": "byName", "properties": [{"name": "asc"}], "unique": true}],
+            "additionalProperties": false,
+        });
+        if let Some(action_fees) = action_fees {
+            schema
+                .insert("actionFees".to_string(), action_fees)
+                .expect("a map schema");
+        }
+        let note = DocumentType::try_from_schema(
+            id,
+            1,
+            config.version(),
+            "note",
+            schema,
+            None,
+            &BTreeMap::new(),
+            &config,
+            true,
+            &mut Vec::new(),
+            platform_version,
+        )
+        .expect("document type");
+        DataContract::V1(DataContractV1 {
+            id,
+            version: 1,
+            owner_id: ident(7),
+            document_types: BTreeMap::from([("note".to_string(), note)]),
+            config,
+            schema_defs: None,
+            groups: BTreeMap::new(),
+            tokens: BTreeMap::from([(
+                0,
+                TokenConfiguration::V0(TokenConfigurationV0::default_most_restrictive()),
+            )]),
+            keywords: vec![],
+            created_at: None,
+            updated_at: None,
+            created_at_block_height: None,
+            updated_at_block_height: None,
+            created_at_epoch: None,
+            updated_at_epoch: None,
+            description: None,
+        })
+    }
+
+    /// The contracts a user may hold locally, encoded as DET encodes them at
+    /// `protocol_version`.
+    fn stored_contracts_at(protocol_version: u32) -> Vec<(DataContract, StoredContract)> {
+        use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+
+        let pv = PlatformVersion::get(protocol_version).expect("known version");
+        [
+            user_contract_at(pv, None),
+            load_system_data_contract(SystemDataContract::DPNS, pv).expect("dpns"),
+            load_system_data_contract(SystemDataContract::Dashpay, pv).expect("dashpay"),
+            load_system_data_contract(SystemDataContract::TokenHistory, pv).expect("history"),
+        ]
+        .into_iter()
+        .map(|contract| {
+            let stored = StoredContract {
+                contract_bytes: contract
+                    .serialize_to_bytes_with_platform_version(pv)
+                    .expect("encode"),
+                alias: Some("saved".to_string()),
+            };
+            (contract, stored)
+        })
+        .collect()
+    }
+
+    /// Contracts saved while DET built at protocol 12 still load, unchanged,
+    /// once DET builds at the network's 13 or 14.
+    #[test]
+    fn contracts_stored_at_protocol_12_decode_at_13_and_14() {
+        let v12 = PlatformVersion::get(12).expect("v12");
+        let tmp = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(tmp.path());
+        for version in [13, 14] {
+            crate::context::test_support::set_sdk_protocol_version(&ctx, version);
+            for (original, stored) in stored_contracts_at(12) {
+                let bytes = stored.contract_bytes.clone();
+                let decoded = ctx
+                    .decode_stored_contract(stored)
+                    .unwrap_or_else(|e| panic!("protocol {version}: {e:?}"));
+                assert_eq!(decoded.alias.as_deref(), Some("saved"));
+                assert_eq!(decoded.contract.id(), original.id());
+                assert_eq!(
+                    decoded
+                        .contract
+                        .serialize_to_bytes_with_platform_version(v12)
+                        .expect("re-encode"),
+                    bytes,
+                    "protocol {version}: contract {} lost data",
+                    original.id()
+                );
+            }
+        }
+    }
+
+    /// A contract saved at protocol 14 and read back while DET still builds at
+    /// 13 (after a restart, before the first proven response) decodes without
+    /// error. Protocol 14 features (here `actionFees`) are not parsed at 13,
+    /// but the saved bytes are untouched and decode in full once DET builds at
+    /// 14 again.
+    #[test]
+    fn contracts_stored_at_protocol_14_decode_at_13_and_recover_at_14() {
+        use dash_sdk::dpp::platform_value::platform_value;
+
+        let tmp = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(tmp.path());
+        crate::context::test_support::set_sdk_protocol_version(&ctx, 13);
+        for (original, stored) in stored_contracts_at(14) {
+            let decoded = ctx
+                .decode_stored_contract(stored)
+                .unwrap_or_else(|e| panic!("contract {}: {e:?}", original.id()));
+            assert_eq!(decoded.contract, original);
+        }
+
+        let v14 = PlatformVersion::get(14).expect("v14");
+        let charging = user_contract_at(v14, Some(platform_value!({"create": {"owner": 5_u64}})));
+        let stored = || StoredContract {
+            contract_bytes: charging
+                .serialize_to_bytes_with_platform_version(v14)
+                .expect("encode"),
+            alias: None,
+        };
+        let at_13 = ctx.decode_stored_contract(stored()).expect("decodes at 13");
+        assert_eq!(at_13.contract.id(), charging.id());
+
+        crate::context::test_support::set_sdk_protocol_version(&ctx, 14);
+        let at_14 = ctx.decode_stored_contract(stored()).expect("decodes at 14");
+        assert_eq!(at_14.contract, charging);
+    }
+
     #[test]
     fn contract_keys_carry_a_base58_suffix_that_round_trips_to_the_id() {
         let contract = ident(6);
diff --git a/src/context/dpns_vote_state.rs b/src/context/dpns_vote_state.rs
index 5fe5f8dbc..2da1d94da 100644
--- a/src/context/dpns_vote_state.rs
+++ b/src/context/dpns_vote_state.rs
@@ -333,7 +333,7 @@ impl AppContext {
 
     /// Build the exact Platform vote-poll ID for one DPNS label.
     pub fn dpns_vote_poll_id(&self, name: &str) -> Result<Identifier, TaskError> {
-        dpns_vote_poll(&self.dpns_contract, name)?
+        dpns_vote_poll(&self.dpns_contract(), name)?
             .unique_id()
             .map_err(|source| TaskError::SdkError {
                 source_error: Box::new(dash_sdk::Error::Protocol(source)),
diff --git a/src/context/feature_gate.rs b/src/context/feature_gate.rs
index 51d0e8eea..3d42b6aa3 100644
--- a/src/context/feature_gate.rs
+++ b/src/context/feature_gate.rs
@@ -1,6 +1,11 @@
 use crate::context::AppContext;
 use crate::model::user_role::UserRole;
-use dash_sdk::dpp::version::feature_initial_protocol_versions::SHIELDED_POOL_INITIAL_PROTOCOL_VERSION;
+use dash_sdk::dpp::version::PlatformVersion;
+use dash_sdk::dpp::version::feature_initial_protocol_versions::{
+    CONTRACT_FEE_CLAIM_INITIAL_PROTOCOL_VERSION,
+    IDENTITY_KEY_LIMITS_UPDATE_INITIAL_PROTOCOL_VERSION, SHIELDED_POOL_INITIAL_PROTOCOL_VERSION,
+};
+use dash_sdk::dpp::version::v14::PROTOCOL_VERSION_14;
 
 /// Shielded state transitions activate at upstream rs-platform-version's
 /// [`SHIELDED_POOL_INITIAL_PROTOCOL_VERSION`] (protocol v12), sourced directly
@@ -11,6 +16,22 @@ use dash_sdk::dpp::version::feature_initial_protocol_versions::SHIELDED_POOL_INI
 const SHIELDED_ACTIVATION_PROTOCOL_VERSION: Option<u32> =
     Some(SHIELDED_POOL_INITIAL_PROTOCOL_VERSION);
 
+/// Authentication keys with a budget or an expiry, and the
+/// `IdentityKeyLimitsUpdate` transition that raises them, activate together at
+/// upstream's [`IDENTITY_KEY_LIMITS_UPDATE_INITIAL_PROTOCOL_VERSION`].
+const KEY_LIMITS_ACTIVATION_PROTOCOL_VERSION: u32 =
+    IDENTITY_KEY_LIMITS_UPDATE_INITIAL_PROTOCOL_VERSION;
+
+/// Version 1 token distribution rules (the once-per-identity distribution)
+/// are accepted from protocol version 14. Upstream names no feature constant
+/// for it, so the protocol version it shipped in is used directly.
+const ONCE_PER_IDENTITY_DISTRIBUTION_ACTIVATION_PROTOCOL_VERSION: u32 = PROTOCOL_VERSION_14;
+
+/// The contract bounds validation version (upstream
+/// `validate_identity_public_key_contract_bounds`) from which AUTHENTICATION
+/// keys below MASTER may be bound to a contract or a document type.
+const CONTRACT_BOUND_AUTHENTICATION_KEYS_VALIDATION_VERSION: u16 = 2;
+
 /// A runtime capability of the connected platform, evaluated against the live
 /// context. Independent of the user's role — it answers "does the connected
 /// network support this?", not "which role has the user selected?".
@@ -26,6 +47,37 @@ pub enum Capability {
     /// transitions (shield, shielded transfer, unshield, shield from asset
     /// lock, shielded withdrawal).
     ShieldedProtocol,
+    /// The connected platform accepts authentication keys with a budget or an
+    /// expiry, and the transition that raises them.
+    IdentityKeyLimits,
+    /// The connected platform accepts tokens with a once-per-identity
+    /// distribution.
+    OncePerIdentityDistribution,
+    /// The connected platform keeps contract fee pots (filled by document
+    /// action fees) and accepts the transition that pays them out.
+    ContractFeePots,
+    /// The connected platform accepts AUTHENTICATION keys below MASTER bound
+    /// to a contract or a document type (contract bounds validation v2).
+    ContractBoundAuthenticationKeys,
+    /// The connected platform accepts version 1 token configurations, which
+    /// can make a token non-transferable.
+    NonTransferableTokens,
+}
+
+/// The connected network's protocol version, when this build defines it.
+///
+/// `None` before the version is fetched (0) and for a version newer than any
+/// this build knows, which a proved epoch can report after a network upgrade.
+/// Every capability reads the version through this, so both fail closed: this
+/// build cannot tell what an unknown version's rules allow.
+fn known_protocol_version(ctx: &AppContext) -> Option<&'static PlatformVersion> {
+    PlatformVersion::get_optional(ctx.platform_protocol_version())
+}
+
+/// Whether the connected protocol version is one this build defines and is
+/// at least `activation`.
+fn known_protocol_version_at_least(ctx: &AppContext, activation: u32) -> bool {
+    known_protocol_version(ctx).is_some_and(|version| version.protocol_version >= activation)
 }
 
 impl Capability {
@@ -35,11 +87,45 @@ impl Capability {
                 // A closed gate makes the capability unavailable on every network.
                 None => false,
                 // The version fetched from the connected network, not the hardcoded
-                // default — the capability is per-network. The boot value (0, "not
-                // fetched yet") is below any activation version, so a network whose
-                // version is not known yet reads as unmet rather than optimistic.
-                Some(activation) => ctx.platform_protocol_version() >= activation,
+                // default — the capability is per-network.
+                Some(activation) => known_protocol_version_at_least(ctx, activation),
             },
+            Capability::IdentityKeyLimits => {
+                known_protocol_version_at_least(ctx, KEY_LIMITS_ACTIVATION_PROTOCOL_VERSION)
+            }
+            Capability::OncePerIdentityDistribution => known_protocol_version_at_least(
+                ctx,
+                ONCE_PER_IDENTITY_DISTRIBUTION_ACTIVATION_PROTOCOL_VERSION,
+            ),
+            Capability::ContractFeePots => {
+                known_protocol_version_at_least(ctx, CONTRACT_FEE_CLAIM_INITIAL_PROTOCOL_VERSION)
+            }
+            // Upstream names no feature constant; the validation version that
+            // admits bound authentication keys is the source of truth.
+            Capability::ContractBoundAuthenticationKeys => {
+                known_protocol_version(ctx).is_some_and(|version| {
+                    version
+                        .drive_abci
+                        .validation_and_processing
+                        .state_transitions
+                        .common_validation_methods
+                        .validate_identity_public_key_contract_bounds
+                        >= CONTRACT_BOUND_AUTHENTICATION_KEYS_VALIDATION_VERSION
+                })
+            }
+            // Upstream names no feature constant either; the newest token
+            // configuration format the version decodes is the source of truth.
+            Capability::NonTransferableTokens => {
+                known_protocol_version(ctx).is_some_and(|version| {
+                    version
+                        .dpp
+                        .contract_versions
+                        .token_versions
+                        .token_configuration_format
+                        .max_version
+                        >= 1
+                })
+            }
         }
     }
 }
@@ -135,6 +221,22 @@ pub enum FeatureGate {
     /// Gated at [`UserRole::Developer`]; the successor to the old overloaded
     /// developer-mode flag, which conflated this tier with Power-role disclosure.
     DeveloperTools,
+    /// Adding a key with a budget or an expiry, and raising those limits.
+    /// Offered only where the connected network accepts them.
+    IdentityKeyLimits,
+    /// Creating a token with a once-per-identity distribution. Offered only
+    /// where the connected network accepts it; claiming from an existing one
+    /// needs no gate, since such a token can only exist on such a network.
+    TokenOncePerIdentityDistribution,
+    /// Viewing and claiming the fee pots of a contract. Offered only where
+    /// the connected network keeps them.
+    ContractFeePots,
+    /// Adding an AUTHENTICATION key bound to a contract or a document type.
+    /// Offered only where the connected network accepts one.
+    ContractBoundAuthenticationKeys,
+    /// Creating a token that holders cannot transfer. Offered only where the
+    /// connected network accepts one.
+    NonTransferableTokens,
 }
 
 impl FeatureGate {
@@ -151,6 +253,17 @@ impl FeatureGate {
             FeatureGate::DashPayOperations => &[Check::Experimental(ExperimentalFeature::DashPay)],
             FeatureGate::Masternodes => &[Check::MinRole(UserRole::Power)],
             FeatureGate::DeveloperTools => &[Check::MinRole(UserRole::Developer)],
+            FeatureGate::IdentityKeyLimits => &[Check::Capability(Capability::IdentityKeyLimits)],
+            FeatureGate::TokenOncePerIdentityDistribution => {
+                &[Check::Capability(Capability::OncePerIdentityDistribution)]
+            }
+            FeatureGate::ContractFeePots => &[Check::Capability(Capability::ContractFeePots)],
+            FeatureGate::ContractBoundAuthenticationKeys => &[Check::Capability(
+                Capability::ContractBoundAuthenticationKeys,
+            )],
+            FeatureGate::NonTransferableTokens => {
+                &[Check::Capability(Capability::NonTransferableTokens)]
+            }
         }
     }
 
@@ -419,4 +532,61 @@ mod tests {
             );
         }
     }
+
+    /// Protocol version 14 features stay closed below version 14 and before
+    /// the network's version is known, whatever the role.
+    #[test]
+    fn protocol_v14_gates_follow_the_connected_version() {
+        for role in ROLES {
+            let (_tmp, ctx) = ctx_with_role(role);
+            for gate in [
+                FeatureGate::IdentityKeyLimits,
+                FeatureGate::TokenOncePerIdentityDistribution,
+                FeatureGate::ContractFeePots,
+                FeatureGate::ContractBoundAuthenticationKeys,
+                FeatureGate::NonTransferableTokens,
+            ] {
+                assert!(!gate.is_available(&ctx), "{gate:?} closed at boot");
+                ctx.set_platform_protocol_version(13);
+                assert!(!gate.is_available(&ctx), "{gate:?} closed on protocol 13");
+                ctx.set_platform_protocol_version(14);
+                assert!(gate.is_available(&ctx), "{gate:?} open on protocol 14");
+                ctx.set_platform_protocol_version(0);
+            }
+        }
+    }
+
+    /// A protocol version this build does not define closes every protocol
+    /// capability: nothing here knows that version's rules. The newest
+    /// version this build defines keeps them open.
+    #[test]
+    fn an_unknown_future_protocol_version_closes_every_protocol_capability() {
+        use dash_sdk::dpp::version::LATEST_VERSION;
+        let (_tmp, ctx) = ctx_with_role(UserRole::Developer);
+        let capabilities = [
+            Capability::ShieldedProtocol,
+            Capability::IdentityKeyLimits,
+            Capability::OncePerIdentityDistribution,
+            Capability::ContractFeePots,
+            Capability::ContractBoundAuthenticationKeys,
+            Capability::NonTransferableTokens,
+        ];
+
+        ctx.set_platform_protocol_version(LATEST_VERSION);
+        for capability in capabilities {
+            assert!(
+                capability.is_met(&ctx),
+                "{capability:?} on protocol {LATEST_VERSION}"
+            );
+        }
+
+        ctx.set_platform_protocol_version(LATEST_VERSION + 1);
+        for capability in capabilities {
+            assert!(
+                !capability.is_met(&ctx),
+                "{capability:?} on unknown protocol {}",
+                LATEST_VERSION + 1
+            );
+        }
+    }
 }
diff --git a/src/context/fixtures/platform_v13_client_tables.txt b/src/context/fixtures/platform_v13_client_tables.txt
new file mode 100644
index 000000000..219368253
--- /dev/null
+++ b/src/context/fixtures/platform_v13_client_tables.txt
@@ -0,0 +1,798 @@
+protocol_version: 13
+dpp: DPPVersion {
+    costs: DPPCostsVersions {
+        signature_verify: 0,
+    },
+    validation: DPPValidationVersions {
+        json_schema_validator: JsonSchemaValidatorVersions {
+            new: 0,
+            validate: 0,
+            compile: 0,
+            compile_and_validate: 0,
+        },
+        data_contract: DataContractValidationVersions {
+            validate: 0,
+            validate_config_update: 1,
+            validate_token_config_update: 0,
+            validate_index_definitions: 0,
+            validate_index_naming_duplicates: 0,
+            validate_not_defined_properties: 0,
+            validate_property_definition: 0,
+            validate_token_config_groups_exist: 1,
+            validate_localizations: 0,
+            validate_once_per_identity_distribution: None,
+        },
+        document_type: DocumentTypeValidationVersions {
+            validate_update: 0,
+            unique_index_limit: 10,
+            contested_index_limit: 1,
+        },
+        voting: VotingValidationVersions {
+            allow_other_contenders_time_mainnet_ms: 604800000,
+            allow_other_contenders_time_testing_ms: 2700000,
+            votes_allowed_per_masternode: 5,
+        },
+        validation_result: ValidationResultMethodVersions {
+            flatten: 1,
+            merge_many: 1,
+        },
+    },
+    state_transition_serialization_versions: DPPStateTransitionSerializationVersions {
+        identity_public_key_in_creation: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_create_from_addresses_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_create_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_update_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_key_limits_update_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_top_up_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_top_up_from_addresses_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_credit_withdrawal_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_credit_transfer_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_credit_transfer_to_addresses_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        masternode_vote_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        contract_create_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        contract_update_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        contract_user_moderation_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        contract_fee_claim_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        batch_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 1,
+            default_current_version: 1,
+        },
+        document_base_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 1,
+        },
+        document_create_state_transition: DocumentFeatureVersionBounds {
+            bounds: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+        document_replace_state_transition: DocumentFeatureVersionBounds {
+            bounds: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+        document_delete_state_transition: DocumentFeatureVersionBounds {
+            bounds: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+        document_index_only_delete_state_transition: None,
+        document_transfer_state_transition: DocumentFeatureVersionBounds {
+            bounds: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+        document_update_price_state_transition: DocumentFeatureVersionBounds {
+            bounds: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+        document_purchase_state_transition: DocumentFeatureVersionBounds {
+            bounds: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+        address_funds_transfer_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        address_funding_from_asset_lock_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        address_credit_withdrawal_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        shield_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        shielded_transfer_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        unshield_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        shield_from_asset_lock_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        shielded_withdrawal_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_create_from_shielded_pool_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        shield_from_identity_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        identity_top_up_from_shielded_pool_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        token_shielded_transfer_with_shielded_fee_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        token_unshield_with_shielded_fee_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        token_purchase_from_shielded_pool_state_transition: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+    },
+    state_transition_conversion_versions: DPPStateTransitionConversionVersions {
+        identity_to_identity_create_transition: 0,
+        identity_to_identity_top_up_transition: 0,
+        identity_to_identity_transfer_transition: 0,
+        identity_to_identity_withdrawal_transition: 1,
+        identity_to_identity_create_transition_with_signer: 0,
+        inputs_to_identity_create_from_addresses_transition_with_signer: 0,
+        address_funds_to_address_funds_transfer_transition: 0,
+        identity_to_identity_top_up_from_addresses_transition: 0,
+        address_funding_from_asset_lock_transition: 0,
+    },
+    state_transition_method_versions: DPPStateTransitionMethodVersions {
+        public_key_in_creation_methods: PublicKeyInCreationMethodVersions {
+            from_public_key_signed_with_private_key: 0,
+            from_public_key_signed_external: 0,
+            hash: 0,
+            duplicated_key_ids_witness: 0,
+            duplicated_keys_witness: 0,
+            validate_identity_public_keys_structure: 0,
+        },
+        verify_identity_signed_signature: 0,
+    },
+    state_transitions: DPPStateTransitionVersions {
+        documents: DocumentTransitionVersions {
+            documents_batch_transition: DocumentsBatchTransitionVersions {
+                validation: DocumentsBatchTransitionValidationVersions {
+                    find_duplicates_by_id: 0,
+                    validate_base_structure: 0,
+                },
+            },
+        },
+        identities: IdentityTransitionVersions {
+            max_public_keys_in_creation: 6,
+            asset_locks: IdentityTransitionAssetLockVersions {
+                required_asset_lock_duff_balance_for_processing_start_for_identity_create: 200000,
+                required_asset_lock_duff_balance_for_processing_start_for_identity_top_up: 50000,
+                required_asset_lock_duff_balance_for_processing_start_for_address_funding: 50000,
+                validate_asset_lock_transaction_structure: 0,
+                validate_instant_asset_lock_proof_structure: 0,
+                max_asset_lock_transaction_inputs: 100,
+            },
+            credit_withdrawal: IdentityCreditWithdrawalTransitionVersions {
+                default_constructor: 1,
+            },
+            calculate_min_required_fee_on_identity_create_transition: 1,
+            calculate_min_required_fee_on_identity_top_up_transition: 1,
+        },
+        contract: ContractTransitionVersions {
+            contract_create_transition_default_version: 0,
+            contract_update_transition_default_version: 0,
+        },
+        address_funds: AddressFundsTransitionVersions {
+            address_funds_transition_default_version: 0,
+            credit_withdrawal: 0,
+            validate_credit_withdrawal_structure: 0,
+            min_output_amount: 500000,
+            min_input_amount: 100000,
+            min_identity_funding_amount: 200000,
+        },
+        shielded: ShieldedTransitionVersions {
+            validate_withdrawal_structure: 0,
+        },
+        max_address_inputs: 16,
+        max_address_outputs: 128,
+        max_address_fee_strategies: 4,
+    },
+    contract_versions: DPPContractVersions {
+        max_serialized_size: 65000,
+        contract_serialization_version: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 1,
+            default_current_version: 1,
+        },
+        contract_structure_version: 1,
+        created_data_contract_structure: 0,
+        config: FeatureVersionBounds {
+            min_version: 1,
+            max_version: 1,
+            default_current_version: 1,
+        },
+        methods: DataContractMethodVersions {
+            validate_document: 0,
+            validate_update: 0,
+            schema: 0,
+            validate_groups: 0,
+            validate_moderation_config: 0,
+            equal_ignoring_time_fields: 0,
+            registration_cost: 1,
+        },
+        document_type_versions: DocumentTypeVersions {
+            index_versions: DocumentTypeIndexVersions {
+                index_levels_from_indices: 0,
+            },
+            class_method_versions: DocumentTypeClassMethodVersions {
+                try_from_schema: 2,
+                create_document_types_from_document_schemas: 1,
+            },
+            structure_version: 0,
+            schema: DocumentTypeSchemaVersions {
+                document_type_schema: 2,
+                should_add_creator_id: 1,
+                enrich_with_base_schema: 1,
+                find_identifier_and_binary_paths: 0,
+                apply_property_reference: None,
+                apply_required_since: None,
+                apply_distinct_from: None,
+                apply_encrypted_for: None,
+                apply_max_bytes: None,
+                parse_typed_array: None,
+                parse_property_constraints: None,
+                apply_generated_from: None,
+                expand_property_type_shorthands: None,
+                validate_max_depth: 0,
+                max_depth: 256,
+                recursive_schema_validator_versions: RecursiveSchemaValidatorVersions {
+                    traversal_validator: 0,
+                },
+                validate_schema_compatibility: 0,
+            },
+            methods: DocumentTypeMethodVersions {
+                create_document_from_data: 0,
+                create_document_with_prevalidated_properties: 0,
+                prefunded_voting_balance_for_document: 0,
+                contested_vote_poll_for_document: 0,
+                estimated_size: 0,
+                index_for_types: 0,
+                max_size: 0,
+                serialize_value_for_key: 0,
+                deserialize_value_for_key: 0,
+                validate_distinct_from: None,
+                validate_encrypted_property_shapes: None,
+                validate_max_bytes: None,
+                validate_property_constraints: None,
+                canonical_contested_index_values: None,
+                fill_generated_properties: None,
+                validate_generated_from: None,
+            },
+        },
+        token_versions: TokenVersions {
+            validate_structure_interval: 0,
+            validate_pre_programmed_distribution_amounts: 0,
+            token_configuration_format: FeatureVersionBounds {
+                min_version: 0,
+                max_version: 0,
+                default_current_version: 0,
+            },
+        },
+    },
+    document_versions: DPPDocumentVersions {
+        document_structure_version: 0,
+        document_serialization_version: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 2,
+            default_current_version: 2,
+        },
+        document_cbor_serialization_version: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        extended_document_structure_version: 0,
+        extended_document_serialization_version: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+        document_method_versions: DocumentMethodVersions {
+            is_equal_ignoring_timestamps: 0,
+            hash: 0,
+            get_raw_for_contract: 0,
+            get_raw_for_document_type: 0,
+            try_into_asset_unlock_base_transaction_info: 0,
+            generate_document_id: 0,
+            get_raw_array_elements_for_document_type: None,
+        },
+    },
+    identity_versions: DPPIdentityVersions {
+        identity_structure_version: 0,
+        identity_key_structure_version: 0,
+        identity_key_type_method_versions: IdentityKeyTypeMethodVersions {
+            random_public_key_data: 0,
+            random_public_and_private_key_data: 0,
+        },
+    },
+    voting_versions: DPPVotingVersions {
+        default_vote_poll_time_duration_mainnet_ms: 1209600000,
+        default_vote_poll_time_duration_test_network_ms: 5400000,
+        contested_document_vote_poll_stored_info_version: 0,
+    },
+    token_versions: DPPTokenVersions {
+        identity_token_info_default_structure_version: 0,
+        identity_token_status_default_structure_version: 0,
+        token_contract_info_default_structure_version: 0,
+        token_config_update_action_id_version: 1,
+        token_set_price_action_id_version: 1,
+        distribution_function_evaluate_version: 0,
+        reward_distribution_max_cycle_moment_version: 0,
+        distribution_function_cycle_epochs_version: 0,
+    },
+    asset_lock_versions: DPPAssetLockVersions {
+        reduced_asset_lock_value: FeatureVersionBounds {
+            min_version: 0,
+            max_version: 0,
+            default_current_version: 0,
+        },
+    },
+    methods: DPPMethodVersions {
+        epoch_core_reward_credits_for_distribution: 0,
+        daily_withdrawal_limit: 1,
+        deduct_fee_from_outputs_or_remaining_balance_of_inputs: 0,
+        compute_minimum_shielded_fee: 0,
+        shielded_extra_sighash_data: 0,
+        core_credit_pool_unlock_limit: None,
+        credit_pool_bundle_binding: None,
+    },
+    factory_versions: DPPFactoryVersions {
+        data_contract_factory_structure_version: 0,
+        document_factory_structure_version: 0,
+    },
+}
+drive.methods.verify: DriveVerifyMethodVersions {
+    contract: DriveVerifyContractMethodVersions {
+        verify_contract: 0,
+        verify_contract_history: 0,
+        verify_contract_return_serialization: 0,
+        verify_contracts_by_range: 0,
+        verify_contracts_versions: 0,
+    },
+    document: DriveVerifyDocumentMethodVersions {
+        verify_proof: 0,
+        verify_proof_keep_serialized: 0,
+        verify_document_history: 0,
+        verify_start_at_document_in_proof: 0,
+    },
+    chained_document: DriveVerifyChainedDocumentMethodVersions {
+        verify_chained_documents_proof: 0,
+    },
+    composite_document: DriveVerifyCompositeDocumentMethodVersions {
+        verify_composite_documents_proof: 0,
+    },
+    document_count: DriveVerifyDocumentCountMethodVersions {
+        verify_aggregate_count_proof: 0,
+        verify_carrier_aggregate_count_proof: 0,
+        verify_distinct_count_proof: 0,
+        verify_point_lookup_count_proof: 0,
+        verify_primary_key_count_tree_proof: 0,
+    },
+    document_sum: DriveVerifyDocumentSumMethodVersions {
+        verify_aggregate_sum_proof: 0,
+        verify_carrier_aggregate_sum_proof: 0,
+        verify_carrier_aggregate_count_and_sum_proof: 0,
+        verify_aggregate_count_and_sum_proof: 0,
+        verify_primary_key_sum_tree_proof: 0,
+        verify_primary_key_count_sum_tree_proof: 0,
+        verify_point_lookup_sum_proof: 0,
+        verify_distinct_sum_proof: 0,
+        verify_distinct_count_and_sum_proof: 0,
+        verify_point_lookup_count_and_sum_proof: 0,
+    },
+    document_ranked: DriveVerifyDocumentRankedMethodVersions {
+        verify_ranked_top_k_proof: 0,
+        verify_having_range_proof: 0,
+    },
+    identity: DriveVerifyIdentityMethodVersions {
+        verify_full_identities_by_public_key_hashes: 0,
+        verify_full_identity_by_identity_id: 0,
+        verify_full_identity_by_public_key_hash: 0,
+        verify_identity_balance_for_identity_id: 0,
+        verify_identity_balances_for_identity_ids: 0,
+        verify_identity_balance_revision_and_addresses_from_inputs: 0,
+        verify_identity_id_by_unique_public_key_hash: 0,
+        verify_identity_ids_by_unique_public_key_hashes: 0,
+        verify_identity_keys_by_identity_id: 0,
+        verify_identity_nonce: 0,
+        verify_identity_contract_nonce: 0,
+        verify_identities_contract_keys: 0,
+        verify_identity_revision_for_identity_id: 0,
+        verify_full_identity_by_non_unique_public_key_hash: 0,
+        verify_full_identity_by_non_unique_public_key_hash_two_proofs: 0,
+        verify_identity_id_by_non_unique_public_key_hash: 0,
+        verify_identity_keys_remaining_budgets: 0,
+    },
+    group: DriveVerifyGroupMethodVersions {
+        verify_group_info: 0,
+        verify_group_infos_in_contract: 0,
+        verify_action_infos: 0,
+        verify_action_signers: 0,
+        verify_action_signers_total_power: 0,
+    },
+    contract_group: DriveVerifyContractGroupMethodVersions {
+        verify_contract_group_info: 0,
+        verify_contract_group_members: 0,
+        verify_contract_group_memberships_for_contract: 0,
+    },
+    contract_moderation: DriveVerifyContractModerationMethodVersions {
+        verify_contract_moderation_status: 0,
+        verify_contract_moderation_entries: 0,
+        verify_contract_fee_pots: 0,
+        verify_contract_document_removals: 0,
+        verify_contract_team_actions: 0,
+        verify_contract_team_action_signers: 0,
+        verify_contract_team_action_signature: 0,
+        verify_contract_moderation_action_counts: 0,
+    },
+    token: DriveVerifyTokenMethodVersions {
+        verify_token_balances_for_identity_ids: 0,
+        verify_token_balances_for_identity_id: 0,
+        verify_token_infos_for_identity_ids: 0,
+        verify_token_infos_for_identity_id: 0,
+        verify_token_statuses: 0,
+        verify_token_total_supply_and_aggregated_identity_balance: 0,
+        verify_token_balance_for_identity_id: 0,
+        verify_token_info_for_identity_id: 0,
+        verify_token_status: 0,
+        verify_token_pre_programmed_distributions: 0,
+        verify_token_direct_selling_price: 0,
+        verify_token_direct_selling_prices: 0,
+        verify_token_perpetual_distribution_last_paid_time: 0,
+        verify_token_contract_info: 0,
+    },
+    single_document: DriveVerifySingleDocumentMethodVersions {
+        verify_proof: 0,
+        verify_proof_keep_serialized: 0,
+    },
+    system: DriveVerifySystemMethodVersions {
+        verify_epoch_infos: 0,
+        verify_epoch_proposers: 0,
+        verify_elements: 0,
+        verify_total_credits_in_system: 0,
+        verify_upgrade_state: 0,
+        verify_upgrade_vote_status: 0,
+        verify_finalized_epoch_infos: 0,
+    },
+    voting: DriveVerifyVoteMethodVersions {
+        verify_masternode_vote: 0,
+        verify_vote_poll_votes_proof: 0,
+        verify_identity_votes_given_proof: 0,
+        verify_vote_poll_vote_state_proof: 0,
+        verify_contests_proof: 0,
+        verify_vote_polls_by_end_date_proof: 0,
+        verify_specialized_balance: 0,
+    },
+    address_funds: DriveVerifyAddressFundsMethodVersions {
+        verify_address_info: 0,
+        verify_addresses_infos: 0,
+        verify_address_funds_trunk_query: 0,
+        verify_address_funds_branch_query: 0,
+        verify_recent_address_balance_changes: 0,
+        verify_compacted_address_balance_changes: 1,
+    },
+    state_transition: DriveVerifyStateTransitionMethodVersions {
+        verify_state_transition_was_executed_with_proof: 0,
+    },
+    shielded: DriveVerifyShieldedMethodVersions {
+        verify_shielded_pool_state: 0,
+        verify_shielded_anchors: 0,
+        verify_most_recent_shielded_anchor: 0,
+        verify_shielded_encrypted_notes: 0,
+        verify_shielded_notes_count: 0,
+        verify_shielded_nullifiers: 0,
+    },
+}
+fee_version: FeeVersion {
+    fee_version_number: 1,
+    uses_version_fee_multiplier_permille: Some(
+        1000,
+    ),
+    storage: FeeStorageVersion {
+        storage_disk_usage_credit_per_byte: 27000,
+        storage_processing_credit_per_byte: 400,
+        storage_load_credit_per_byte: 20,
+        non_storage_load_credit_per_byte: 10,
+        storage_seek_cost: 2000,
+        ttl_ephemeral_disk_usage_credit_per_byte: 270,
+    },
+    signature: FeeSignatureVersion {
+        verify_signature_ecdsa_secp256k1: 15000,
+        verify_signature_bls12_381: 300000,
+        verify_signature_ecdsa_hash160: 15500,
+        verify_signature_bip13_script_hash: 300000,
+        verify_signature_eddsa25519_hash160: 3500,
+    },
+    hashing: FeeHashingVersion {
+        blake3_base: 100,
+        blake3_per_block: 300,
+        sha256_per_block: 5000,
+        sha256_ripe_md160_base: 6000,
+        single_sha256_base: 100,
+        ripemd160_per_block: 5000,
+        sinsemilla_base: 40000,
+    },
+    processing: FeeProcessingVersion {
+        fetch_identity_balance_processing_cost: 10000,
+        fetch_identity_revision_processing_cost: 9000,
+        fetch_identity_balance_and_revision_processing_cost: 15000,
+        fetch_identity_cost_per_look_up_key_by_id: 9000,
+        fetch_identity_token_balance_processing_cost: 10000,
+        fetch_prefunded_specialized_balance_processing_cost: 10000,
+        fetch_key_with_type_nonce_and_balance_cost: 12000,
+        fetch_single_identity_key_processing_cost: 10000,
+        validate_key_structure: 50,
+        perform_network_threshold_signing: 100000000,
+    },
+    data_contract_validation: FeeDataContractValidationVersion {
+        document_type_base_fee: 500,
+        document_type_schema_size_fee: 10,
+        document_type_per_property_fee: 40,
+        document_type_base_non_unique_index_fee: 50,
+        document_type_non_unique_index_per_property_fee: 30,
+        document_type_base_unique_index_fee: 100,
+        document_type_unique_index_per_property_fee: 60,
+    },
+    data_contract_registration: FeeDataContractRegistrationVersion {
+        base_contract_registration_fee: 10000000000,
+        document_type_registration_fee: 2000000000,
+        document_type_base_non_unique_index_registration_fee: 1000000000,
+        document_type_base_unique_index_registration_fee: 1000000000,
+        document_type_base_contested_index_registration_fee: 100000000000,
+        token_registration_fee: 10000000000,
+        token_uses_perpetual_distribution_fee: 10000000000,
+        token_uses_pre_programmed_distribution_fee: 10000000000,
+        token_uses_once_per_identity_distribution_fee: 0,
+        search_keyword_fee: 10000000000,
+    },
+    state_transition_min_fees: StateTransitionMinFees {
+        credit_transfer: 100000,
+        credit_transfer_to_addresses: 500000,
+        credit_withdrawal: 400000000,
+        identity_update: 100000,
+        document_batch_sub_transition: 100000,
+        contract_create: 100000,
+        contract_update: 100000,
+        masternode_vote: 100000,
+        address_credit_withdrawal: 400000000,
+        address_funds_transfer_input_cost: 500000,
+        address_funds_transfer_output_cost: 6000000,
+        identity_create_base_cost: 2000000,
+        identity_topup_base_cost: 500000,
+        identity_key_in_creation_cost: 6500000,
+    },
+    vote_resolution_fund_fees: VoteResolutionFundFees {
+        contested_document_vote_resolution_fund_required_amount: 20000000000,
+        contested_document_vote_resolution_unlock_fund_required_amount: 400000000000,
+        contested_document_single_vote_cost: 10000000,
+        moderation_vote_resolution_fund_required_amount: 20000000000,
+        contested_document_contenders_before_fund_doubling: 0,
+        contested_document_contenders_per_fund_doubling: 0,
+    },
+    document_ttl: FeeDocumentTtlVersion {
+        tiers: [
+            DocumentTtlFeeTier {
+                max_ttl_seconds: 3600,
+                credit_per_byte: 1,
+            },
+            DocumentTtlFeeTier {
+                max_ttl_seconds: 86400,
+                credit_per_byte: 4,
+            },
+            DocumentTtlFeeTier {
+                max_ttl_seconds: 172800,
+                credit_per_byte: 8,
+            },
+            DocumentTtlFeeTier {
+                max_ttl_seconds: 345600,
+                credit_per_byte: 15,
+            },
+            DocumentTtlFeeTier {
+                max_ttl_seconds: 604800,
+                credit_per_byte: 26,
+            },
+        ],
+        credit_per_byte_per_period: 34,
+        pricing_period_seconds: 788400,
+        cleanup_base_processing_cost: 1200000,
+        cleanup_processing_cost_per_index_level: 400000,
+        cleanup_processing_cost_per_document_byte: 420,
+    },
+    document_reference: FeeDocumentReferenceVersion {
+        choose_first_credits_per_candidate: 100000,
+        where_list_credits_per_element: 100,
+    },
+}
+system_data_contracts: SystemDataContractVersions {
+    withdrawals: 1,
+    dpns: 2,
+    dashpay: 1,
+    masternode_reward_shares: 1,
+    wallet: 1,
+    token_history: 1,
+    keyword_search: 1,
+    document_history: 1,
+    app_connect: 0,
+    moderation_charters: 0,
+}
+system_limits: SystemLimits {
+    credit_pool_nullifier_backfill_page_size: 0,
+    credit_pool_nullifier_backfill_batch_size: 0,
+    estimated_contract_max_serialized_size: 16384,
+    max_field_value_size: 5120,
+    max_document_value_depth: Some(
+        256,
+    ),
+    max_typed_array_items: 1024,
+    max_references_per_document: 256,
+    max_reference_operands: 4,
+    max_reference_expression_depth: 4,
+    max_property_constraints: 16,
+    max_property_constraint_nodes: 32,
+    max_property_constraint_aggregates: 4,
+    max_state_transition_size: 20480,
+    max_transitions_in_documents_batch: 1,
+    withdrawal_transactions_per_block_limit: 4,
+    retry_signing_expired_withdrawal_documents_per_block_limit: 1,
+    max_withdrawal_amount: 50000000000000,
+    daily_withdrawal_limit_percent: None,
+    core_credit_pool_unlock_limit_percent: None,
+    core_credit_pool_unlock_limit_floor: None,
+    core_credit_pool_window_blocks: None,
+    regtest_core_credit_pool_window_blocks: None,
+    min_withdrawal_amount: 1000000,
+    core_dust_relay_fee_per_kb: None,
+    max_core_fee_per_byte: None,
+    max_group_member_count: 256,
+    max_contract_group_memberships_per_contract: 16,
+    max_contract_group_admins: 16,
+    max_contract_group_name_length: 64,
+    max_contract_group_description_length: 256,
+    max_contract_moderators: 16,
+    max_contract_suspension_until: 9007199254740991,
+    max_contract_moderation_reason_length: 1024,
+    max_contract_warnings_per_identity: 16,
+    max_contract_moderation_reason_documents: 16,
+    min_mainnet_contract_moderation_election_window_seconds: 86400,
+    max_contract_moderation_election_window_seconds: 2419200,
+    min_contract_moderation_challenge_cool_down_seconds: 1209600,
+    max_contract_moderation_challenge_cool_down_seconds: 94608000,
+    contract_document_restore_window_ms: 604800000,
+    max_contract_moderation_added_moderators: 15,
+    max_moderation_charter_elected_members: 15,
+    max_contenders_per_contest: 1000,
+    max_token_redemption_cycles: 128,
+    max_evonode_reward_claim_epochs: 100,
+    max_shielded_transition_actions: 16,
+    max_token_pool_notes_for_outgoing: 250,
+    max_time_range_overlap_factor: None,
+    max_time_range_ttl_seconds: None,
+    min_time_range_ttl_drop_operations_per_write: None,
+    min_document_ttl_seconds: None,
+    max_document_ttl_seconds: None,
+    max_document_expirations_per_block: 0,
+    max_document_expiration_weight_per_block: 0,
+    max_contested_summed_value_magnitude: None,
+    max_expiring_signed_summed_value_magnitude: None,
+    max_indexed_array_items: None,
+    max_windowed_indexed_array_items: None,
+    max_index_entries_per_document: None,
+    max_choose_first_candidates: 1000,
+    max_rekey_batch_moves: None,
+}
diff --git a/src/context/legacy_scheduled_votes.rs b/src/context/legacy_scheduled_votes.rs
index f1ef5a2e1..208da3bd3 100644
--- a/src/context/legacy_scheduled_votes.rs
+++ b/src/context/legacy_scheduled_votes.rs
@@ -107,9 +107,11 @@ impl AppContext {
                 now
             }
         };
+        // Retired schedules were created under protocol 13. Keep their notice
+        // lifetime stable across SDK ratchets and future protocol upgrades.
         let contest_duration = crate::model::dpns::contest_durations(
             self.network,
-            super::default_platform_version(&self.network),
+            &dash_sdk::dpp::version::v13::PLATFORM_V13,
         )
         .total;
         Ok(legacy_notice_is_current(
@@ -268,7 +270,7 @@ mod tests {
 
         let contest_duration = crate::model::dpns::contest_durations(
             Network::Testnet,
-            crate::context::default_platform_version(&Network::Testnet),
+            &dash_sdk::dpp::version::v13::PLATFORM_V13,
         )
         .total;
         let long_ago = now_ms() - u64::try_from(contest_duration.as_millis()).unwrap() - 1;
diff --git a/src/context/mod.rs b/src/context/mod.rs
index d5a2a5139..e52da9c44 100644
--- a/src/context/mod.rs
+++ b/src/context/mod.rs
@@ -17,7 +17,10 @@ pub(crate) mod lock_probe;
 pub(crate) use identity_db::test_staging;
 pub(crate) mod identity_load_registry;
 pub mod migration_status;
+#[cfg(test)]
+mod platform_version_guard;
 mod settings_db;
+mod system_contracts;
 #[cfg(test)]
 pub(crate) mod test_support;
 mod wallet_balances;
@@ -50,15 +53,14 @@ use connection_status::ConnectionStatus;
 use dash_sdk::Sdk;
 use dash_sdk::dapi_client::AddressList;
 use dash_sdk::dashcore_rpc::{Auth, Client};
+use dash_sdk::dpp::block::epoch::EpochIndex;
 use dash_sdk::dpp::dashcore::Network;
 #[cfg(any(test, feature = "testing"))]
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::state_transition::StateTransitionSigningOptions;
 use dash_sdk::dpp::state_transition::batch_transition::methods::StateTransitionCreationOptions;
-use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
 use dash_sdk::dpp::version::PlatformVersion;
-use dash_sdk::dpp::version::v13::PLATFORM_V13;
 use dash_sdk::platform::DataContract;
 use dash_sdk::platform::Identifier;
 use egui::Context;
@@ -69,6 +71,7 @@ use std::path::PathBuf;
 use std::str::FromStr as _;
 use std::sync::atomic::{AtomicBool, AtomicU32, AtomicU64, Ordering};
 use std::sync::{Arc, Mutex, RwLock, RwLockWriteGuard};
+use system_contracts::{SystemContracts, SystemContractsCache};
 
 use crate::model::settings::AppSettings;
 use crate::model::user_role::{UserRole, UserRoleCell};
@@ -161,6 +164,15 @@ impl DpnsVoteDispatchCoordinator {
     }
 }
 
+/// What epoch adoption is keyed on. See [`AppContext::adopt_epoch`].
+#[derive(Debug, Default)]
+struct EpochAdoption {
+    /// The connection generation, bumped by every rebuild.
+    generation: u64,
+    /// The index of the last adopted proved epoch on this generation.
+    epoch_index: Option<EpochIndex>,
+}
+
 #[derive(Debug)]
 pub struct AppContext {
     pub(crate) data_dir: PathBuf,
@@ -178,11 +190,9 @@ pub struct AppContext {
     // owned by upstream platform-wallet.
     spv_context_provider: RwLock<SpvProvider>,
     pub(crate) config: Arc<RwLock<NetworkConfig>>,
-    pub(crate) dpns_contract: Arc<DataContract>,
-    pub(crate) withdraws_contract: Arc<DataContract>,
-    pub(crate) dashpay_contract: Arc<DataContract>,
-    pub(crate) token_history_contract: Arc<DataContract>,
-    pub(crate) keyword_search_contract: Arc<DataContract>,
+    /// The system contracts at the SDK's protocol version; read through
+    /// [`Self::dpns_contract`] and its siblings.
+    system_contracts: SystemContractsCache,
     pub(crate) core_client: RwLock<Client>,
     pub(crate) has_wallet: AtomicBool,
     /// One-shot-per-session latch for the automatic all-wallets identity sweep.
@@ -317,6 +327,9 @@ pub struct AppContext {
     /// Updated alongside fee_multiplier when epoch info is fetched.
     /// 0 means not yet fetched from the network.
     platform_protocol_version: AtomicU32,
+    /// The connection generation and the last adopted proved epoch. See
+    /// [`Self::adopt_epoch`] and [`Self::replace_connection`].
+    epoch_adoption: Mutex<EpochAdoption>,
     /// Frame-safe shielded balance snapshot (credits, summed across all Orchard accounts).
     ///
     /// Written by the Phase-E `on_shielded_sync_completed` event handler from the
@@ -543,22 +556,14 @@ impl AppContext {
                 return None;
             }
         };
-        let platform_version = sdk.version();
-
-        let load_contract = |contract: SystemDataContract, label: &str| {
-            load_system_data_contract(contract, platform_version)
-                .inspect_err(|e| tracing::error!(?network, "Failed to load {label} contract: {e}"))
-                .ok()
+        let system_contracts = match SystemContracts::load(sdk.version()) {
+            Ok(contracts) => SystemContractsCache::new(contracts),
+            Err(e) => {
+                tracing::error!(?network, "Failed to load the system contracts: {e}");
+                return None;
+            }
         };
 
-        let dpns_contract = load_contract(SystemDataContract::DPNS, "DPNS")?;
-        let withdrawal_contract = load_contract(SystemDataContract::Withdrawals, "Withdrawals")?;
-        let token_history_contract =
-            load_contract(SystemDataContract::TokenHistory, "TokenHistory")?;
-        let keyword_search_contract =
-            load_contract(SystemDataContract::KeywordSearch, "KeywordSearch")?;
-        let dashpay_contract = load_contract(SystemDataContract::Dashpay, "Dashpay")?;
-
         let addr = format!(
             "http://{}:{}",
             network_config.rpc_host(),
@@ -600,11 +605,7 @@ impl AppContext {
             sdk: ArcSwap::from_pointee(sdk),
             spv_context_provider: spv_provider.into(),
             config: config_lock,
-            dpns_contract: Arc::new(dpns_contract),
-            withdraws_contract: Arc::new(withdrawal_contract),
-            dashpay_contract: Arc::new(dashpay_contract),
-            token_history_contract: Arc::new(token_history_contract),
-            keyword_search_contract: Arc::new(keyword_search_contract),
+            system_contracts,
             core_client: core_client.into(),
             has_wallet: false.into(),
             identity_autodiscovery_fired: AtomicBool::new(false),
@@ -654,6 +655,7 @@ impl AppContext {
                 PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE,
             ),
             platform_protocol_version: AtomicU32::new(0),
+            epoch_adoption: Mutex::new(EpochAdoption::default()),
             shielded_balances: Arc::new(Mutex::new(std::collections::HashMap::new())),
             shielded_addresses: Arc::new(Mutex::new(std::collections::HashMap::new())),
             platform_balances: Arc::new(Mutex::new(std::collections::HashMap::new())),
@@ -874,6 +876,13 @@ impl AppContext {
             .store(version, Ordering::Relaxed);
     }
 
+    /// Raise the cached platform protocol version to `version`; a lower one
+    /// is ignored. What the network proves never moves it back.
+    pub(crate) fn raise_platform_protocol_version(&self, version: u32) {
+        self.platform_protocol_version
+            .fetch_max(version, Ordering::Relaxed);
+    }
+
     /// Synchronous read of the frame-safe shielded balance for `seed_hash`.
     ///
     /// Returns the total shielded balance in duffs, summed across all Orchard accounts.
@@ -1101,8 +1110,63 @@ impl AppContext {
         }
     }
 
+    /// The platform version the SDK builds, validates and signs with: the
+    /// network's minimum until a proven response ratchets it to the version
+    /// the network runs.
     pub fn platform_version(&self) -> &'static PlatformVersion {
-        default_platform_version(&self.network)
+        self.sdk.load().version()
+    }
+
+    /// The DPNS contract at [`Self::platform_version`].
+    pub(crate) fn dpns_contract(&self) -> Arc<DataContract> {
+        Arc::clone(&self.system_contracts().dpns)
+    }
+
+    /// The withdrawals contract at [`Self::platform_version`].
+    pub(crate) fn withdraws_contract(&self) -> Arc<DataContract> {
+        Arc::clone(&self.system_contracts().withdrawals)
+    }
+
+    /// The DashPay contract at [`Self::platform_version`].
+    pub(crate) fn dashpay_contract(&self) -> Arc<DataContract> {
+        Arc::clone(&self.system_contracts().dashpay)
+    }
+
+    /// The token history contract at [`Self::platform_version`].
+    pub(crate) fn token_history_contract(&self) -> Arc<DataContract> {
+        Arc::clone(&self.system_contracts().token_history)
+    }
+
+    /// The keyword search contract at [`Self::platform_version`].
+    pub(crate) fn keyword_search_contract(&self) -> Arc<DataContract> {
+        Arc::clone(&self.system_contracts().keyword_search)
+    }
+
+    fn system_contracts(&self) -> Arc<SystemContracts> {
+        self.system_contracts.get(self.platform_version())
+    }
+
+    /// The system contracts exactly as `platform_version` defines them, for a
+    /// caller that verifies at a version other than [`Self::platform_version`].
+    /// Fails rather than serving another version's contracts.
+    pub(crate) fn system_contracts_at(
+        &self,
+        platform_version: &PlatformVersion,
+    ) -> Result<Arc<SystemContracts>, Box<dash_sdk::dpp::ProtocolError>> {
+        self.system_contracts.try_get(platform_version)
+    }
+
+    /// The platform version of the connected network, once its protocol
+    /// version has been fetched; [`Self::platform_version`] until then, or for
+    /// a protocol version this build does not know.
+    ///
+    /// For values that differ between protocol versions and must match the
+    /// network, such as fees introduced by a newer protocol.
+    pub fn connected_platform_version(&self) -> &'static PlatformVersion {
+        match self.platform_protocol_version() {
+            0 => self.platform_version(),
+            version => PlatformVersion::get_optional(version).unwrap_or(self.platform_version()),
+        }
     }
 
     pub fn state_transition_options(&self) -> Option<StateTransitionCreationOptions> {
@@ -1110,6 +1174,7 @@ impl AppContext {
         // and purpose checks when signing a state transition.
         if self.user_role().at_least(UserRole::Developer) {
             Some(StateTransitionCreationOptions {
+                contest_fund: None,
                 signing_options: StateTransitionSigningOptions {
                     allow_signing_with_any_security_level: true,
                     allow_signing_with_any_purpose: true,
@@ -1117,8 +1182,9 @@ impl AppContext {
                 batch_feature_version: None,
                 method_feature_version: None,
                 base_feature_version: None,
-                // Action fee agreements are a protocol-14 field; DET builds
-                // protocol-13 transitions only (`DET_PLATFORM_VERSION`).
+                // Signing overrides only. A document action fee agreement is
+                // per transition: `backend_task::document` adds it after these
+                // options, from the contract the user was shown.
                 action_fee_agreement: None,
             })
         } else {
@@ -1126,8 +1192,133 @@ impl AppContext {
         }
     }
 
+    /// The generation of the connection to the network: bumped each time the
+    /// connection is rebuilt. Production reads take it together with the SDK
+    /// check, via [`Self::connection_snapshot_for`].
+    #[cfg(test)]
+    pub(crate) fn connection_generation(&self) -> u64 {
+        self.epoch_adoption
+            .lock()
+            .unwrap_or_else(std::sync::PoisonError::into_inner)
+            .generation
+    }
+
+    /// Adopt the fee multiplier and protocol version of the proved epoch
+    /// `epoch_index`, read on connection `generation`. Returns whether it was
+    /// adopted.
+    ///
+    /// Dropped when the connection was rebuilt since the read was sent, or
+    /// when an epoch newer than it was adopted already: epoch reads run
+    /// concurrently (platform info, fee refusals) and can finish out of
+    /// order. The protocol version only moves up. The lock covers the checks
+    /// and both stores, so an adoption and a rebuild cannot interleave;
+    /// nothing is awaited under it.
+    pub(crate) fn adopt_epoch(
+        &self,
+        generation: u64,
+        epoch_index: EpochIndex,
+        fee_multiplier_permille: u64,
+        protocol_version: u32,
+    ) -> bool {
+        let mut adoption = self
+            .epoch_adoption
+            .lock()
+            .unwrap_or_else(std::sync::PoisonError::into_inner);
+        if generation != adoption.generation
+            || adoption
+                .epoch_index
+                .is_some_and(|adopted| epoch_index < adopted)
+        {
+            return false;
+        }
+        adoption.epoch_index = Some(epoch_index);
+        self.set_fee_multiplier_permille(fee_multiplier_permille);
+        self.raise_platform_protocol_version(protocol_version);
+        true
+    }
+
+    /// Raise the protocol version to `protocol_version`, proved on connection
+    /// `generation`; dropped if the connection was rebuilt since. Returns
+    /// whether it was applied.
+    pub(crate) fn raise_platform_protocol_version_on(
+        &self,
+        generation: u64,
+        protocol_version: u32,
+    ) -> bool {
+        let adoption = self
+            .epoch_adoption
+            .lock()
+            .unwrap_or_else(std::sync::PoisonError::into_inner);
+        if generation != adoption.generation {
+            return false;
+        }
+        self.raise_platform_protocol_version(protocol_version);
+        true
+    }
+
+    /// Replace the connection's SDK with `new_sdk` and forget everything
+    /// learned from the old connection: bump the generation, so reads still in
+    /// flight on it are dropped, forget the adopted epoch, and put the
+    /// protocol version back to unknown and the fee multiplier to the default.
+    /// The new endpoints may serve another protocol version or a reset devnet;
+    /// capabilities stay closed until the new connection proves its epoch.
+    ///
+    /// The reset is written before the new SDK is published, under the
+    /// adoption lock: whoever loads the new SDK sees the reset state, and a
+    /// [`Self::connection_snapshot_for`] sees either the old generation and
+    /// SDK or the new ones. A task still holding the old SDK may see the reset
+    /// state, which closes capabilities and uses default fees: fail closed.
+    pub(crate) fn replace_connection(&self, new_sdk: Arc<Sdk>) {
+        self.replace_connection_observed(new_sdk, |_| {});
+    }
+
+    /// [`Self::replace_connection`]; `observe` runs where the two halves meet (test seam).
+    fn replace_connection_observed(&self, new_sdk: Arc<Sdk>, observe: impl Fn(&Self)) {
+        let mut adoption = self
+            .epoch_adoption
+            .lock()
+            .unwrap_or_else(std::sync::PoisonError::into_inner);
+        adoption.generation += 1;
+        adoption.epoch_index = None;
+        self.set_fee_multiplier_permille(PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE);
+        self.set_platform_protocol_version(0);
+        observe(self);
+        self.sdk.store(new_sdk);
+    }
+
+    /// The connection generation and whether `sdk` is the current SDK (not
+    /// one a rebuild replaced, nor a copy), read together under the adoption
+    /// lock. An epoch read takes this before it is sent and passes the
+    /// generation to [`Self::adopt_epoch`].
+    pub(crate) fn connection_snapshot_for(&self, sdk: &Sdk) -> (u64, bool) {
+        let adoption = self
+            .epoch_adoption
+            .lock()
+            .unwrap_or_else(std::sync::PoisonError::into_inner);
+        let current = std::ptr::eq(sdk, Arc::as_ptr(&self.sdk.load_full()));
+        (adoption.generation, current)
+    }
+
+    /// Rebuild the connection ([`Self::reinit_core_client_and_sdk`]) and read
+    /// the new connection's epoch, so its protocol version and fee multiplier
+    /// are known again. A failed epoch read only leaves them unknown until
+    /// the next one; it does not fail the rebuild.
+    pub(crate) async fn rebuild_connection(self: &Arc<Self>) -> Result<(), TaskError> {
+        Arc::clone(self).reinit_core_client_and_sdk()?;
+        let sdk = self.sdk.load_full();
+        if let Err(error) = self.refresh_current_epoch(&sdk).await {
+            tracing::warn!(
+                %error,
+                "Could not read the current epoch after rebuilding the connection; \
+                 protocol features stay closed until the next read"
+            );
+        }
+        Ok(())
+    }
+
     /// Rebuild both the Dash RPC `core_client` and the `Sdk` using the
-    /// updated `NetworkConfig` from `self.config`.
+    /// updated `NetworkConfig` from `self.config`, and forget the state
+    /// learned from the old connection ([`Self::replace_connection`]).
     pub fn reinit_core_client_and_sdk(self: Arc<Self>) -> Result<(), TaskError> {
         // 1. Grab a fresh snapshot of your NetworkConfig
         let cfg = {
@@ -1160,6 +1351,9 @@ impl AppContext {
         };
 
         let provider = self.spv_context_provider.read()?.clone();
+        // Like a cold start: the network minimum, raised by the new
+        // connection's first proven response. Nothing learned from the old
+        // endpoints is carried over.
         let new_sdk = initialize_sdk(address_list, self.network, provider)
             .map_err(|e| TaskError::SdkInitializationFailed { detail: e })?;
 
@@ -1168,7 +1362,7 @@ impl AppContext {
             let mut client_lock = self.core_client.write()?;
             *client_lock = new_client;
         }
-        self.sdk.store(Arc::new(new_sdk));
+        self.replace_connection(Arc::new(new_sdk));
 
         // Rebind the provider to hold the new AppContext reference.
         // bind_app_context also registers the provider with the SDK.
@@ -1499,14 +1693,19 @@ impl AppContext {
         self.selected_single_key_hash.lock().ok().and_then(|g| *g)
     }
 
-    /// Stored owner, falling back to the signing-key wallet for legacy records.
+    /// Stored owner, falling back for legacy records to the loaded wallet that
+    /// derives one of the identity's keys, whatever the key is bound to.
     fn owning_wallet_hash(&self, id: Identifier) -> Option<WalletSeedHash> {
         if let Ok(Some((hash, _))) = self.stored_identity_wallet_link(&id) {
             return Some(hash);
         }
         let identities = self.load_local_qualified_identities().ok()?;
         let qi = identities.into_iter().find(|qi| qi.identity.id() == id)?;
-        let wallet = crate::ui::identity::get_selected_wallet(&qi, Some(self), None).ok()??;
+        let wallet = qi
+            .identity
+            .public_keys()
+            .values()
+            .find_map(|key| crate::ui::identity::wallet_for_signing_key(&qi, Some(key)))?;
         let hash = wallet.read().ok()?.seed_hash();
         Some(hash)
     }
@@ -1770,34 +1969,10 @@ impl AppContext {
 
     /// Returns the DashPay contract identifier.
     pub fn dashpay_contract_id(&self) -> Identifier {
-        self.dashpay_contract.id()
+        self.dashpay_contract().id()
     }
 }
 
-/// The platform version DET uses locally: validation, building and signing
-/// state transitions, loading system contracts, and the SDK's initial
-/// protocol-version seed.
-///
-/// Protocol 13 is what mainnet and testnet run. The pinned upstream crates
-/// already know protocol 14 (`PlatformVersion::latest()`), but DET must not
-/// build or validate protocol-14 structures until it supports them, so every
-/// local use goes through this constant instead of `latest()`.
-// TODO(pv14): raise to PLATFORM_V14 together with protocol-14 support.
-pub(crate) const DET_PLATFORM_VERSION: &PlatformVersion = &PLATFORM_V13;
-
-/// Returns the default platform version for the given network.
-// Seeded (`with_initial_version`), not pinned, so `Sdk`'s protocol-version
-// ratchet stays active and follows the network upward.
-// TODO(platform#4231): the fix is merged upstream and included in the current
-// platform pin; restore the live `ExtendedEpochInfo::fetch_current` in
-// `PlatformInfoTaskRequestType::CurrentEpochInfo` and reconsider this seeding.
-// TODO(pv14): devnet should seed at PV14 per upstream rs-sdk `min_protocol_version`
-// (devnets run the development line); DET seeds every network at
-// `DET_PLATFORM_VERSION` until it supports protocol 14.
-pub(crate) const fn default_platform_version(_network: &Network) -> &'static PlatformVersion {
-    DET_PLATFORM_VERSION
-}
-
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -1835,33 +2010,124 @@ mod tests {
         }
     }
 
+    /// Before any proven response, a context builds, validates and signs at
+    /// the lowest protocol version its network still runs (upstream's
+    /// per-network minimum): 13 on mainnet, not an older table.
     #[test]
-    fn platform_version_is_v13_for_every_network() {
+    fn platform_version_starts_at_the_network_minimum() {
+        use crate::context::test_support::test_app_context_for_network;
+        use dash_sdk::sdk::min_protocol_version;
+
+        assert_eq!(min_protocol_version(Network::Mainnet), 13);
         for network in [
             Network::Mainnet,
             Network::Testnet,
             Network::Devnet,
             Network::Regtest,
         ] {
+            let tmp = tempfile::tempdir().expect("tempdir");
+            let ctx = test_app_context_for_network(tmp.path(), network);
             assert_eq!(
-                default_platform_version(&network).protocol_version,
-                PLATFORM_V13.protocol_version
+                ctx.platform_version().protocol_version,
+                min_protocol_version(network),
+                "{network:?}"
             );
         }
     }
 
-    /// Contest timing is read from this pin on the voting side and from the live
-    /// SDK version on the identity side. The SDK only ratchets upward from the
-    /// pin, so both sides describe one contest as long as every newer version
-    /// this build knows keeps the pinned windows.
+    /// Once the SDK runs at protocol 14, the context builds with 14 and serves
+    /// the system contracts protocol 14 defines — not the ones loaded at boot.
+    #[test]
+    fn platform_version_and_system_contracts_follow_the_sdk() {
+        use crate::context::test_support::test_app_context_for_network;
+        use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+
+        let tmp = tempfile::tempdir().expect("tempdir");
+        let ctx = test_app_context_for_network(tmp.path(), Network::Mainnet);
+        let v14 = PlatformVersion::get(14).expect("protocol 14");
+        let boot_dashpay = ctx.dashpay_contract();
+        assert_ne!(
+            *boot_dashpay,
+            load_system_data_contract(SystemDataContract::Dashpay, v14).unwrap(),
+            "precondition: protocol 14 redefines the DashPay contract"
+        );
+
+        crate::context::test_support::set_sdk_protocol_version(&ctx, 14);
+
+        assert_eq!(ctx.platform_version().protocol_version, 14);
+        for (served, contract) in [
+            (ctx.dashpay_contract(), SystemDataContract::Dashpay),
+            (ctx.withdraws_contract(), SystemDataContract::Withdrawals),
+            (
+                ctx.token_history_contract(),
+                SystemDataContract::TokenHistory,
+            ),
+            (ctx.dpns_contract(), SystemDataContract::DPNS),
+            (
+                ctx.keyword_search_contract(),
+                SystemDataContract::KeywordSearch,
+            ),
+        ] {
+            assert_eq!(*served, load_system_data_contract(contract, v14).unwrap());
+        }
+        assert_eq!(ctx.dashpay_contract().id(), boot_dashpay.id());
+    }
+
+    /// A task that loads the new SDK always sees the reset connection state:
+    /// the new SDK never pairs with the old connection's protocol version or
+    /// fee multiplier.
     #[test]
-    fn contest_durations_match_the_pin_for_every_version_the_sdk_can_report() {
+    fn the_new_sdk_is_published_only_after_the_connection_state_is_reset() {
+        let temp_dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(temp_dir.path());
+        ctx.adopt_epoch(ctx.connection_generation(), 8, 1_500, 14);
+        let new_sdk = Arc::new(dash_sdk::Sdk::new_mock());
+        let new_sdk_ptr = Arc::as_ptr(&new_sdk);
+
+        ctx.replace_connection_observed(new_sdk, |ctx| {
+            if Arc::as_ptr(&ctx.sdk.load_full()) == new_sdk_ptr {
+                assert_eq!(ctx.platform_protocol_version(), 0, "new SDK, old protocol");
+                assert_eq!(
+                    ctx.fee_multiplier_permille(),
+                    crate::model::fee_estimation::PlatformFeeEstimator::DEFAULT_FEE_MULTIPLIER_PERMILLE,
+                    "new SDK, old fee multiplier"
+                );
+            }
+        });
+
+        assert_eq!(Arc::as_ptr(&ctx.sdk.load_full()), new_sdk_ptr);
+        assert_eq!(ctx.platform_protocol_version(), 0);
+    }
+
+    /// Until the network's version is fetched, the connected version is the
+    /// one the SDK builds with.
+    #[test]
+    fn connected_platform_version_falls_back_to_the_sdk_version() {
+        use crate::context::test_support::test_app_context_for_network;
+
+        let tmp = tempfile::tempdir().expect("tempdir");
+        let ctx = test_app_context_for_network(tmp.path(), Network::Mainnet);
+        assert_eq!(ctx.platform_protocol_version(), 0);
+        assert_eq!(
+            ctx.connected_platform_version().protocol_version,
+            ctx.sdk.load().protocol_version_number()
+        );
+    }
+
+    /// Contest windows stay consistent as the SDK ratchets upward from each
+    /// network minimum to a newer supported protocol.
+    #[test]
+    fn contest_durations_match_the_network_minimum_for_every_supported_version() {
         use crate::model::dpns::contest_durations;
 
         let newest = PlatformVersion::latest().protocol_version;
         for network in [Network::Mainnet, Network::Testnet] {
-            let pinned = contest_durations(network, default_platform_version(&network));
-            for protocol_version in DET_PLATFORM_VERSION.protocol_version..=newest {
+            let minimum = dash_sdk::sdk::min_protocol_version(network);
+            let pinned = contest_durations(
+                network,
+                PlatformVersion::get(minimum).expect("network minimum"),
+            );
+            for protocol_version in minimum..=newest {
                 let live = PlatformVersion::get(protocol_version).expect("known version");
                 assert_eq!(
                     contest_durations(network, live),
@@ -2353,4 +2619,28 @@ mod tests {
 
         assert_eq!(maximum.load(Ordering::SeqCst), MAX_CONCURRENT_DPNS_VOTERS);
     }
+
+    /// Regression: the owner of an identity stored without a wallet link was
+    /// read from its DPNS signing key, so an identity whose keys are all bound
+    /// to another contract had no owner.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn an_unlinked_identity_is_owned_by_the_wallet_deriving_its_keys() {
+        use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+        let dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::wired_test_app_context(dir.path()).await;
+        let (identity, wallet) = crate::context::test_support::identity_with_bound_wallet_key(
+            ContractBounds::SingleContract {
+                id: ctx.dashpay_contract().id(),
+            },
+        );
+        let seed_hash = wallet.read().expect("wallet").seed_hash();
+        ctx.wallet_context().insert_test_wallet(seed_hash, wallet);
+        ctx.insert_local_qualified_identity(&identity, &None)
+            .expect("store identity");
+
+        assert_eq!(
+            ctx.owning_wallet_hash(identity.identity.id()),
+            Some(seed_hash)
+        );
+    }
 }
diff --git a/src/context/platform_version_guard.rs b/src/context/platform_version_guard.rs
new file mode 100644
index 000000000..d93d8af00
--- /dev/null
+++ b/src/context/platform_version_guard.rs
@@ -0,0 +1,59 @@
+//! Guards the protocol version 13 tables DET builds, validates and verifies
+//! with on mainnet and testnet against drift across platform pin bumps.
+//!
+//! Protocol 13 is live, so table changes require compatibility review. The snapshot
+//! covers what the client side reads: serialization and validation (`dpp`),
+//! proof verification (`drive.methods.verify`), fees, system contract versions
+//! and system limits. On a mismatch, diff the fixture, confirm the change is
+//! additive (new fields at 0/None) or otherwise safe for a protocol 13 network,
+//! then regenerate with `DET_BLESS_PLATFORM_VERSION_SNAPSHOT=1`.
+//!
+//! Platform #5294 enforces GroveDB proof envelope V1 outside these tables, even
+//! for protocol 13. The snapshot does not establish wire compatibility: #5361
+//! removed the legacy discovery response field 2, still served by sampled
+//! mainnet nodes, and #5515 brings it back as the answer to a version 0 lookup
+//! request, checked by `verify_full_identity_by_non_unique_public_key_hash_two_proofs`.
+//! Only a live check against those nodes shows the SDK accepts their proofs.
+
+use dash_sdk::dpp::dashcore::Network;
+use dash_sdk::dpp::version::PlatformVersion;
+use dash_sdk::sdk::min_protocol_version;
+
+const SNAPSHOT_PATH: &str = "src/context/fixtures/platform_v13_client_tables.txt";
+const SNAPSHOT: &str = include_str!("fixtures/platform_v13_client_tables.txt");
+
+fn client_tables(platform_version: &PlatformVersion) -> String {
+    format!(
+        "protocol_version: {}\ndpp: {:#?}\ndrive.methods.verify: {:#?}\nfee_version: {:#?}\nsystem_data_contracts: {:#?}\nsystem_limits: {:#?}\n",
+        platform_version.protocol_version,
+        platform_version.dpp,
+        platform_version.drive.methods.verify,
+        platform_version.fee_version,
+        platform_version.system_data_contracts,
+        platform_version.system_limits,
+    )
+}
+
+#[test]
+fn protocol_13_client_tables_match_the_snapshot() {
+    let actual = client_tables(PlatformVersion::get(13).expect("protocol 13"));
+    if std::env::var_os("DET_BLESS_PLATFORM_VERSION_SNAPSHOT").is_some() {
+        let path = std::path::Path::new(env!("CARGO_MANIFEST_DIR")).join(SNAPSHOT_PATH);
+        std::fs::write(&path, &actual).expect("write snapshot");
+        return;
+    }
+    assert!(
+        actual == SNAPSHOT,
+        "The protocol 13 tables changed with the platform pin. Diff {SNAPSHOT_PATH} (rerun with \
+         DET_BLESS_PLATFORM_VERSION_SNAPSHOT=1 to rewrite it), check the change is safe for \
+         mainnet, and commit the new snapshot."
+    );
+}
+
+/// Mainnet and testnet run protocol 13, and DET seeds its SDK from upstream's
+/// per-network minimum: the snapshot above is the table DET starts with there.
+#[test]
+fn mainnet_and_testnet_start_at_protocol_13() {
+    assert_eq!(min_protocol_version(Network::Mainnet), 13);
+    assert_eq!(min_protocol_version(Network::Testnet), 13);
+}
diff --git a/src/context/system_contracts.rs b/src/context/system_contracts.rs
new file mode 100644
index 000000000..7a6db8a37
--- /dev/null
+++ b/src/context/system_contracts.rs
@@ -0,0 +1,156 @@
+//! The system data contracts, as defined at the protocol version in use.
+
+use std::sync::Arc;
+use std::sync::atomic::{AtomicU32, Ordering};
+
+use arc_swap::ArcSwap;
+use dash_sdk::dpp::ProtocolError;
+use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+use dash_sdk::dpp::version::PlatformVersion;
+use dash_sdk::platform::DataContract;
+
+/// The system contracts DET uses, all loaded at one protocol version.
+#[derive(Debug)]
+pub(crate) struct SystemContracts {
+    protocol_version: u32,
+    pub(crate) dpns: Arc<DataContract>,
+    pub(crate) withdrawals: Arc<DataContract>,
+    pub(crate) dashpay: Arc<DataContract>,
+    pub(crate) token_history: Arc<DataContract>,
+    pub(crate) keyword_search: Arc<DataContract>,
+}
+
+impl SystemContracts {
+    /// Load every system contract as `platform_version` defines it.
+    pub(crate) fn load(platform_version: &PlatformVersion) -> Result<Self, Box<ProtocolError>> {
+        let load = |contract| {
+            load_system_data_contract(contract, platform_version)
+                .map(Arc::new)
+                .map_err(Box::new)
+        };
+        Ok(Self {
+            protocol_version: platform_version.protocol_version,
+            dpns: load(SystemDataContract::DPNS)?,
+            withdrawals: load(SystemDataContract::Withdrawals)?,
+            dashpay: load(SystemDataContract::Dashpay)?,
+            token_history: load(SystemDataContract::TokenHistory)?,
+            keyword_search: load(SystemDataContract::KeywordSearch)?,
+        })
+    }
+}
+
+/// [`SystemContracts`] that follow the protocol version in use.
+///
+/// Lock-free: the set lives in an [`ArcSwap`]. Two callers reloading at once
+/// store equivalent sets; a set stored late for an older version is replaced
+/// on the next access, so the cache converges on the current version.
+#[derive(Debug)]
+pub(crate) struct SystemContractsCache {
+    current: ArcSwap<SystemContracts>,
+    /// The last version whose reload failed, so the failure is logged once.
+    failed_version: AtomicU32,
+}
+
+impl SystemContractsCache {
+    pub(crate) fn new(contracts: SystemContracts) -> Self {
+        Self {
+            current: ArcSwap::from_pointee(contracts),
+            failed_version: AtomicU32::new(0),
+        }
+    }
+
+    /// The set for exactly `platform_version`, reloaded if the cached one was
+    /// built for another version. A failed reload is an error, never the set
+    /// of another version: what verifies a proof must not mix schemas.
+    pub(crate) fn try_get(
+        &self,
+        platform_version: &PlatformVersion,
+    ) -> Result<Arc<SystemContracts>, Box<ProtocolError>> {
+        let cached = self.current.load_full();
+        if cached.protocol_version == platform_version.protocol_version {
+            return Ok(cached);
+        }
+        let fresh = Arc::new(SystemContracts::load(platform_version)?);
+        self.current.store(Arc::clone(&fresh));
+        Ok(fresh)
+    }
+
+    /// The set for `platform_version`, for the app's own reads (names,
+    /// documents, forms). A failed reload keeps the cached set, so the app
+    /// keeps working on its last loaded contracts; proof verification uses
+    /// [`Self::try_get`] instead.
+    pub(crate) fn get(&self, platform_version: &PlatformVersion) -> Arc<SystemContracts> {
+        match self.try_get(platform_version) {
+            Ok(contracts) => contracts,
+            Err(error) => {
+                let cached = self.current.load_full();
+                let version = platform_version.protocol_version;
+                if self.failed_version.swap(version, Ordering::Relaxed) != version {
+                    tracing::error!(
+                        protocol_version = version,
+                        kept_protocol_version = cached.protocol_version,
+                        ?error,
+                        "Could not load the system contracts for the network's protocol version; keeping the loaded ones"
+                    );
+                }
+                cached
+            }
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+
+    fn version(protocol_version: u32) -> &'static PlatformVersion {
+        PlatformVersion::get(protocol_version).expect("known protocol version")
+    }
+
+    /// Protocol 14 redefines some system contracts, so a set loaded at 13
+    /// must not be served once the network runs 14.
+    #[test]
+    fn a_new_protocol_version_reloads_the_contracts() {
+        let v13 = version(13);
+        let v14 = version(14);
+        let dashpay_v13 = load_system_data_contract(SystemDataContract::Dashpay, v13).unwrap();
+        let dashpay_v14 = load_system_data_contract(SystemDataContract::Dashpay, v14).unwrap();
+        assert_ne!(
+            dashpay_v13, dashpay_v14,
+            "precondition: protocol 14 redefines the DashPay contract"
+        );
+
+        let cache = SystemContractsCache::new(SystemContracts::load(v13).unwrap());
+        assert_eq!(*cache.get(v13).dashpay, dashpay_v13);
+        let reloaded = cache.get(v14);
+        assert_eq!(*reloaded.dashpay, dashpay_v14);
+        assert_eq!(reloaded.dpns.id(), cache.get(v13).dpns.id());
+        assert_eq!(
+            *cache.get(v14).withdrawals,
+            load_system_data_contract(SystemDataContract::Withdrawals, v14).unwrap()
+        );
+    }
+
+    /// A version whose contracts cannot be loaded is an error for the exact
+    /// lookup; the app's lookup keeps the set it has.
+    #[test]
+    fn an_unloadable_version_fails_the_exact_lookup() {
+        let v13 = version(13);
+        let cache = SystemContractsCache::new(SystemContracts::load(v13).unwrap());
+        let mut unloadable = v13.clone();
+        unloadable.protocol_version = u32::MAX;
+
+        assert!(cache.try_get(&unloadable).is_err());
+        assert_eq!(cache.get(&unloadable).protocol_version, 13);
+        assert!(Arc::ptr_eq(&cache.get(v13), &cache.try_get(v13).unwrap()));
+    }
+
+    /// The same version serves the cached set itself, not a reload.
+    #[test]
+    fn the_same_protocol_version_keeps_the_cached_set() {
+        let v13 = version(13);
+        let cache = SystemContractsCache::new(SystemContracts::load(v13).unwrap());
+        assert!(Arc::ptr_eq(&cache.get(v13), &cache.get(v13)));
+    }
+}
diff --git a/src/context/test_support.rs b/src/context/test_support.rs
index dda777c98..61a66b68c 100644
--- a/src/context/test_support.rs
+++ b/src/context/test_support.rs
@@ -174,6 +174,18 @@ fn test_app_context_with_kv_and_network(
     .expect("AppContext")
 }
 
+/// Put `ctx` at `protocol_version`, as its SDK stands once a proven response
+/// ratcheted it there. The replacement SDK is a mock: nothing reaches a network.
+pub(crate) fn set_sdk_protocol_version(ctx: &AppContext, protocol_version: u32) {
+    let version = dash_sdk::dpp::version::PlatformVersion::get(protocol_version)
+        .expect("a protocol version this build knows");
+    let sdk = dash_sdk::SdkBuilder::new_mock()
+        .with_initial_version(version)
+        .build()
+        .expect("mock sdk");
+    ctx.sdk.store(Arc::new(sdk));
+}
+
 /// A mock SDK that reads data contracts through `ctx`, as the app's own SDK does.
 pub(crate) fn mock_sdk_for(ctx: &AppContext) -> Sdk {
     let sdk = Sdk::new_mock();
@@ -191,6 +203,8 @@ pub(crate) fn mock_sdk_for(ctx: &AppContext) -> Sdk {
 pub(crate) fn dpns_name_document(owner: Identifier, label: &str, identity: Value) -> Document {
     let text = |value: &str| Value::Text(value.to_string());
     Document::V0(DocumentV0 {
+        moderated_at: None,
+        moderated_by: None,
         id: Identifier::from([0x5D; 32]),
         owner_id: owner,
         creator_id: None,
@@ -220,3 +234,93 @@ pub(crate) fn dpns_name_document(owner: Identifier, label: &str, identity: Value
         contract_version: None,
     })
 }
+
+/// An ECDSA AUTHENTICATION key `id` at `level`, unbound and unlimited.
+pub(crate) fn auth_key(
+    id: u32,
+    level: dash_sdk::dpp::identity::SecurityLevel,
+) -> dash_sdk::platform::IdentityPublicKey {
+    dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0 {
+        id,
+        purpose: dash_sdk::dpp::identity::Purpose::AUTHENTICATION,
+        security_level: level,
+        contract_bounds: None,
+        key_type: dash_sdk::dpp::identity::KeyType::ECDSA_SECP256K1,
+        read_only: false,
+        data: vec![2; 33].into(),
+        disabled_at: None,
+    }
+    .into()
+}
+
+/// A testnet user identity publishing `keys` and holding the private half of
+/// each.
+pub(crate) fn identity_holding(
+    keys: &[dash_sdk::platform::IdentityPublicKey],
+) -> QualifiedIdentity {
+    use crate::model::qualified_identity::PrivateKeyTarget;
+    use crate::model::qualified_identity::qualified_identity_public_key::QualifiedIdentityPublicKey;
+    use dash_sdk::dpp::identity::accessors::IdentitySettersV0;
+    use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+
+    let mut qi = bare_user_identity(Identifier::new([0xD0; 32]), Network::Testnet);
+    qi.identity
+        .set_public_keys(keys.iter().map(|key| (key.id(), key.clone())).collect());
+    for key in keys {
+        qi.private_keys
+            .insert_non_encrypted(
+                (PrivateKeyTarget::PrivateKeyOnMainIdentity, key.id()),
+                (
+                    QualifiedIdentityPublicKey {
+                        identity_public_key: key.clone(),
+                        in_wallet_at_derivation_path: None,
+                    },
+                    [key.id() as u8; 32],
+                ),
+            )
+            .expect("a free slot");
+    }
+    qi
+}
+
+/// The DashPay system contract, whose document types require a HIGH key.
+pub(crate) fn dashpay_contract() -> dash_sdk::platform::DataContract {
+    use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+    load_system_data_contract(
+        SystemDataContract::Dashpay,
+        dash_sdk::dpp::version::PlatformVersion::latest(),
+    )
+    .expect("the DashPay contract")
+}
+
+/// A user identity whose only key, key 1 (an ECDSA HIGH AUTHENTICATION key
+/// bound to `bounds`), is held as a reference into an open test wallet, and
+/// that wallet.
+pub(crate) fn identity_with_bound_wallet_key(
+    bounds: dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds,
+) -> (
+    QualifiedIdentity,
+    Arc<std::sync::RwLock<crate::model::wallet::Wallet>>,
+) {
+    let wallet = crate::model::wallet::test_support::open_wallet();
+    let seed_hash = wallet.seed_hash();
+    let mut key = auth_key(1, dash_sdk::dpp::identity::SecurityLevel::HIGH);
+    {
+        let dash_sdk::platform::IdentityPublicKey::V0(v0) = &mut key else {
+            unreachable!("auth_key builds a version 0 key");
+        };
+        v0.contract_bounds = Some(bounds);
+    }
+    use dash_sdk::dpp::identity::accessors::IdentitySettersV0;
+    use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+    let mut identity = bare_user_identity(Identifier::new([0xD1; 32]), Network::Testnet);
+    identity
+        .identity
+        .set_public_keys(std::collections::BTreeMap::from([(key.id(), key)]));
+    hold_as_wallet_reference(&mut identity, 1, seed_hash);
+    let wallet = Arc::new(std::sync::RwLock::new(wallet));
+    identity
+        .associated_wallets
+        .insert(seed_hash, Arc::clone(&wallet));
+    (identity, wallet)
+}
diff --git a/src/context/wallet_lifecycle/tests.rs b/src/context/wallet_lifecycle/tests.rs
index 7880d5609..dece54874 100644
--- a/src/context/wallet_lifecycle/tests.rs
+++ b/src/context/wallet_lifecycle/tests.rs
@@ -2335,7 +2335,7 @@ async fn clear_network_database_wipes_wallet_meta_and_seed_envelope() {
 async fn clear_network_database_removes_an_auth_pubkey_cache_rewritten_mid_clear() {
     use crate::backend_task::system_task::SystemTask;
     use dash_sdk::dpp::dashcore::PublicKey;
-    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
+    use dash_sdk::dpp::secp256k1::SecretKey;
 
     let (ctx, sender, _tmp) = offline_testnet_context();
     ctx.ensure_wallet_backend(sender.clone())
@@ -2351,11 +2351,10 @@ async fn clear_network_database_removes_an_auth_pubkey_cache_rewritten_mid_clear
     let backend = ctx.wallet_backend().expect("backend wired");
     let late_writer = Arc::clone(&backend);
     backend.set_after_forget_all_test_hook(move || {
-        let secp = Secp256k1::new();
         let key = PublicKey::new(
-            SecretKey::from_slice(&[0x42; 32])
+            SecretKey::from_secret_bytes([0x42; 32])
                 .expect("valid secret key")
-                .public_key(&secp),
+                .public_key(),
         );
         late_writer
             .auth_pubkey_cache()
@@ -3596,7 +3595,7 @@ fn seed_legacy_protected_single_key(
     alias: Option<&str>,
 ) -> String {
     use crate::model::wallet::single_key::ClosedSingleKey;
-    use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
     use dash_sdk::dpp::dashcore::{Address, PrivateKey, PublicKey};
 
     let path = ctx.db.db_file_path().expect("data.db path");
@@ -3608,10 +3607,10 @@ fn seed_legacy_protected_single_key(
         nonce,
     } = ClosedSingleKey::encrypt_private_key(raw_key, password).expect("encrypt");
     let priv_key = PrivateKey::from_byte_array(raw_key, Network::Testnet).expect("priv");
-    let secp = Secp256k1::new();
+
     let pub_key = PublicKey {
         compressed: priv_key.compressed,
-        inner: priv_key.inner.public_key(&secp),
+        inner: priv_key.inner.public_key(),
     };
     let address = Address::p2pkh(&pub_key, Network::Testnet).to_string();
     let key_hash = ClosedSingleKey::compute_key_hash(raw_key);
@@ -3625,7 +3624,7 @@ fn seed_legacy_protected_single_key(
             ciphertext,
             salt,
             nonce,
-            pub_key.inner.serialize().to_vec(),
+            pub_key.inner.to_compressed().to_vec(),
             address,
             alias,
             Network::Testnet.to_string(),
diff --git a/src/context_provider.rs b/src/context_provider.rs
index 6e83a488b..8ba42fa9c 100644
--- a/src/context_provider.rs
+++ b/src/context_provider.rs
@@ -21,25 +21,41 @@ pub(crate) const MASTERNODE_LIST_NOT_READY_DETAIL: &str =
 
 /// Resolve a data contract by ID: check cached system contracts first, then DB.
 ///
+/// System contracts are served as `platform_version` defines them: the proof
+/// verifier passes the version it verifies with, which during an upgrade can
+/// be newer than the SDK's stored version.
+///
 /// All system contracts are listed in `cached` — adding a new one is a single
 /// array edit. The array size is tied to [`SYSTEM_CONTRACT_COUNT`] so the
 /// compiler enforces completeness.
 fn resolve_data_contract(
     app_ctx: &AppContext,
     data_contract_id: &Identifier,
+    platform_version: &PlatformVersion,
 ) -> Result<Option<Arc<DataContract>>, ContextProviderError> {
+    // Never another version's contracts: the verifier would check the proof
+    // against the wrong schema.
+    let system_contracts = app_ctx
+        .system_contracts_at(platform_version)
+        .map_err(|error| {
+            ContextProviderError::DataContractFailure(format!(
+                "system contracts for protocol version {} could not be loaded: {error}",
+                platform_version.protocol_version
+            ))
+        })?;
     let cached: [&Arc<DataContract>; SYSTEM_CONTRACT_COUNT] = [
-        &app_ctx.dpns_contract,
-        &app_ctx.dashpay_contract,
-        &app_ctx.token_history_contract,
-        &app_ctx.withdraws_contract,
-        &app_ctx.keyword_search_contract,
+        &system_contracts.dpns,
+        &system_contracts.dashpay,
+        &system_contracts.token_history,
+        &system_contracts.withdrawals,
+        &system_contracts.keyword_search,
     ];
 
-    for contract in &cached {
-        if data_contract_id == &contract.id() {
-            return Ok(Some(Arc::clone(contract)));
-        }
+    if let Some(contract) = cached
+        .into_iter()
+        .find(|contract| data_contract_id == &contract.id())
+    {
+        return Ok(Some(Arc::clone(contract)));
     }
 
     // K/V fallback for user-added / non-system contracts
@@ -107,10 +123,10 @@ impl ContextProvider for SpvProvider {
     fn get_data_contract(
         &self,
         data_contract_id: &Identifier,
-        _platform_version: &PlatformVersion,
+        platform_version: &PlatformVersion,
     ) -> Result<Option<Arc<DataContract>>, ContextProviderError> {
         let app_ctx = self.app_context()?;
-        resolve_data_contract(&app_ctx, data_contract_id)
+        resolve_data_contract(&app_ctx, data_contract_id, platform_version)
     }
 
     fn get_token_configuration(
@@ -171,7 +187,7 @@ impl ContextProvider for SpvProvider {
                 core_chain_locked_height,
             ))
         })
-        .map_err(|e| ContextProviderError::Generic(e.to_string()))
+        .map_err(quorum_lookup_error)
     }
 
     fn get_platform_activation_height(
@@ -187,3 +203,96 @@ impl ContextProvider for SpvProvider {
         })
     }
 }
+
+fn quorum_lookup_error(error: crate::backend_task::error::TaskError) -> ContextProviderError {
+    match error {
+        crate::backend_task::error::TaskError::WalletBackend { source } => {
+            source.quorum_lookup_context_error()
+        }
+        other => ContextProviderError::Generic(other.to_string()),
+    }
+}
+
+#[cfg(test)]
+mod quorum_error_tests {
+    use super::*;
+    use crate::backend_task::error::TaskError;
+    use dash_sdk::dpp::dashcore::sml::llmq_entry_verification::{
+        LLMQEntryVerificationSkipStatus, LLMQEntryVerificationStatus,
+    };
+
+    #[test]
+    fn unverified_local_quorum_does_not_blame_the_dapi_endpoint() {
+        let error = TaskError::WalletBackend {
+            source: Arc::new(
+                platform_wallet::error::PlatformWalletError::QuorumNotVerified {
+                    quorum_type: 6,
+                    quorum_hash: [0xab; 32],
+                    status: LLMQEntryVerificationStatus::Skipped(
+                        LLMQEntryVerificationSkipStatus::NotMarkedForVerification,
+                    ),
+                },
+            ),
+        };
+        assert!(matches!(
+            quorum_lookup_error(error),
+            ContextProviderError::QuorumSourceUnavailable(_)
+        ));
+    }
+
+    #[test]
+    fn unrelated_quorum_lookup_errors_are_not_reclassified_as_readiness() {
+        assert!(matches!(
+            quorum_lookup_error(TaskError::NoIdentitiesFound),
+            ContextProviderError::Generic(_)
+        ));
+    }
+}
+
+#[cfg(test)]
+mod data_contract_tests {
+    use super::*;
+    use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+
+    /// The proof verifier asks for a contract at the version it verifies
+    /// with, which during an upgrade can be newer than the SDK's stored
+    /// version. A system contract is served as that version defines it.
+    #[test]
+    fn system_contracts_resolve_at_the_requested_platform_version() {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(dir.path());
+        for protocol_version in [13, 14] {
+            let platform_version = PlatformVersion::get(protocol_version).expect("known version");
+            let expected =
+                load_system_data_contract(SystemDataContract::Dashpay, platform_version).unwrap();
+            let resolved = resolve_data_contract(&ctx, &expected.id(), platform_version)
+                .expect("lookup")
+                .expect("a cached system contract");
+            assert_eq!(*resolved, expected, "protocol {protocol_version}");
+        }
+    }
+
+    /// A version whose system contracts cannot be loaded is refused, not
+    /// answered with the set loaded for another version.
+    #[test]
+    fn system_contracts_that_cannot_load_at_the_requested_version_are_refused() {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let ctx = crate::context::test_support::test_app_context(dir.path());
+        let dpns_id = SystemDataContract::DPNS.id();
+        // Load a set first, so a fallback would have something to serve.
+        let latest = PlatformVersion::latest();
+        assert!(matches!(
+            resolve_data_contract(&ctx, &dpns_id, latest),
+            Ok(Some(_))
+        ));
+
+        let mut unloadable = latest.clone();
+        unloadable.protocol_version = u32::MAX;
+        let resolved = resolve_data_contract(&ctx, &dpns_id, &unloadable);
+
+        assert!(
+            matches!(resolved, Err(ContextProviderError::DataContractFailure(_))),
+            "got {resolved:?}"
+        );
+    }
+}
diff --git a/src/database/test_helpers.rs b/src/database/test_helpers.rs
index 17dc6123c..01248ae89 100644
--- a/src/database/test_helpers.rs
+++ b/src/database/test_helpers.rs
@@ -161,21 +161,21 @@ pub fn legacy_master_epk_bytes(
     network: dash_sdk::dpp::dashcore::Network,
 ) -> Vec<u8> {
     use dash_sdk::dpp::dashcore::Network;
-    use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
     use dash_sdk::dpp::key_wallet::bip32::{
         ChildNumber, DerivationPath, ExtendedPrivKey, ExtendedPubKey,
     };
 
     let coin_type = if network == Network::Mainnet { 5 } else { 1 };
-    let secp = Secp256k1::new();
+
     let master = ExtendedPrivKey::new_master(network, seed).expect("master key");
     let path = DerivationPath::from(vec![
         ChildNumber::Hardened { index: 44 },
         ChildNumber::Hardened { index: coin_type },
         ChildNumber::Hardened { index: 0 },
     ]);
-    let account = master.derive_priv(&secp, &path).expect("derive account");
-    ExtendedPubKey::from_priv(&secp, &account).encode().to_vec()
+    let account = master.derive_priv(&path).expect("derive account");
+    ExtendedPubKey::from_priv(&account).encode().to_vec()
 }
 
 /// Create the legacy `scheduled_votes` table in `data.db`. Fresh installs no
diff --git a/src/database/wallet.rs b/src/database/wallet.rs
index 5e4a793a4..bbae151d3 100644
--- a/src/database/wallet.rs
+++ b/src/database/wallet.rs
@@ -554,7 +554,7 @@ impl From<WalletError> for rusqlite::Error {
 mod tests {
     use super::*;
     use crate::database::test_helpers::create_test_database;
-    use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
     use dash_sdk::dpp::key_wallet::bip32::DerivationPath;
     use dash_sdk::dpp::key_wallet::bip32::{ChildNumber, ExtendedPrivKey};
 
@@ -568,17 +568,15 @@ mod tests {
 
     fn create_test_master_epk_bytes(network: Network) -> Vec<u8> {
         let seed = [7u8; 64];
-        let secp = Secp256k1::new();
+
         let master = ExtendedPrivKey::new_master(network, &seed).expect("master key");
         let path = DerivationPath::from(vec![
             ChildNumber::Hardened { index: 44 },
             ChildNumber::Hardened { index: 1 },
             ChildNumber::Hardened { index: 0 },
         ]);
-        let account = master
-            .derive_priv(&secp, &path)
-            .expect("derive bip44 account");
-        ExtendedPubKey::from_priv(&secp, &account).encode()
+        let account = master.derive_priv(&path).expect("derive bip44 account");
+        ExtendedPubKey::from_priv(&account).encode()
     }
 
     #[test]
diff --git a/src/mcp/resolve.rs b/src/mcp/resolve.rs
index 23c6abd12..9dfef54aa 100644
--- a/src/mcp/resolve.rs
+++ b/src/mcp/resolve.rs
@@ -448,12 +448,12 @@ mod tests {
     use dash_sdk::platform::DataContract;
 
     /// Mocks the proved DPNS-contract fetch that drives the protocol-version
-    /// ratchet — the only network read the epoch task still performs while
-    /// dashpay/platform#4231 is unresolved. The mock reports `LATEST_VERSION` in
+    /// ratchet — the epoch task's fallback when the current epoch cannot be
+    /// read (the mock has no epoch response). The mock reports `LATEST_VERSION` in
     /// the response metadata, so a successful fetch ratchets the SDK exactly as a
     /// live network would; a failed one leaves the version unconfirmed.
     async fn mock_sdk_with_dpns_contract(ctx: &Arc<AppContext>) -> Sdk {
-        let contract = DataContract::clone(&ctx.dpns_contract);
+        let contract = DataContract::clone(&ctx.dpns_contract());
         let mut sdk = Sdk::new_mock();
         sdk.mock()
             .expect_fetch(contract.id(), Some(contract))
diff --git a/src/mcp/tools/masternode.rs b/src/mcp/tools/masternode.rs
index eb210dc69..24910a17b 100644
--- a/src/mcp/tools/masternode.rs
+++ b/src/mcp/tools/masternode.rs
@@ -699,13 +699,13 @@ mod tests {
 
     /// Derive a real, checksum-valid testnet P2PKH address from a fixed key.
     fn sample_core_address() -> String {
-        use dash_sdk::dashcore_rpc::dashcore::secp256k1::{Secp256k1, SecretKey};
         use dash_sdk::dashcore_rpc::dashcore::{Address, Network, PrivateKey, PublicKey};
+        use dash_sdk::dpp::secp256k1::SecretKey;
 
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[7u8; 32]).expect("valid secret key");
-        let privkey = PrivateKey::new(sk, Network::Testnet);
-        let pubkey = PublicKey::from_private_key(&secp, &privkey);
+        let sk = SecretKey::from_secret_bytes([7u8; 32]).expect("valid secret key");
+        let privkey = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key");
+        let pubkey = PublicKey::from_private_key(&privkey);
         Address::p2pkh(&pubkey, Network::Testnet).to_string()
     }
 
@@ -855,11 +855,14 @@ mod tests {
     }
 
     fn testnet_core_address() -> String {
-        use dash_sdk::dashcore_rpc::dashcore::secp256k1::{Secp256k1, SecretKey};
         use dash_sdk::dashcore_rpc::dashcore::{Address, Network, PrivateKey, PublicKey};
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[9u8; 32]).expect("valid secret key");
-        let pk = PublicKey::from_private_key(&secp, &PrivateKey::new(sk, Network::Testnet));
+        use dash_sdk::dpp::secp256k1::SecretKey;
+
+        let sk = SecretKey::from_secret_bytes([9u8; 32]).expect("valid secret key");
+        let pk = PublicKey::from_private_key(
+            &PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+                .expect("valid secret key"),
+        );
         Address::p2pkh(&pk, Network::Testnet).to_string()
     }
 
@@ -933,11 +936,14 @@ mod tests {
 
     #[test]
     fn transfer_mode_cross_network_address_rejected() {
-        use dash_sdk::dashcore_rpc::dashcore::secp256k1::{Secp256k1, SecretKey};
         use dash_sdk::dashcore_rpc::dashcore::{Address, Network, PrivateKey, PublicKey};
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[3u8; 32]).expect("valid secret key");
-        let pk = PublicKey::from_private_key(&secp, &PrivateKey::new(sk, Network::Mainnet));
+        use dash_sdk::dpp::secp256k1::SecretKey;
+
+        let sk = SecretKey::from_secret_bytes([3u8; 32]).expect("valid secret key");
+        let pk = PublicKey::from_private_key(
+            &PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Mainnet)
+                .expect("valid secret key"),
+        );
         let mainnet_addr = Address::p2pkh(&pk, Network::Mainnet).to_string();
 
         let qi = masternode_fixture(false, true);
diff --git a/src/model/address.rs b/src/model/address.rs
index 7f612d8ba..438ca9c23 100644
--- a/src/model/address.rs
+++ b/src/model/address.rs
@@ -587,13 +587,13 @@ mod tests {
 
     #[test]
     fn detect_core_address() {
-        use dash_sdk::dashcore_rpc::dashcore::secp256k1::{Secp256k1, SecretKey};
         use dash_sdk::dashcore_rpc::dashcore::{PrivateKey, PublicKey};
+        use dash_sdk::dpp::secp256k1::SecretKey;
 
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[1u8; 32]).unwrap();
-        let privkey = PrivateKey::new(sk, Network::Testnet);
-        let pubkey = PublicKey::from_private_key(&secp, &privkey);
+        let sk = SecretKey::from_secret_bytes([1u8; 32]).unwrap();
+        let privkey = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key");
+        let pubkey = PublicKey::from_private_key(&privkey);
         let addr = Address::p2pkh(&pubkey, Network::Testnet);
         assert_eq!(
             AddressKind::detect(&addr.to_string()),
diff --git a/src/model/asset_lock.rs b/src/model/asset_lock.rs
index 0ed4c3904..aabbac967 100644
--- a/src/model/asset_lock.rs
+++ b/src/model/asset_lock.rs
@@ -84,6 +84,7 @@ pub(crate) fn confirmed_funding_for_test(
     use platform_wallet::wallet::asset_lock::tracked::{AssetLockStatus, TrackedAssetLock};
     let out_point = OutPoint::new(Txid::from_byte_array([txid_byte; 32]), 0);
     TrackedAssetLock {
+        operation_id: None,
         out_point,
         transaction: Transaction {
             version: 3,
diff --git a/src/model/contract_fee_pots.rs b/src/model/contract_fee_pots.rs
new file mode 100644
index 000000000..77794265f
--- /dev/null
+++ b/src/model/contract_fee_pots.rs
@@ -0,0 +1,181 @@
+//! Who may claim a contract fee pot (protocol version 14).
+
+use std::collections::BTreeSet;
+
+use dash_sdk::dpp::data_contract::DataContract;
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+use dash_sdk::dpp::data_contract::config::v2::DataContractConfigGettersV2;
+use dash_sdk::dpp::data_contract::document_type::action_fees::ContractFeePot;
+use dash_sdk::platform::Identifier;
+
+/// The seated moderation team of an elected contract, read alongside its fee
+/// pots.
+#[derive(Debug, Clone, PartialEq, Eq, Default)]
+pub enum SeatedModerators {
+    /// No charter is seated, so the interim team the contract declares claims
+    /// the moderators pot.
+    #[default]
+    NotSeated,
+    /// A charter is seated: its leader and active members claim the
+    /// moderators pot, and the interim team no longer does.
+    Seated(BTreeSet<Identifier>),
+    /// The team could not be read, so who claims the moderators pot of an
+    /// elected contract is not known on this device.
+    Unknown,
+}
+
+/// The identities that may claim a fee pot.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum PotClaimants {
+    /// Exactly these identities. Empty when nobody may claim.
+    Known(BTreeSet<Identifier>),
+    /// Not known on this device; Platform decides when the claim is sent.
+    Unknown,
+}
+
+impl PotClaimants {
+    /// Whether anyone may claim the pot. `true` when not known.
+    pub fn any(&self) -> bool {
+        match self {
+            PotClaimants::Known(ids) => !ids.is_empty(),
+            PotClaimants::Unknown => true,
+        }
+    }
+
+    /// Whether `identity_id` may claim the pot. `true` when not known.
+    pub fn includes(&self, identity_id: &Identifier) -> bool {
+        match self {
+            PotClaimants::Known(ids) => ids.contains(identity_id),
+            PotClaimants::Unknown => true,
+        }
+    }
+}
+
+/// Whether `contract` declares elected moderation, whose moderators pot goes
+/// to a seated team once a charter is seated.
+pub fn has_elected_moderation(contract: &DataContract) -> bool {
+    contract
+        .config()
+        .moderation()
+        .is_some_and(|moderation| moderation.moderators.elected().is_some())
+}
+
+/// Who may claim `pot` of `contract`, given its seated team: the rule
+/// Platform applies to a claim.
+pub fn pot_claimants(
+    pot: ContractFeePot,
+    contract: &DataContract,
+    seated: &SeatedModerators,
+) -> PotClaimants {
+    let declared = pot.recipients(contract);
+    match pot {
+        ContractFeePot::Owner => PotClaimants::Known(declared),
+        ContractFeePot::Moderators => {
+            moderators_pot_claimants(declared, has_elected_moderation(contract), seated)
+        }
+    }
+}
+
+/// Who may claim the moderators pot: the declared team, except that an
+/// elected contract's seated team replaces its interim team.
+fn moderators_pot_claimants(
+    declared: BTreeSet<Identifier>,
+    elected: bool,
+    seated: &SeatedModerators,
+) -> PotClaimants {
+    if !elected {
+        return PotClaimants::Known(declared);
+    }
+    match seated {
+        SeatedModerators::NotSeated => PotClaimants::Known(declared),
+        SeatedModerators::Seated(team) => PotClaimants::Known(team.clone()),
+        SeatedModerators::Unknown => PotClaimants::Unknown,
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn id(byte: u8) -> Identifier {
+        Identifier::from([byte; 32])
+    }
+
+    /// A member of the seated team claims even when the interim team does not
+    /// name it, and the interim team no longer claims.
+    #[test]
+    fn a_seated_team_replaces_the_interim_team() {
+        let interim = BTreeSet::from([id(1)]);
+        let seated = SeatedModerators::Seated(BTreeSet::from([id(2), id(3)]));
+
+        let claimants = moderators_pot_claimants(interim, true, &seated);
+
+        assert!(claimants.includes(&id(2)));
+        assert!(claimants.includes(&id(3)));
+        assert!(!claimants.includes(&id(1)));
+    }
+
+    /// Until a charter is seated, the interim team claims.
+    #[test]
+    fn the_interim_team_claims_until_a_charter_is_seated() {
+        let interim = BTreeSet::from([id(1)]);
+
+        let claimants =
+            moderators_pot_claimants(interim.clone(), true, &SeatedModerators::NotSeated);
+
+        assert_eq!(claimants, PotClaimants::Known(interim));
+    }
+
+    /// When the team could not be read, nobody is ruled out: Platform decides.
+    #[test]
+    fn an_unread_team_rules_nobody_out() {
+        let claimants =
+            moderators_pot_claimants(BTreeSet::from([id(1)]), true, &SeatedModerators::Unknown);
+
+        assert_eq!(claimants, PotClaimants::Unknown);
+        assert!(claimants.any());
+        assert!(claimants.includes(&id(9)));
+    }
+
+    /// A contract without elected moderation has no seated team: its declared
+    /// team claims whatever was read.
+    #[test]
+    fn a_seated_team_matters_only_for_elected_moderation() {
+        let declared = BTreeSet::from([id(1)]);
+        for seated in [
+            SeatedModerators::Unknown,
+            SeatedModerators::Seated(BTreeSet::from([id(2)])),
+        ] {
+            assert_eq!(
+                moderators_pot_claimants(declared.clone(), false, &seated),
+                PotClaimants::Known(declared.clone()),
+                "{seated:?}"
+            );
+        }
+    }
+
+    /// A contract that declares no moderation: nobody claims its moderators
+    /// pot, its owner claims the owner pot.
+    #[test]
+    fn a_contract_without_moderation_pays_only_its_owner() {
+        let contract = dash_sdk::dpp::system_data_contracts::load_system_data_contract(
+            dash_sdk::dpp::system_data_contracts::SystemDataContract::DPNS,
+            dash_sdk::dpp::version::PlatformVersion::latest(),
+        )
+        .expect("DPNS contract");
+        assert!(!has_elected_moderation(&contract));
+
+        let moderators = pot_claimants(
+            ContractFeePot::Moderators,
+            &contract,
+            &SeatedModerators::Unknown,
+        );
+        assert!(!moderators.any());
+
+        let owner = pot_claimants(ContractFeePot::Owner, &contract, &SeatedModerators::Unknown);
+        assert_eq!(
+            owner,
+            PotClaimants::Known(BTreeSet::from([contract.owner_id()]))
+        );
+    }
+}
diff --git a/src/model/dashpay.rs b/src/model/dashpay.rs
index 56de2a557..3965a56d9 100644
--- a/src/model/dashpay.rs
+++ b/src/model/dashpay.rs
@@ -443,6 +443,8 @@ mod tests {
             properties.insert("toUserId".to_string(), Value::Identifier(to.to_buffer()));
         }
         DppDocument::V0(DocumentV0 {
+            moderated_at: None,
+            moderated_by: None,
             id: id(99),
             owner_id: id(1),
             creator_id: None,
diff --git a/src/model/dashpay_derivation/dip14.rs b/src/model/dashpay_derivation/dip14.rs
index 923a1fc36..1009eaf40 100644
--- a/src/model/dashpay_derivation/dip14.rs
+++ b/src/model/dashpay_derivation/dip14.rs
@@ -1,4 +1,5 @@
 use dash_sdk::dpp::dashcore::Network;
+use dash_sdk::dpp::dashcore::ecdsa::EcdsaPublicKey;
 use dash_sdk::dpp::dashcore::hashes::hmac::{Hmac, HmacEngine};
 use dash_sdk::dpp::dashcore::hashes::sha512;
 /// DIP-14 compliant 256-bit HD key derivation implementation
@@ -6,8 +7,8 @@ use dash_sdk::dpp::dashcore::hashes::sha512;
 /// This module implements Extended Key Derivation using 256-bit Unsigned Integers
 /// as specified in DIP-0014 for DashPay contact relationships.
 use dash_sdk::dpp::dashcore::hashes::{Hash, HashEngine};
-use dash_sdk::dpp::dashcore::secp256k1::{PublicKey, Secp256k1, SecretKey};
 use dash_sdk::dpp::key_wallet::bip32::{ChainCode, ExtendedPrivKey, ExtendedPubKey, Fingerprint};
+use dash_sdk::dpp::secp256k1::SecretKey;
 use dash_sdk::platform::Identifier;
 
 use super::DerivationError;
@@ -22,8 +23,6 @@ pub fn ckd_priv_256(
     index: &[u8; 32], // 256-bit index
     hardened: bool,
 ) -> Result<ExtendedPrivKey, DerivationError> {
-    let secp = Secp256k1::new();
-
     // Check if this is a compatibility mode derivation (index < 2^32)
     let is_compatibility_mode = is_index_less_than_2_32(index);
 
@@ -33,7 +32,7 @@ pub fn ckd_priv_256(
     if hardened {
         // Hardened derivation: 0x00 || ser_256(k_par) || ser(i)
         hmac_engine.input(&[0x00]);
-        hmac_engine.input(&parent_key.private_key.secret_bytes());
+        hmac_engine.input(&*parent_key.private_key.to_bytes());
 
         if is_compatibility_mode {
             // Use ser_32(i) for compatibility
@@ -44,8 +43,8 @@ pub fn ckd_priv_256(
         }
     } else {
         // Non-hardened derivation: ser_P(point(k_par)) || ser(i)
-        let parent_pubkey = parent_key.private_key.public_key(&secp);
-        hmac_engine.input(&parent_pubkey.serialize());
+        let parent_pubkey = parent_key.private_key.public_key();
+        hmac_engine.input(&parent_pubkey.to_compressed());
 
         if is_compatibility_mode {
             // Use ser_32(i) for compatibility
@@ -62,11 +61,15 @@ pub fn ckd_priv_256(
     // Split into I_L (first 32 bytes) and I_R (last 32 bytes)
     let (i_l, i_r) = hmac_bytes.split_at(32);
 
-    // Parse I_L as a private key and add to parent key
-    let i_l_key = SecretKey::from_slice(i_l)?;
+    // Parse I_L as a private key (refusing zero and values >= n) and add it
+    // to the parent key.
+    let i_l: &[u8; 32] = i_l
+        .try_into()
+        .map_err(|_| dash_sdk::dpp::secp256k1::Error::InvalidSecretKey)?;
+    SecretKey::from_secret_bytes(*i_l)?;
 
     // k_i = parse_256(I_L) + k_par (mod n)
-    let child_key = parent_key.private_key.add_tweak(&i_l_key.into())?;
+    let child_key = parent_key.private_key.add_tweak(i_l)?;
 
     // Chain code is I_R (32 bytes)
     let mut chain_code_bytes = [0u8; 32];
@@ -74,7 +77,7 @@ pub fn ckd_priv_256(
     let child_chain_code = ChainCode::from(chain_code_bytes);
 
     // Calculate child fingerprint
-    let parent_pubkey = parent_key.private_key.public_key(&secp);
+    let parent_pubkey = parent_key.private_key.public_key();
     let parent_fingerprint = calculate_fingerprint(&parent_pubkey);
 
     // Create the child extended private key
@@ -113,8 +116,8 @@ pub fn derive_dashpay_incoming_xpub_dip14(
     let base_path = DerivationPath::from_str(&format!("m/9'/{coin_type}'/15'/{account}'"))?;
 
     // Derive to the account level using standard BIP32
-    let secp = Secp256k1::new();
-    let account_xprv = master_xprv.derive_priv(&secp, &base_path)?;
+
+    let account_xprv = master_xprv.derive_priv(&base_path)?;
 
     // Now use DIP-14 256-bit derivation for the identity levels
     // Derive: account_key/(sender_id)
@@ -126,7 +129,7 @@ pub fn derive_dashpay_incoming_xpub_dip14(
     let contact_xprv = ckd_priv_256(&sender_level, &recipient_index, false)?;
 
     // Convert to extended public key
-    Ok(ExtendedPubKey::from_priv(&secp, &contact_xprv))
+    Ok(ExtendedPubKey::from_priv(&contact_xprv))
 }
 
 /// Convert an Identifier to a 256-bit index for DIP-14 derivation
@@ -175,10 +178,10 @@ fn index_to_child_number(
 }
 
 /// Calculate fingerprint for a public key (first 4 bytes of HASH160)
-fn calculate_fingerprint(pubkey: &PublicKey) -> Fingerprint {
+fn calculate_fingerprint(pubkey: &EcdsaPublicKey) -> Fingerprint {
     use dash_sdk::dpp::dashcore::hashes::hash160;
 
-    let hash = hash160::Hash::hash(&pubkey.serialize());
+    let hash = hash160::Hash::hash(&pubkey.to_compressed());
     let mut fingerprint_bytes = [0u8; 4];
     fingerprint_bytes.copy_from_slice(&hash.to_byte_array()[0..4]);
     Fingerprint::from(fingerprint_bytes)
diff --git a/src/model/dashpay_derivation/hd.rs b/src/model/dashpay_derivation/hd.rs
index 9b38fbd8b..cf4a4862b 100644
--- a/src/model/dashpay_derivation/hd.rs
+++ b/src/model/dashpay_derivation/hd.rs
@@ -38,10 +38,8 @@ pub fn derive_payment_address(
     contact_xpub: &ExtendedPubKey,
     index: u32,
 ) -> Result<dash_sdk::dpp::dashcore::Address, DerivationError> {
-    let secp = dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new();
-
     // Derive the specific address key
-    let address_key = contact_xpub.derive_pub(&secp, &[ChildNumber::from_normal_idx(index)?])?;
+    let address_key = contact_xpub.derive_pub(&[ChildNumber::from_normal_idx(index)?])?;
 
     // Convert to Dash address
     // The ExtendedPubKey's public_key is a secp256k1::PublicKey
@@ -72,7 +70,7 @@ pub fn generate_contact_xpub_data(
     let chain_code = xpub.chain_code.to_bytes();
 
     // Get the public key bytes (33 bytes compressed)
-    let public_key_bytes = xpub.public_key.serialize();
+    let public_key_bytes = xpub.public_key.to_compressed();
 
     Ok((parent_fingerprint, chain_code, public_key_bytes))
 }
@@ -96,8 +94,7 @@ pub fn derive_auto_accept_key(
     ))?;
 
     // Derive the key
-    let auto_accept_key =
-        master_xprv.derive_priv(&dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new(), &path)?;
+    let auto_accept_key = master_xprv.derive_priv(&path)?;
 
     Ok(auto_accept_key)
 }
@@ -151,10 +148,7 @@ mod tests {
         let master_seed = [2u8; 64];
 
         let master_xprv = ExtendedPrivKey::new_master(network, &master_seed).unwrap();
-        let xpub = ExtendedPubKey::from_priv(
-            &dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new(),
-            &master_xprv,
-        );
+        let xpub = ExtendedPubKey::from_priv(&master_xprv);
 
         let account_ref = calculate_account_reference(&secret_key, &xpub, 0, 0);
 
@@ -255,8 +249,8 @@ mod tests {
 
         // Different timestamps should produce different keys
         assert_ne!(
-            key1.private_key.secret_bytes(),
-            key2.private_key.secret_bytes(),
+            key1.private_key.to_bytes(),
+            key2.private_key.to_bytes(),
             "Different timestamps should produce different keys"
         );
     }
@@ -300,8 +294,8 @@ mod tests {
         let master_seed = [2u8; 64];
 
         let master_xprv = ExtendedPrivKey::new_master(network, &master_seed).unwrap();
-        let secp = dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new();
-        let xpub = ExtendedPubKey::from_priv(&secp, &master_xprv);
+
+        let xpub = ExtendedPubKey::from_priv(&master_xprv);
 
         // Test version 0
         let ref_v0 = calculate_account_reference(&secret_key, &xpub, 0, 0);
@@ -335,8 +329,8 @@ mod tests {
                 .expect("Should derive xpub for account 1");
 
         assert_ne!(
-            xpub_account0.public_key.serialize(),
-            xpub_account1.public_key.serialize(),
+            xpub_account0.public_key.to_compressed(),
+            xpub_account1.public_key.to_compressed(),
             "Different accounts should produce different xpubs"
         );
     }
@@ -373,8 +367,8 @@ mod tests {
         assert_eq!(xpub_testnet.network, Network::Testnet);
         assert_eq!(xpub_mainnet.network, Network::Mainnet);
         assert_ne!(
-            xpub_testnet.public_key.serialize(),
-            xpub_mainnet.public_key.serialize(),
+            xpub_testnet.public_key.to_compressed(),
+            xpub_mainnet.public_key.to_compressed(),
             "different coin types must produce different keys"
         );
     }
diff --git a/src/model/dashpay_derivation/mod.rs b/src/model/dashpay_derivation/mod.rs
index 4363ffe6a..24a2aaad5 100644
--- a/src/model/dashpay_derivation/mod.rs
+++ b/src/model/dashpay_derivation/mod.rs
@@ -24,5 +24,9 @@ pub enum DerivationError {
 
     /// A secp256k1 operation on derived key material failed.
     #[error("The wallet key material could not be processed. The wallet data may be invalid.")]
-    Secp256k1(#[from] dash_sdk::dpp::dashcore::secp256k1::Error),
+    Secp256k1(#[from] dash_sdk::dpp::secp256k1::Error),
+
+    /// An ECDSA operation on derived key material failed.
+    #[error("The wallet key material could not be processed. The wallet data may be invalid.")]
+    Ecdsa(#[from] dash_sdk::dpp::dashcore::ecdsa::EcdsaError),
 }
diff --git a/src/model/dpns_usernames.rs b/src/model/dpns_usernames.rs
index 9ad25f5de..8505dbff5 100644
--- a/src/model/dpns_usernames.rs
+++ b/src/model/dpns_usernames.rs
@@ -116,20 +116,49 @@ impl SeenMarkAttempts {
     }
 }
 
-/// Whether `key` may sign documents that require `required` security: an enabled
-/// authentication key at least as strong as required, and never a master key.
+/// Whether `key` may sign documents that require `required` security: an enabled,
+/// unexpired authentication key at least as strong as required, and never a master
+/// key. The rule for choosing a key automatically.
 pub fn key_can_sign_documents(
     key: &dash_sdk::platform::IdentityPublicKey,
     required: dash_sdk::dpp::identity::SecurityLevel,
+) -> bool {
+    chosen_key_can_sign_documents(key, required)
+        && super::identity_key_usability::is_auto_selectable(
+            key,
+            dpns_signing_scope(),
+            super::identity_key_usability::now_ms(),
+        )
+}
+
+/// Whether the user may sign documents that require `required` security with
+/// `key` they chose: an enabled authentication key at least as strong as
+/// required, never a master key, and not bound to another contract.
+///
+/// Unlike [`key_can_sign_documents`], an expired key is allowed: the key chooser
+/// offers it with a warning, and whether it has expired is Platform's call by
+/// network time, not this device's clock.
+pub fn chosen_key_can_sign_documents(
+    key: &dash_sdk::platform::IdentityPublicKey,
+    required: dash_sdk::dpp::identity::SecurityLevel,
 ) -> bool {
     use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
     use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
     key.purpose() == Purpose::AUTHENTICATION
         && !key.is_disabled()
+        && super::identity_key_usability::bounds_permit(key.contract_bounds(), dpns_signing_scope())
+            == Some(true)
         && key.security_level() != SecurityLevel::MASTER
         && key.security_level() <= required
 }
 
+/// The scope a username registration signs in: the DPNS contract.
+fn dpns_signing_scope() -> super::identity_key_usability::SigningScope<'static> {
+    super::identity_key_usability::SigningScope::ContractWide {
+        contract_id: dash_sdk::dpp::system_data_contracts::SystemDataContract::DPNS.id(),
+    }
+}
+
 /// The weakest key security level that may sign both DPNS documents a registration
 /// creates (preorder and domain); falls back to `HIGH` if the contract lacks them.
 pub fn dpns_signing_requirement(
@@ -1176,6 +1205,43 @@ mod tests {
         ));
     }
 
+    /// A key the user picked stays usable after it expires: the chooser offers
+    /// it with a warning, and Platform decides by network time. Automatic
+    /// choice still skips it. The other rules hold for both.
+    #[test]
+    fn a_chosen_key_is_not_refused_for_its_expiry() {
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+        use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
+        let key = |purpose, level| {
+            let mut key = dash_sdk::platform::IdentityPublicKey::random_key(
+                1,
+                Some(1),
+                dash_sdk::dpp::version::PlatformVersion::latest(),
+            );
+            key.set_purpose(purpose);
+            key.set_security_level(level);
+            key.with_limits(None, Some(1))
+        };
+        let high = SecurityLevel::HIGH;
+        let expired = key(Purpose::AUTHENTICATION, high);
+        assert!(!key_can_sign_documents(&expired, high));
+        assert!(chosen_key_can_sign_documents(&expired, high));
+
+        for refused in [
+            key(Purpose::AUTHENTICATION, SecurityLevel::MEDIUM),
+            key(Purpose::AUTHENTICATION, SecurityLevel::MASTER),
+            key(Purpose::TRANSFER, SecurityLevel::CRITICAL),
+        ] {
+            assert!(
+                !chosen_key_can_sign_documents(&refused, high),
+                "{refused:?}"
+            );
+        }
+        let mut disabled = key(Purpose::AUTHENTICATION, high);
+        disabled.set_disabled_at(1);
+        assert!(!chosen_key_can_sign_documents(&disabled, high));
+    }
+
     /// A testnet identity publishing `published` keys and holding `held` of them.
     fn identity_with_keys(
         published: &[(u32, dash_sdk::dpp::identity::SecurityLevel)],
diff --git a/src/model/fee_estimation.rs b/src/model/fee_estimation.rs
index 9919d97d6..a82b10aa3 100644
--- a/src/model/fee_estimation.rs
+++ b/src/model/fee_estimation.rs
@@ -19,7 +19,6 @@ use dash_sdk::dpp::address_funds::{AddressFundsFeeStrategyStep, PlatformAddress}
 use dash_sdk::dpp::balances::credits::{CREDITS_PER_DUFF, Credits};
 use dash_sdk::dpp::identity::core_script::CoreScript;
 use dash_sdk::dpp::prelude::{AddressNonce, AssetLockProof};
-use dash_sdk::dpp::state_transition::StateTransitionEstimatedFeeValidation;
 use dash_sdk::dpp::state_transition::address_credit_withdrawal_transition::AddressCreditWithdrawalTransition;
 use dash_sdk::dpp::state_transition::address_credit_withdrawal_transition::v0::AddressCreditWithdrawalTransitionV0;
 use dash_sdk::dpp::state_transition::address_funding_from_asset_lock_transition::v0::AddressFundingFromAssetLockTransitionV0;
@@ -33,10 +32,37 @@ use dash_sdk::dpp::state_transition::identity_topup_transition::IdentityTopUpTra
 use dash_sdk::dpp::state_transition::identity_topup_transition::v0::IdentityTopUpTransitionV0;
 use dash_sdk::dpp::state_transition::public_key_in_creation::IdentityPublicKeyInCreation;
 
+/// Keep contested document creation within the protocol's base fund, without auto-quoting a larger fund.
+pub fn document_create_contest_fund_cap(
+    document_type: dash_sdk::dpp::data_contract::document_type::DocumentTypeRef<'_>,
+    document: &dash_sdk::dpp::document::Document,
+    platform_version: &PlatformVersion,
+) -> Result<Option<Credits>, Box<dash_sdk::dpp::ProtocolError>> {
+    use dash_sdk::dpp::data_contract::document_type::methods::{
+        DocumentTypeBasicMethods, DocumentTypeV0Methods,
+    };
+    use dash_sdk::dpp::document::DocumentV0Getters;
+    let mut document = document.clone();
+    document_type.regenerate_generated_properties(document.properties_mut(), platform_version)?;
+    Ok(document_type
+        .contested_vote_poll_for_document(&document, platform_version)?
+        .map(|_| contest_fee_credits(platform_version)))
+}
+
 /// Subtract an estimated fee from a credit balance without floating-point conversion.
 pub const fn max_spendable_credits(balance: u64, estimated_fee: u64) -> u64 {
     balance.saturating_sub(estimated_fee)
 }
+use dash_sdk::dpp::data_contract::document_type::DocumentTypeRef;
+use dash_sdk::dpp::data_contract::document_type::accessors::DocumentTypeV2Getters;
+use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::{
+    AgreedFeeMultiplier, DocumentActionFeeAgreement,
+};
+use dash_sdk::dpp::prelude::FeeMultiplier;
+use dash_sdk::dpp::state_transition::{
+    StateTransitionEstimatedFeeValidation,
+    batch_transition::batched_transition::document_transition_action_type::DocumentTransitionActionType,
+};
 use dash_sdk::dpp::version::PlatformVersion;
 use dash_sdk::dpp::withdrawal::Pooling;
 use std::collections::BTreeMap;
@@ -1333,10 +1359,339 @@ pub fn shield_from_balance_fee_headroom(
     base_fee.saturating_mul(multiplier) / 1000
 }
 
+/// How far above the fee multiplier the user saw a document action fee may be
+/// priced when it executes, in percent: a transition signed just before an
+/// epoch boundary is not refused for a small move. Platform refuses the action
+/// when the executing epoch's multiplier is higher still, so the user never
+/// pays more than [`DocumentActionFeeQuote::max_total`].
+pub const ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT: u16 = 20;
+
+/// What a document action charges on top of the gas, as a document type
+/// declares it (protocol version 14 `actionFees`), and the agreement the
+/// transition must carry to be accepted.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct DocumentActionFeeQuote {
+    /// The agreement to sign: the declared amounts and, for a fee priced by
+    /// the fee multiplier, the multiplier the user saw plus the tolerance.
+    pub agreement: DocumentActionFeeAgreement,
+    /// The part going to the contract owner, priced at the multiplier the
+    /// user saw.
+    pub owner: Credits,
+    /// The part going to the contract's moderators, priced at the multiplier
+    /// the user saw.
+    pub moderators: Credits,
+    /// The whole fee at the multiplier the user saw.
+    pub total: Credits,
+    /// The most the fee can be when the action executes: at the highest
+    /// multiplier the agreement tolerates, or the declared amount for a fixed
+    /// fee.
+    pub max_total: Credits,
+}
+
+/// The action fee `document_type` charges for `action` at the epoch fee
+/// multiplier `fee_multiplier_permille`, or `None` when it charges nothing
+/// (always, before protocol version 14).
+pub fn document_action_fee_quote(
+    document_type: DocumentTypeRef<'_>,
+    action: DocumentTransitionActionType,
+    fee_multiplier_permille: u64,
+) -> Option<DocumentActionFeeQuote> {
+    let fees = document_type.action_fees()?;
+    let declared = fees.action_fee(action)?;
+    let pricing = fees.pricing();
+    let known_permille: FeeMultiplier = fee_multiplier_permille;
+    let agreement = DocumentActionFeeAgreement::for_declared_fee(
+        pricing,
+        declared,
+        AgreedFeeMultiplier {
+            known_permille,
+            increase_tolerance_percent: ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT,
+        },
+    );
+    // `charged` saturates at the maximum credits rather than overflowing, so
+    // it cannot fail; a fee that large is refused by Platform as unaffordable.
+    let now = declared
+        .charged(pricing, known_permille)
+        .unwrap_or(declared);
+    let highest_permille = known_permille
+        .saturating_mul(100 + u64::from(ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT))
+        / 100;
+    let at_most = declared
+        .charged(pricing, highest_permille)
+        .unwrap_or(declared);
+    Some(DocumentActionFeeQuote {
+        agreement,
+        owner: now.owner,
+        moderators: now.moderators,
+        total: now.saturating_total(),
+        max_total: at_most.saturating_total(),
+    })
+}
+
+/// Why a document action cannot carry the fee agreement it was given.
+#[derive(Debug, Clone, PartialEq, Eq, thiserror::Error)]
+pub enum ActionFeeAgreementError {
+    /// The document type charges a fee for the action and no agreement was
+    /// given: the user never confirmed it.
+    #[error(
+        "This contract charges a fee for this action, and you have not confirmed it yet. Try again and confirm the contract fee when asked."
+    )]
+    NotConfirmed,
+    /// The agreement names another fee than the document type declares, so
+    /// the contract changed after the user confirmed.
+    #[error(
+        "The contract fee for this action changed after you confirmed it. Try again to see and confirm the current fee."
+    )]
+    Outdated,
+}
+
+/// The fee agreement a document action may carry: exactly the one the user
+/// confirmed (`agreed`), checked against what `document_type` declares for
+/// `action`. A charged fee without an agreement is refused — the agreement
+/// is never derived on the user's behalf — and so is an agreement to another
+/// fee. A type that charges nothing for the action carries none.
+pub fn checked_action_fee_agreement(
+    document_type: DocumentTypeRef<'_>,
+    action: DocumentTransitionActionType,
+    agreed: Option<DocumentActionFeeAgreement>,
+) -> Result<Option<DocumentActionFeeAgreement>, ActionFeeAgreementError> {
+    let declared = document_type
+        .action_fees()
+        .and_then(|fees| fees.action_fee(action).map(|fee| (fees.pricing(), fee)));
+    match (declared, agreed) {
+        (None, _) => Ok(None),
+        (Some(_), None) => Err(ActionFeeAgreementError::NotConfirmed),
+        (Some((pricing, fee)), Some(agreement)) if agreement.matches_declared(pricing, fee) => {
+            Ok(Some(agreement))
+        }
+        (Some(_), Some(_)) => Err(ActionFeeAgreementError::Outdated),
+    }
+}
+
+#[cfg(test)]
+mod action_fee_tests {
+    use super::*;
+    use dash_sdk::dpp::data_contract::config::DataContractConfig;
+    use dash_sdk::dpp::data_contract::document_type::DocumentType;
+    use dash_sdk::dpp::platform_value::{Identifier, Value, platform_value};
+
+    /// A document type declaring `action_fees`, parsed as Platform parses it.
+    fn document_type_with(action_fees: Option<Value>) -> DocumentType {
+        let pv = PlatformVersion::latest();
+        let mut schema = platform_value!({
+            "type": "object",
+            "properties": {"a": {"type": "string", "position": 0, "maxLength": 60_u32}},
+            "additionalProperties": false,
+        });
+        if let Some(action_fees) = action_fees {
+            schema
+                .insert("actionFees".to_string(), action_fees)
+                .expect("a map schema");
+        }
+        let config = DataContractConfig::default_for_version(pv).expect("a default config");
+        DocumentType::try_from_schema(
+            Identifier::new([1; 32]),
+            1,
+            config.version(),
+            "post",
+            schema,
+            None,
+            &BTreeMap::new(),
+            &config,
+            true,
+            &mut Vec::new(),
+            pv,
+        )
+        .expect("the document type parses")
+    }
+
+    /// A charged fee is never agreed on the user's behalf.
+    #[test]
+    fn a_charged_fee_without_an_agreement_is_refused() {
+        let doc_type = document_type_with(Some(platform_value!({"create": {"owner": 5_u64}})));
+        assert_eq!(
+            checked_action_fee_agreement(
+                doc_type.as_ref(),
+                DocumentTransitionActionType::Create,
+                None
+            ),
+            Err(ActionFeeAgreementError::NotConfirmed)
+        );
+    }
+
+    #[test]
+    fn the_confirmed_agreement_is_carried_as_is() {
+        let doc_type = document_type_with(Some(platform_value!({"create": {"owner": 5_u64}})));
+        let agreed = document_action_fee_quote(
+            doc_type.as_ref(),
+            DocumentTransitionActionType::Create,
+            1000,
+        )
+        .expect("create is priced")
+        .agreement;
+        assert_eq!(
+            checked_action_fee_agreement(
+                doc_type.as_ref(),
+                DocumentTransitionActionType::Create,
+                Some(agreed)
+            ),
+            Ok(Some(agreed))
+        );
+    }
+
+    /// An agreement to another fee means the contract changed since the
+    /// user confirmed: refused before signing, not sent to be refused.
+    #[test]
+    fn an_agreement_to_another_fee_is_outdated() {
+        let before = document_type_with(Some(platform_value!({"create": {"owner": 5_u64}})));
+        let after = document_type_with(Some(platform_value!({"create": {"owner": 9_u64}})));
+        let agreed =
+            document_action_fee_quote(before.as_ref(), DocumentTransitionActionType::Create, 1000)
+                .expect("create is priced")
+                .agreement;
+        assert_eq!(
+            checked_action_fee_agreement(
+                after.as_ref(),
+                DocumentTransitionActionType::Create,
+                Some(agreed)
+            ),
+            Err(ActionFeeAgreementError::Outdated)
+        );
+    }
+
+    #[test]
+    fn an_uncharged_action_carries_no_agreement() {
+        let doc_type = document_type_with(Some(platform_value!({"delete": {"owner": 5_u64}})));
+        assert_eq!(
+            checked_action_fee_agreement(
+                doc_type.as_ref(),
+                DocumentTransitionActionType::Create,
+                None
+            ),
+            Ok(None)
+        );
+    }
+
+    #[test]
+    fn a_document_type_without_action_fees_quotes_nothing() {
+        let doc_type = document_type_with(None);
+        assert_eq!(
+            document_action_fee_quote(
+                doc_type.as_ref(),
+                DocumentTransitionActionType::Create,
+                1000
+            ),
+            None
+        );
+    }
+
+    #[test]
+    fn an_action_the_type_does_not_price_quotes_nothing() {
+        let doc_type = document_type_with(Some(platform_value!({"delete": {"owner": 5_u64}})));
+        assert_eq!(
+            document_action_fee_quote(
+                doc_type.as_ref(),
+                DocumentTransitionActionType::Create,
+                1000
+            ),
+            None
+        );
+    }
+
+    #[test]
+    fn a_multiplier_priced_fee_scales_and_names_the_tolerance() {
+        let doc_type = document_type_with(Some(platform_value!({
+            "create": {"owner": 10_000_000_u64, "moderators": 0_u64},
+        })));
+        let quote = document_action_fee_quote(
+            doc_type.as_ref(),
+            DocumentTransitionActionType::Create,
+            1500,
+        )
+        .expect("create is priced");
+
+        assert_eq!(quote.owner, 15_000_000, "1.5x the declared owner part");
+        assert_eq!(quote.moderators, 0);
+        assert_eq!(quote.total, 15_000_000);
+        assert_eq!(
+            quote.max_total, 18_000_000,
+            "the tolerated 20% above the multiplier the user saw"
+        );
+        assert_eq!(quote.agreement.owner(), 10_000_000, "declared, not scaled");
+        let terms = quote
+            .agreement
+            .fee_multiplier()
+            .expect("a multiplier-priced fee names its terms");
+        assert_eq!(terms.known_permille, 1500);
+        assert_eq!(
+            terms.increase_tolerance_percent,
+            ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT
+        );
+    }
+
+    #[test]
+    fn a_fixed_fee_is_charged_as_declared() {
+        let doc_type = document_type_with(Some(platform_value!({
+            "pricing": "fixed",
+            "transfer": {"owner": 7_000_u64},
+        })));
+        let quote = document_action_fee_quote(
+            doc_type.as_ref(),
+            DocumentTransitionActionType::Transfer,
+            3000,
+        )
+        .expect("transfer is priced");
+
+        assert_eq!(quote.total, 7_000);
+        assert_eq!(
+            quote.max_total, 7_000,
+            "a fixed fee does not follow the multiplier"
+        );
+        assert_eq!(quote.agreement.fee_multiplier(), None);
+    }
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
 
+    #[test]
+    fn document_contest_cap_preserves_ordinary_creates_and_caps_contested_names() {
+        use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+        use dash_sdk::dpp::platform_value::Value;
+        use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+        use dash_sdk::platform::Identifier;
+        for version in [13, 14] {
+            let pv = PlatformVersion::get(version).unwrap();
+            let contract = load_system_data_contract(SystemDataContract::DPNS, pv).unwrap();
+            let owner = Identifier::from([1; 32]);
+            let document = crate::context::test_support::dpns_name_document(
+                owner,
+                "alice",
+                Value::Identifier(owner.to_buffer()),
+            );
+            let domain = contract.document_type_for_name("domain").unwrap();
+            assert_eq!(
+                document_create_contest_fund_cap(domain, &document, pv).unwrap(),
+                Some(contest_fee_credits(pv))
+            );
+            let preorder = contract.document_type_for_name("preorder").unwrap();
+            assert_eq!(
+                document_create_contest_fund_cap(preorder, &document, pv).unwrap(),
+                None
+            );
+            let ordinary = crate::context::test_support::dpns_name_document(
+                owner,
+                "alice-123",
+                Value::Identifier(owner.to_buffer()),
+            );
+            assert_eq!(
+                document_create_contest_fund_cap(domain, &ordinary, pv).unwrap(),
+                None
+            );
+        }
+    }
+
     #[test]
     fn contest_fee_follows_protocol_version() {
         // USR-TC-005
@@ -2080,12 +2435,10 @@ mod tests {
     fn any_core_address() -> Address {
         use dash_sdk::dpp::dashcore::Network;
         use dash_sdk::dpp::dashcore::PublicKey;
-        use dash_sdk::dpp::dashcore::secp256k1::{
-            PublicKey as SecpPublicKey, Secp256k1, SecretKey,
-        };
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[1u8; 32]).expect("valid secret key");
-        let pubkey = PublicKey::from_slice(&SecpPublicKey::from_secret_key(&secp, &sk).serialize())
+        use dash_sdk::dpp::secp256k1::{PublicKey as SecpPublicKey, SecretKey};
+
+        let sk = SecretKey::from_secret_bytes([1u8; 32]).expect("valid secret key");
+        let pubkey = PublicKey::from_slice(&SecpPublicKey::from_secret_key(&sk).serialize())
             .expect("valid pubkey");
         Address::p2pkh(&pubkey, Network::Testnet)
     }
diff --git a/src/model/identity_key_limits.rs b/src/model/identity_key_limits.rs
new file mode 100644
index 000000000..9537cda68
--- /dev/null
+++ b/src/model/identity_key_limits.rs
@@ -0,0 +1,773 @@
+//! Spending limits and expiry of identity authentication keys (protocol
+//! version 14): pure validation for adding a key with limits and for raising
+//! the limits of an existing key.
+//!
+//! The rules mirror Platform's so a request it would refuse — and still charge
+//! for — is refused here for free:
+//! - only AUTHENTICATION keys below MASTER may carry limits;
+//! - a budget must be above zero, and an expiry in the future;
+//! - an update only raises limits the key already has: a budget grows, an
+//!   expiry moves later, and neither can be added to a key without it;
+//! - after an update the key must be usable, so an expired key can be
+//!   extended but not only topped up.
+
+use dash_sdk::dpp::fee::Credits;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
+use dash_sdk::dpp::identity::{IdentityPublicKey, KeyID, Purpose, SecurityLevel, TimestampMillis};
+use std::collections::BTreeMap;
+use thiserror::Error;
+
+/// Milliseconds in one day.
+pub const DAY_MS: u64 = 24 * 60 * 60 * 1000;
+
+/// The longest validity, in days, a key can be given or extended by at once
+/// (about 100 years). Guards against typos, not a Platform rule.
+pub const MAX_KEY_VALIDITY_DAYS: u32 = 36_500;
+
+/// Why key limits cannot be set or raised as requested.
+#[derive(Debug, Clone, PartialEq, Eq, Error)]
+pub enum KeyLimitsError {
+    #[error(
+        "Only authentication keys below the master level can have a spending limit or an expiry. Choose such a key, or remove the limits."
+    )]
+    NotAllowedForKey {
+        purpose: Purpose,
+        security_level: SecurityLevel,
+    },
+    #[error("A spending limit must be above zero. Enter a larger limit, or remove it.")]
+    ZeroBudget,
+    #[error("Enter the number of days as a whole number, for example 30.")]
+    DaysNotANumber,
+    #[error("The number of days must be at least 1. Enter a larger number.")]
+    ZeroDays,
+    #[error("The number of days can be at most {max}. Enter a smaller number.")]
+    TooManyDays { max: u32 },
+    #[error("This key is disabled, so its limits cannot be changed.")]
+    KeyDisabled,
+    #[error(
+        "Enter an amount to add to the spending limit or a number of days to extend the expiry."
+    )]
+    NothingToRaise,
+    #[error(
+        "This key has no spending limit to raise. A spending limit can only be raised, not added to a key."
+    )]
+    NoBudgetToRaise,
+    #[error(
+        "This key has no expiry to extend. An expiry can only be extended, not added to a key."
+    )]
+    NoExpiryToExtend,
+    #[error("The amount to add to the spending limit is too large. Enter a smaller amount.")]
+    BudgetOverflow,
+    #[error("The new expiry is too far in the future. Enter fewer days.")]
+    ExpiryOverflow,
+    #[error(
+        "This key has expired, so raising its spending limit alone would not make it usable. Extend its expiry as well."
+    )]
+    StillExpired,
+    #[error("The key's expiry must be in the future. Choose a later expiry.")]
+    ExpiryNotInFuture,
+    #[error(
+        "This key's limits changed after you reviewed them. Review the new limits and confirm again."
+    )]
+    LimitsChanged,
+    #[error(
+        "The key chosen to approve this change can no longer approve it, because this identity's keys changed. Review the change again and confirm it."
+    )]
+    SignerChanged,
+    #[error(
+        "Key limits can only be raised. Enter an amount to add to the spending limit or a number of days to extend the expiry."
+    )]
+    NotARaise,
+}
+
+/// Whether a key of this purpose and security level may carry limits.
+pub fn limits_allowed(purpose: Purpose, security_level: SecurityLevel) -> bool {
+    purpose == Purpose::AUTHENTICATION && security_level != SecurityLevel::MASTER
+}
+
+/// Whether a key of this purpose and security level may be bound to a
+/// contract: encryption and decryption keys always (per the contract's own
+/// rules), authentication keys below MASTER only where the network admits
+/// bound authentication keys (`bound_authentication_supported`).
+pub fn contract_bounds_allowed(
+    purpose: Purpose,
+    security_level: SecurityLevel,
+    bound_authentication_supported: bool,
+) -> bool {
+    match purpose {
+        Purpose::ENCRYPTION | Purpose::DECRYPTION => true,
+        Purpose::AUTHENTICATION => {
+            bound_authentication_supported && security_level != SecurityLevel::MASTER
+        }
+        _ => false,
+    }
+}
+
+/// Check the limits a key to be added carries, as Platform will.
+pub fn validate_key_limits(
+    key: &IdentityPublicKey,
+    now_ms: TimestampMillis,
+) -> Result<(), KeyLimitsError> {
+    if !key.has_limits() {
+        return Ok(());
+    }
+    if !limits_allowed(key.purpose(), key.security_level()) {
+        return Err(KeyLimitsError::NotAllowedForKey {
+            purpose: key.purpose(),
+            security_level: key.security_level(),
+        });
+    }
+    if key.total_budget() == Some(0) {
+        return Err(KeyLimitsError::ZeroBudget);
+    }
+    if key
+        .expires_at()
+        .is_some_and(|expires_at| expires_at <= now_ms)
+    {
+        return Err(KeyLimitsError::ExpiryNotInFuture);
+    }
+    Ok(())
+}
+
+/// The key to sign a key limits update with: an enabled MASTER
+/// authentication key, else an enabled CRITICAL authentication key with no
+/// limits and no contract bounds — among those `can_sign` accepts. Platform
+/// refuses any other signer.
+pub fn key_limits_update_signer<'a>(
+    keys: impl IntoIterator<Item = &'a IdentityPublicKey>,
+    can_sign: impl Fn(&IdentityPublicKey) -> bool,
+) -> Option<&'a IdentityPublicKey> {
+    let candidates: Vec<&IdentityPublicKey> = keys
+        .into_iter()
+        .filter(|key| may_sign_key_limits_update(key) && can_sign(key))
+        .collect();
+    let master = candidates
+        .iter()
+        .find(|key| key.security_level() == SecurityLevel::MASTER);
+    let critical = candidates
+        .iter()
+        .find(|key| key.security_level() == SecurityLevel::CRITICAL);
+    master.or(critical).copied()
+}
+
+/// Whether Platform accepts `key` as the signer of a key limits update: an
+/// enabled MASTER authentication key, or an enabled CRITICAL one with no
+/// limits and no contract bounds.
+fn may_sign_key_limits_update(key: &IdentityPublicKey) -> bool {
+    key.purpose() == Purpose::AUTHENTICATION
+        && key.disabled_at().is_none()
+        && match key.security_level() {
+            SecurityLevel::MASTER => true,
+            SecurityLevel::CRITICAL => !key.has_limits() && key.contract_bounds().is_none(),
+            _ => false,
+        }
+}
+
+/// Why the signer a key limits update was reviewed with cannot sign it.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum ReviewedSignerUnusable {
+    /// Another key of the identity can sign the update: the user must review
+    /// it again with that signer.
+    SignerChanged,
+    /// No key of the identity that this device holds can sign the update.
+    NoSigner,
+}
+
+/// The signer the user reviewed (`signing_key_id`), as `keys` (the identity
+/// as Platform holds it now) has it — if Platform still accepts it as the
+/// signer of a key limits update and `can_sign` holds. Never substitutes
+/// another key: a different signer needs a fresh review.
+pub fn reviewed_key_limits_signer(
+    keys: &BTreeMap<KeyID, IdentityPublicKey>,
+    signing_key_id: KeyID,
+    can_sign: impl Fn(&IdentityPublicKey) -> bool,
+) -> Result<&IdentityPublicKey, ReviewedSignerUnusable> {
+    if let Some(key) = keys
+        .get(&signing_key_id)
+        .filter(|key| may_sign_key_limits_update(key) && can_sign(key))
+    {
+        return Ok(key);
+    }
+    match key_limits_update_signer(keys.values(), can_sign) {
+        Some(_) => Err(ReviewedSignerUnusable::SignerChanged),
+        None => Err(ReviewedSignerUnusable::NoSigner),
+    }
+}
+
+/// Parse a whole number of days between 1 and [`MAX_KEY_VALIDITY_DAYS`].
+pub fn parse_key_validity_days(input: &str) -> Result<u32, KeyLimitsError> {
+    let days: u32 = input
+        .trim()
+        .parse()
+        .map_err(|_| KeyLimitsError::DaysNotANumber)?;
+    match days {
+        0 => Err(KeyLimitsError::ZeroDays),
+        days if days > MAX_KEY_VALIDITY_DAYS => Err(KeyLimitsError::TooManyDays {
+            max: MAX_KEY_VALIDITY_DAYS,
+        }),
+        days => Ok(days),
+    }
+}
+
+fn days_after(from_ms: TimestampMillis, days: u32) -> Result<TimestampMillis, KeyLimitsError> {
+    u64::from(days)
+        .checked_mul(DAY_MS)
+        .and_then(|span| from_ms.checked_add(span))
+        .ok_or(KeyLimitsError::ExpiryOverflow)
+}
+
+/// The limits for a new key: `total_budget` credits, and an expiry
+/// `validity_days` after `now_ms`. `(None, None)` means no limits.
+pub fn new_key_limits(
+    purpose: Purpose,
+    security_level: SecurityLevel,
+    total_budget: Option<Credits>,
+    validity_days: Option<u32>,
+    now_ms: TimestampMillis,
+) -> Result<(Option<Credits>, Option<TimestampMillis>), KeyLimitsError> {
+    if total_budget.is_none() && validity_days.is_none() {
+        return Ok((None, None));
+    }
+    if !limits_allowed(purpose, security_level) {
+        return Err(KeyLimitsError::NotAllowedForKey {
+            purpose,
+            security_level,
+        });
+    }
+    if total_budget == Some(0) {
+        return Err(KeyLimitsError::ZeroBudget);
+    }
+    let expires_at = validity_days
+        .map(|days| match days {
+            0 => Err(KeyLimitsError::ZeroDays),
+            days if days > MAX_KEY_VALIDITY_DAYS => Err(KeyLimitsError::TooManyDays {
+                max: MAX_KEY_VALIDITY_DAYS,
+            }),
+            days => days_after(now_ms, days),
+        })
+        .transpose()?;
+    Ok((total_budget, expires_at))
+}
+
+/// The absolute limits to request for raising `key`'s: `add_budget` credits
+/// more in total, and an expiry `extend_days` later — counted from the
+/// current expiry, or from `now_ms` when the key has already expired.
+pub fn raised_key_limits(
+    key: &IdentityPublicKey,
+    add_budget: Option<Credits>,
+    extend_days: Option<u32>,
+    now_ms: TimestampMillis,
+) -> Result<(Option<Credits>, Option<TimestampMillis>), KeyLimitsError> {
+    if key.disabled_at().is_some() {
+        return Err(KeyLimitsError::KeyDisabled);
+    }
+    if add_budget.is_none() && extend_days.is_none() {
+        return Err(KeyLimitsError::NothingToRaise);
+    }
+
+    let total_budget = add_budget
+        .map(|amount| {
+            let current = key.total_budget().ok_or(KeyLimitsError::NoBudgetToRaise)?;
+            if amount == 0 {
+                return Err(KeyLimitsError::ZeroBudget);
+            }
+            current
+                .checked_add(amount)
+                .ok_or(KeyLimitsError::BudgetOverflow)
+        })
+        .transpose()?;
+
+    let expires_at = extend_days
+        .map(|days| {
+            let current = key.expires_at().ok_or(KeyLimitsError::NoExpiryToExtend)?;
+            if days == 0 {
+                return Err(KeyLimitsError::ZeroDays);
+            }
+            if days > MAX_KEY_VALIDITY_DAYS {
+                return Err(KeyLimitsError::TooManyDays {
+                    max: MAX_KEY_VALIDITY_DAYS,
+                });
+            }
+            days_after(current.max(now_ms), days)
+        })
+        .transpose()?;
+
+    // After the update the key must be usable: the expiry it will have is
+    // the new one, or the current one when it is not extended.
+    if let Some(expiry_after) = expires_at.or(key.expires_at())
+        && expiry_after <= now_ms
+    {
+        return Err(KeyLimitsError::StillExpired);
+    }
+
+    Ok((total_budget, expires_at))
+}
+
+/// A limits raise the user reviewed: the key's limits as shown, the
+/// absolute limits to set, and the key that signs the change. It is sent as
+/// is, never recomputed: if the key's limits moved meanwhile, the raise is
+/// refused and quoted again.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct KeyLimitsRaise {
+    pub key_id: KeyID,
+    pub seen_total_budget: Option<Credits>,
+    pub seen_expires_at: Option<TimestampMillis>,
+    /// The new total budget, `None` to leave it.
+    pub total_budget: Option<Credits>,
+    /// The new expiry, `None` to leave it.
+    pub expires_at: Option<TimestampMillis>,
+    pub signing_key_id: KeyID,
+}
+
+impl KeyLimitsRaise {
+    /// Quote a raise of `key` by `add_budget` credits and/or `extend_days`
+    /// days (see [`raised_key_limits`]), signed by `signing_key_id`.
+    pub fn quote(
+        key: &IdentityPublicKey,
+        add_budget: Option<Credits>,
+        extend_days: Option<u32>,
+        signing_key_id: KeyID,
+        now_ms: TimestampMillis,
+    ) -> Result<Self, KeyLimitsError> {
+        let (total_budget, expires_at) = raised_key_limits(key, add_budget, extend_days, now_ms)?;
+        Ok(Self {
+            key_id: key.id(),
+            seen_total_budget: key.total_budget(),
+            seen_expires_at: key.expires_at(),
+            total_budget,
+            expires_at,
+            signing_key_id,
+        })
+    }
+
+    /// Check the raise against `live`, the key as Platform holds it now: its
+    /// limits must still be the ones reviewed, and the key must still be
+    /// usable after the change.
+    pub fn check_against(
+        &self,
+        live: &IdentityPublicKey,
+        now_ms: TimestampMillis,
+    ) -> Result<(), KeyLimitsError> {
+        if live.disabled_at().is_some() {
+            return Err(KeyLimitsError::KeyDisabled);
+        }
+        if live.total_budget() != self.seen_total_budget
+            || live.expires_at() != self.seen_expires_at
+        {
+            return Err(KeyLimitsError::LimitsChanged);
+        }
+        if self.total_budget.is_none() && self.expires_at.is_none() {
+            return Err(KeyLimitsError::NothingToRaise);
+        }
+        // Only a raise is signed, whoever built it: an existing limit grows,
+        // and no limit is added to a key that has none.
+        if let Some(total_budget) = self.total_budget {
+            match live.total_budget() {
+                None => return Err(KeyLimitsError::NoBudgetToRaise),
+                Some(current) if total_budget <= current => {
+                    return Err(KeyLimitsError::NotARaise);
+                }
+                Some(_) => {}
+            }
+        }
+        if let Some(expires_at) = self.expires_at {
+            match live.expires_at() {
+                None => return Err(KeyLimitsError::NoExpiryToExtend),
+                Some(current) if expires_at <= current => return Err(KeyLimitsError::NotARaise),
+                Some(_) => {}
+            }
+        }
+        if let Some(expiry_after) = self.expires_at.or(self.seen_expires_at)
+            && expiry_after <= now_ms
+        {
+            return Err(KeyLimitsError::StillExpired);
+        }
+        Ok(())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use dash_sdk::dpp::identity::KeyType;
+    use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
+
+    const NOW: u64 = 1_758_000_000_000;
+
+    fn key(total_budget: Option<Credits>, expires_at: Option<u64>) -> IdentityPublicKey {
+        IdentityPublicKey::from(IdentityPublicKeyV0 {
+            id: 3,
+            purpose: Purpose::AUTHENTICATION,
+            security_level: SecurityLevel::HIGH,
+            contract_bounds: None,
+            key_type: KeyType::ECDSA_SECP256K1,
+            read_only: false,
+            data: vec![2; 33].into(),
+            disabled_at: None,
+        })
+        .with_limits(total_budget, expires_at)
+    }
+
+    #[test]
+    fn limits_are_only_for_authentication_keys_below_master() {
+        assert!(limits_allowed(
+            Purpose::AUTHENTICATION,
+            SecurityLevel::CRITICAL
+        ));
+        assert!(limits_allowed(
+            Purpose::AUTHENTICATION,
+            SecurityLevel::MEDIUM
+        ));
+        assert!(!limits_allowed(
+            Purpose::AUTHENTICATION,
+            SecurityLevel::MASTER
+        ));
+        assert!(!limits_allowed(Purpose::TRANSFER, SecurityLevel::CRITICAL));
+        assert!(!limits_allowed(Purpose::ENCRYPTION, SecurityLevel::MEDIUM));
+    }
+
+    #[test]
+    fn authentication_keys_are_bound_only_where_the_network_admits_it() {
+        assert!(contract_bounds_allowed(
+            Purpose::ENCRYPTION,
+            SecurityLevel::MEDIUM,
+            false
+        ));
+        assert!(!contract_bounds_allowed(
+            Purpose::AUTHENTICATION,
+            SecurityLevel::HIGH,
+            false
+        ));
+        assert!(contract_bounds_allowed(
+            Purpose::AUTHENTICATION,
+            SecurityLevel::HIGH,
+            true
+        ));
+        assert!(!contract_bounds_allowed(
+            Purpose::AUTHENTICATION,
+            SecurityLevel::MASTER,
+            true
+        ));
+        assert!(!contract_bounds_allowed(
+            Purpose::TRANSFER,
+            SecurityLevel::CRITICAL,
+            true
+        ));
+    }
+
+    #[test]
+    fn a_new_key_without_limits_needs_no_checks() {
+        assert_eq!(
+            new_key_limits(Purpose::TRANSFER, SecurityLevel::CRITICAL, None, None, NOW),
+            Ok((None, None))
+        );
+    }
+
+    #[test]
+    fn a_new_key_gets_its_budget_and_an_expiry_counted_from_now() {
+        assert_eq!(
+            new_key_limits(
+                Purpose::AUTHENTICATION,
+                SecurityLevel::HIGH,
+                Some(500),
+                Some(30),
+                NOW
+            ),
+            Ok((Some(500), Some(NOW + 30 * DAY_MS)))
+        );
+    }
+
+    #[test]
+    fn a_new_key_refuses_limits_platform_would_refuse() {
+        assert!(matches!(
+            new_key_limits(
+                Purpose::AUTHENTICATION,
+                SecurityLevel::MASTER,
+                Some(1),
+                None,
+                NOW
+            ),
+            Err(KeyLimitsError::NotAllowedForKey { .. })
+        ));
+        assert!(matches!(
+            new_key_limits(
+                Purpose::TRANSFER,
+                SecurityLevel::CRITICAL,
+                None,
+                Some(1),
+                NOW
+            ),
+            Err(KeyLimitsError::NotAllowedForKey { .. })
+        ));
+        assert_eq!(
+            new_key_limits(
+                Purpose::AUTHENTICATION,
+                SecurityLevel::HIGH,
+                Some(0),
+                None,
+                NOW
+            ),
+            Err(KeyLimitsError::ZeroBudget)
+        );
+        assert_eq!(
+            new_key_limits(
+                Purpose::AUTHENTICATION,
+                SecurityLevel::HIGH,
+                None,
+                Some(0),
+                NOW
+            ),
+            Err(KeyLimitsError::ZeroDays)
+        );
+    }
+
+    #[test]
+    fn validity_days_parse_within_bounds() {
+        assert_eq!(parse_key_validity_days(" 30 "), Ok(30));
+        assert_eq!(parse_key_validity_days("0"), Err(KeyLimitsError::ZeroDays));
+        assert_eq!(
+            parse_key_validity_days("thirty"),
+            Err(KeyLimitsError::DaysNotANumber)
+        );
+        assert_eq!(
+            parse_key_validity_days("-1"),
+            Err(KeyLimitsError::DaysNotANumber)
+        );
+        assert_eq!(
+            parse_key_validity_days(&(MAX_KEY_VALIDITY_DAYS + 1).to_string()),
+            Err(KeyLimitsError::TooManyDays {
+                max: MAX_KEY_VALIDITY_DAYS
+            })
+        );
+    }
+
+    #[test]
+    fn a_top_up_adds_to_the_total_budget() {
+        assert_eq!(
+            raised_key_limits(&key(Some(1_000), None), Some(500), None, NOW),
+            Ok((Some(1_500), None))
+        );
+    }
+
+    #[test]
+    fn an_extension_counts_from_the_current_expiry_while_the_key_is_valid() {
+        let expires = NOW + DAY_MS;
+        assert_eq!(
+            raised_key_limits(&key(None, Some(expires)), None, Some(10), NOW),
+            Ok((None, Some(expires + 10 * DAY_MS)))
+        );
+    }
+
+    #[test]
+    fn an_expired_key_is_extended_from_now_and_revived() {
+        assert_eq!(
+            raised_key_limits(&key(None, Some(NOW - DAY_MS)), None, Some(10), NOW),
+            Ok((None, Some(NOW + 10 * DAY_MS)))
+        );
+    }
+
+    #[test]
+    fn an_expired_key_cannot_only_be_topped_up() {
+        assert_eq!(
+            raised_key_limits(&key(Some(1_000), Some(NOW)), Some(500), None, NOW),
+            Err(KeyLimitsError::StillExpired)
+        );
+    }
+
+    #[test]
+    fn limits_are_raised_never_added() {
+        let unlimited = key(None, None);
+        assert_eq!(
+            raised_key_limits(&unlimited, Some(1), None, NOW),
+            Err(KeyLimitsError::NoBudgetToRaise)
+        );
+        assert_eq!(
+            raised_key_limits(&unlimited, None, Some(1), NOW),
+            Err(KeyLimitsError::NoExpiryToExtend)
+        );
+        assert_eq!(
+            raised_key_limits(&key(Some(1), None), None, None, NOW),
+            Err(KeyLimitsError::NothingToRaise)
+        );
+        assert_eq!(
+            raised_key_limits(&key(Some(1), None), Some(0), None, NOW),
+            Err(KeyLimitsError::ZeroBudget)
+        );
+        assert_eq!(
+            raised_key_limits(&key(Some(u64::MAX), None), Some(1), None, NOW),
+            Err(KeyLimitsError::BudgetOverflow)
+        );
+    }
+
+    fn signer_key(id: u32, security_level: SecurityLevel) -> IdentityPublicKey {
+        let mut key = key(None, None);
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+        key.set_id(id);
+        key.set_security_level(security_level);
+        key
+    }
+
+    #[test]
+    fn the_update_is_signed_by_master_first_then_an_unlimited_critical_key() {
+        let master = signer_key(0, SecurityLevel::MASTER);
+        let critical = signer_key(1, SecurityLevel::CRITICAL);
+        let limited_critical = signer_key(2, SecurityLevel::CRITICAL).with_limits(Some(5), None);
+        let keys = [limited_critical.clone(), critical.clone(), master.clone()];
+
+        let picked = key_limits_update_signer(keys.iter(), |_| true);
+        assert_eq!(picked.map(|k| k.id()), Some(0));
+
+        let picked = key_limits_update_signer(keys.iter(), |k| k.id() != 0);
+        assert_eq!(picked.map(|k| k.id()), Some(1), "an unlimited CRITICAL key");
+
+        let picked = key_limits_update_signer([&limited_critical], |_| true);
+        assert_eq!(picked, None, "a key with limits may not sign the update");
+    }
+
+    #[test]
+    fn the_reviewed_signer_is_kept_while_platform_still_accepts_it() {
+        let master = signer_key(0, SecurityLevel::MASTER);
+        let critical = signer_key(3, SecurityLevel::CRITICAL);
+        let keys: BTreeMap<KeyID, IdentityPublicKey> =
+            [(0, master.clone()), (3, critical.clone())].into();
+
+        // Reviewed with the CRITICAL key while MASTER is also usable: the
+        // reviewed signer is still valid, so it signs (not the first pick).
+        let signer = reviewed_key_limits_signer(&keys, 3, |_| true);
+        assert_eq!(signer.map(|k| k.id()), Ok(3));
+
+        // Reviewed with MASTER, now disabled on Platform, CRITICAL usable:
+        // never re-picked silently.
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+        let mut disabled_master = master.clone();
+        disabled_master.set_disabled_at(1);
+        let keys: BTreeMap<KeyID, IdentityPublicKey> =
+            [(0, disabled_master), (3, critical.clone())].into();
+        assert_eq!(
+            reviewed_key_limits_signer(&keys, 0, |_| true),
+            Err(ReviewedSignerUnusable::SignerChanged)
+        );
+
+        // Nothing this device holds can sign.
+        assert_eq!(
+            reviewed_key_limits_signer(&keys, 0, |k| k.id() != 3),
+            Err(ReviewedSignerUnusable::NoSigner)
+        );
+
+        // A CRITICAL signer that gained limits is no longer accepted.
+        let keys: BTreeMap<KeyID, IdentityPublicKey> =
+            [(0, master), (3, critical.with_limits(Some(5), None))].into();
+        assert_eq!(
+            reviewed_key_limits_signer(&keys, 3, |_| true),
+            Err(ReviewedSignerUnusable::SignerChanged)
+        );
+    }
+
+    #[test]
+    fn a_new_key_with_limits_is_checked_like_platform_does() {
+        assert_eq!(validate_key_limits(&key(None, None), NOW), Ok(()));
+        assert_eq!(
+            validate_key_limits(&key(Some(1), Some(NOW + 1)), NOW),
+            Ok(())
+        );
+        assert_eq!(
+            validate_key_limits(&key(Some(0), None), NOW),
+            Err(KeyLimitsError::ZeroBudget)
+        );
+        assert_eq!(
+            validate_key_limits(&key(None, Some(NOW)), NOW),
+            Err(KeyLimitsError::ExpiryNotInFuture)
+        );
+        assert!(matches!(
+            validate_key_limits(
+                &signer_key(0, SecurityLevel::MASTER).with_limits(Some(1), None),
+                NOW
+            ),
+            Err(KeyLimitsError::NotAllowedForKey { .. })
+        ));
+    }
+
+    #[test]
+    fn a_reviewed_raise_is_sent_only_while_the_limits_are_unchanged() {
+        let seen = key(Some(1_000), Some(NOW + DAY_MS));
+        let raise = KeyLimitsRaise::quote(&seen, Some(500), Some(10), 0, NOW).expect("quotes");
+        assert_eq!(raise.total_budget, Some(1_500));
+        assert_eq!(raise.expires_at, Some(NOW + 11 * DAY_MS));
+        assert_eq!(raise.check_against(&seen, NOW), Ok(()));
+
+        let raised_elsewhere = key(Some(5_000), Some(NOW + DAY_MS));
+        assert_eq!(
+            raise.check_against(&raised_elsewhere, NOW),
+            Err(KeyLimitsError::LimitsChanged)
+        );
+    }
+
+    /// Regression: the raise's fields are public and `check_against`, the
+    /// last check before signing, only compared freshness. A lowered budget
+    /// or a limit the key never had passed and would have been signed.
+    #[test]
+    fn a_raise_that_lowers_or_adds_a_limit_is_refused_before_signing() {
+        let seen = key(Some(1_000), Some(NOW + DAY_MS));
+        let raise = KeyLimitsRaise::quote(&seen, Some(500), Some(10), 0, NOW).expect("quotes");
+        let lowered_budget = KeyLimitsRaise {
+            total_budget: Some(500),
+            ..raise
+        };
+        let shortened_expiry = KeyLimitsRaise {
+            expires_at: Some(NOW + DAY_MS / 2),
+            ..raise
+        };
+        for lowered in [lowered_budget, shortened_expiry] {
+            assert_eq!(
+                lowered.check_against(&seen, NOW),
+                Err(KeyLimitsError::NotARaise),
+                "{lowered:?}"
+            );
+        }
+
+        let unlimited = key(None, None);
+        let added = KeyLimitsRaise {
+            key_id: 3,
+            seen_total_budget: None,
+            seen_expires_at: None,
+            total_budget: Some(5_000),
+            expires_at: None,
+            signing_key_id: 0,
+        };
+        assert_eq!(
+            added.check_against(&unlimited, NOW),
+            Err(KeyLimitsError::NoBudgetToRaise)
+        );
+        let added_expiry = KeyLimitsRaise {
+            total_budget: None,
+            expires_at: Some(NOW + DAY_MS),
+            ..added
+        };
+        assert_eq!(
+            added_expiry.check_against(&unlimited, NOW),
+            Err(KeyLimitsError::NoExpiryToExtend)
+        );
+    }
+
+    #[test]
+    fn a_reviewed_top_up_is_refused_once_the_key_has_expired() {
+        let seen = key(Some(1_000), Some(NOW + DAY_MS));
+        let raise = KeyLimitsRaise::quote(&seen, Some(500), None, 0, NOW).expect("quotes");
+        assert_eq!(
+            raise.check_against(&seen, NOW + 2 * DAY_MS),
+            Err(KeyLimitsError::StillExpired)
+        );
+    }
+
+    #[test]
+    fn a_disabled_key_is_left_alone() {
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+        let mut disabled = key(Some(1_000), None);
+        disabled.set_disabled_at(NOW);
+        assert_eq!(
+            raised_key_limits(&disabled, Some(1), None, NOW),
+            Err(KeyLimitsError::KeyDisabled)
+        );
+    }
+}
diff --git a/src/model/identity_key_usability.rs b/src/model/identity_key_usability.rs
new file mode 100644
index 000000000..cb0a62e8c
--- /dev/null
+++ b/src/model/identity_key_usability.rs
@@ -0,0 +1,576 @@
+//! Which identity keys can sign a given state transition right now.
+//!
+//! From protocol version 14 an identity key may carry usage limits (a lifetime
+//! `total_budget` and an `expires_at` instant, V1 keys only) and an
+//! AUTHENTICATION key may be bound to one contract, one document type or a
+//! contract group. Picking a signing key by purpose, security level and key type
+//! alone can therefore choose a key Platform refuses: an expired key, a key
+//! bound elsewhere, or a contract-bound key on a transition outside a batch.
+//!
+//! These are pure rules — the caller passes the wall clock — mirroring upstream
+//! `platform-wallet`'s `key_selection`: an unlimited key is preferred over a
+//! limited one, a contract-group bound key is never chosen automatically (group
+//! membership is Platform state, not known offline), and what is left of a
+//! budget is not known offline either, so a spent key is refused by Platform.
+
+use dash_sdk::dpp::data_contract::document_type::DocumentTypeRef;
+use dash_sdk::dpp::data_contract::document_type::accessors::DocumentTypeV0Getters;
+use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
+use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+use dash_sdk::dpp::identity::{
+    Identity, IdentityPublicKey, KeyType, Purpose, SecurityLevel, TimestampMillis,
+};
+use dash_sdk::platform::Identifier;
+
+/// What a signature authorizes, as far as contract bounds are concerned.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum SigningScope<'a> {
+    /// A state transition outside a batch: identity update, credit transfer or
+    /// withdrawal, data contract create or update, masternode vote. Platform
+    /// refuses a contract-bound key on any of them.
+    NonBatch,
+    /// A document transition on `document_type_name` of `contract_id`.
+    Document {
+        contract_id: Identifier,
+        document_type_name: &'a str,
+    },
+    /// Transitions spanning `contract_id` as a whole: a token transition (token
+    /// operations are contract-wide), or document transitions on several
+    /// document types of one contract (DPNS preorder + domain). A document-type
+    /// bound never covers them.
+    ContractWide { contract_id: Identifier },
+}
+
+/// Why a key cannot sign in a [`SigningScope`], or what the user should know
+/// before choosing it. Ordered by severity: the first applicable one is shown.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum KeyCaveat {
+    /// The key is disabled; Platform refuses it.
+    Disabled,
+    /// The key's expiry has passed; Platform refuses it.
+    Expired { expired_at: TimestampMillis },
+    /// The key is bound to a different contract or document type.
+    OutOfBounds,
+    /// The key is bound to a contract group; whether the group covers this
+    /// contract is only known to Platform.
+    ContractGroupBound { group_id: Identifier },
+    /// The key has a lifetime budget; Platform refuses it once the budget is
+    /// spent.
+    Budgeted { total_budget: u64 },
+    /// The key expires at `expires_at` (in the future).
+    Expiring { expires_at: TimestampMillis },
+}
+
+impl KeyCaveat {
+    /// Whether Platform is certain to refuse a signature from the key.
+    pub fn blocks_signing(&self) -> bool {
+        match self {
+            KeyCaveat::Disabled | KeyCaveat::Expired { .. } | KeyCaveat::OutOfBounds => true,
+            KeyCaveat::ContractGroupBound { .. }
+            | KeyCaveat::Budgeted { .. }
+            | KeyCaveat::Expiring { .. } => false,
+        }
+    }
+}
+
+/// Whether a key carrying `bounds` may sign in `scope`, when that can be known
+/// offline. `None` means only Platform can answer (a contract-group bound on a
+/// batch transition).
+pub fn bounds_permit(bounds: Option<&ContractBounds>, scope: SigningScope<'_>) -> Option<bool> {
+    match (bounds, scope) {
+        (None, _) => Some(true),
+        (Some(_), SigningScope::NonBatch) => Some(false),
+        (
+            Some(ContractBounds::SingleContract { id }),
+            SigningScope::Document { contract_id, .. } | SigningScope::ContractWide { contract_id },
+        ) => Some(*id == contract_id),
+        (
+            Some(ContractBounds::SingleContractDocumentType {
+                id,
+                document_type_name: bound_type,
+            }),
+            SigningScope::Document {
+                contract_id,
+                document_type_name,
+            },
+        ) => Some(*id == contract_id && bound_type == document_type_name),
+        (
+            Some(ContractBounds::SingleContractDocumentType { .. }),
+            SigningScope::ContractWide { .. },
+        ) => Some(false),
+        (
+            Some(ContractBounds::ContractGroup { .. }),
+            SigningScope::Document { .. } | SigningScope::ContractWide { .. },
+        ) => None,
+    }
+}
+
+/// Everything the user should know about signing with `key` in `scope` at
+/// `now_ms`, most severe first. Empty for an unlimited, unbound, live key.
+pub fn key_caveats(
+    key: &IdentityPublicKey,
+    scope: SigningScope<'_>,
+    now_ms: TimestampMillis,
+) -> Vec<KeyCaveat> {
+    let mut caveats = Vec::new();
+    if key.is_disabled() {
+        caveats.push(KeyCaveat::Disabled);
+    }
+    if let Some(expires_at) = key.expires_at()
+        && key.is_expired_at(now_ms)
+    {
+        caveats.push(KeyCaveat::Expired {
+            expired_at: expires_at,
+        });
+    }
+    match bounds_permit(key.contract_bounds(), scope) {
+        Some(true) => {}
+        Some(false) => caveats.push(KeyCaveat::OutOfBounds),
+        None => {
+            if let Some(group_id) = key.contract_bounds().and_then(|b| b.contract_group_id()) {
+                caveats.push(KeyCaveat::ContractGroupBound {
+                    group_id: *group_id,
+                });
+            }
+        }
+    }
+    if let Some(total_budget) = key.total_budget() {
+        caveats.push(KeyCaveat::Budgeted { total_budget });
+    }
+    if let Some(expires_at) = key.expires_at()
+        && !key.is_expired_at(now_ms)
+    {
+        caveats.push(KeyCaveat::Expiring { expires_at });
+    }
+    caveats
+}
+
+/// Whether `key` may be picked automatically for `scope` at `now_ms`: not
+/// disabled, not expired, and bounds known to permit the scope.
+pub fn is_auto_selectable(
+    key: &IdentityPublicKey,
+    scope: SigningScope<'_>,
+    now_ms: TimestampMillis,
+) -> bool {
+    !key.is_disabled()
+        && !key.is_expired_at(now_ms)
+        && bounds_permit(key.contract_bounds(), scope) == Some(true)
+}
+
+/// The security levels Platform accepts for a document action on
+/// `document_type`: CRITICAL up to and including the level the type requires,
+/// since a stronger key satisfies a weaker requirement. Never MASTER.
+pub fn document_security_levels(document_type: DocumentTypeRef<'_>) -> Vec<SecurityLevel> {
+    let required = document_type.security_level_requirement() as u8;
+    [
+        SecurityLevel::CRITICAL,
+        SecurityLevel::HIGH,
+        SecurityLevel::MEDIUM,
+    ]
+    .into_iter()
+    .filter(|level| (SecurityLevel::CRITICAL as u8..=required).contains(&(*level as u8)))
+    .collect()
+}
+
+/// The signing key requirements of a transition.
+#[derive(Debug, Clone, Copy)]
+pub struct KeyRequirements<'a> {
+    pub purpose: Purpose,
+    pub security_levels: &'a [SecurityLevel],
+    /// `None` accepts every key type.
+    pub key_types: Option<&'a [KeyType]>,
+    pub scope: SigningScope<'a>,
+}
+
+impl KeyRequirements<'_> {
+    fn matches(&self, key: &IdentityPublicKey) -> bool {
+        key.purpose() == self.purpose
+            && self.security_levels.contains(&key.security_level())
+            && self
+                .key_types
+                .is_none_or(|types| types.contains(&key.key_type()))
+    }
+}
+
+/// The key of `keys` to pick automatically for `requirements` at `now_ms`
+/// among those `can_sign` accepts, or `None` when none qualifies.
+///
+/// Mirrors upstream platform-wallet's signer-aware `usable_authentication_key`:
+/// a key qualifies when it matches purpose, security level and key type and
+/// [`is_auto_selectable`]; qualifying unlimited keys come first, then limited
+/// ones (a budgeted or expiring key is an application key), each in `keys`
+/// order (key id order for an identity's key map); the first of that sequence
+/// this device can sign with wins. So a limited key held here beats an
+/// unlimited one whose private half lives elsewhere — the delegated-key case
+/// protocol version 14 limits exist for.
+pub fn select_signing_key<'k>(
+    keys: impl IntoIterator<Item = &'k IdentityPublicKey>,
+    requirements: KeyRequirements<'_>,
+    now_ms: TimestampMillis,
+    can_sign: impl Fn(&IdentityPublicKey) -> bool,
+) -> Option<&'k IdentityPublicKey> {
+    let qualifying: Vec<&IdentityPublicKey> = keys
+        .into_iter()
+        .filter(|key| {
+            requirements.matches(key) && is_auto_selectable(key, requirements.scope, now_ms)
+        })
+        .collect();
+    let unlimited = qualifying.iter().filter(|key| !key.has_limits());
+    let limited = qualifying.iter().filter(|key| key.has_limits());
+    unlimited.chain(limited).find(|key| can_sign(key)).copied()
+}
+
+impl<'a> KeyRequirements<'a> {
+    /// Requirements accepting every key type.
+    pub const fn new(
+        purpose: Purpose,
+        security_levels: &'a [SecurityLevel],
+        scope: SigningScope<'a>,
+    ) -> Self {
+        Self {
+            purpose,
+            security_levels,
+            key_types: None,
+            scope,
+        }
+    }
+
+    /// Restricts the accepted key types.
+    pub const fn with_key_types(mut self, key_types: &'a [KeyType]) -> Self {
+        self.key_types = Some(key_types);
+        self
+    }
+}
+
+/// [`select_signing_key`] over `identity`'s keys.
+pub fn select_identity_signing_key<'i>(
+    identity: &'i Identity,
+    requirements: KeyRequirements<'_>,
+    now_ms: TimestampMillis,
+    can_sign: impl Fn(&IdentityPublicKey) -> bool,
+) -> Option<&'i IdentityPublicKey> {
+    select_signing_key(
+        identity.public_keys().values(),
+        requirements,
+        now_ms,
+        can_sign,
+    )
+}
+
+/// The current wall-clock time in milliseconds since the Unix epoch, the clock
+/// key expiry is compared against. Platform compares against block time, which
+/// trails the wall clock by seconds at most.
+pub fn now_ms() -> TimestampMillis {
+    chrono::Utc::now().timestamp_millis().max(0) as TimestampMillis
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
+    use dash_sdk::dpp::platform_value::BinaryData;
+
+    /// A HIGH document type accepts CRITICAL and HIGH keys, never MEDIUM.
+    #[test]
+    fn a_high_document_type_accepts_critical_and_high_keys() {
+        use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+        let dashpay = crate::context::test_support::dashpay_contract();
+        for name in ["contactRequest", "contactInfo"] {
+            let document_type = dashpay.document_type_for_name(name).expect("document type");
+            assert_eq!(
+                document_type.security_level_requirement(),
+                SecurityLevel::HIGH
+            );
+            assert_eq!(
+                document_security_levels(document_type),
+                vec![SecurityLevel::CRITICAL, SecurityLevel::HIGH],
+                "{name}"
+            );
+        }
+    }
+
+    const CONTRACT: Identifier = Identifier::new([0xDA; 32]);
+    const OTHER: Identifier = Identifier::new([0x0E; 32]);
+    const NOW: TimestampMillis = 1_800_000_000_000;
+
+    fn key(id: u32, bounds: Option<ContractBounds>) -> IdentityPublicKey {
+        IdentityPublicKey::V0(IdentityPublicKeyV0 {
+            id,
+            purpose: Purpose::AUTHENTICATION,
+            security_level: SecurityLevel::HIGH,
+            contract_bounds: bounds,
+            key_type: KeyType::ECDSA_SECP256K1,
+            read_only: false,
+            data: BinaryData::new(vec![2; 33]),
+            disabled_at: None,
+        })
+    }
+
+    fn doc_scope() -> SigningScope<'static> {
+        SigningScope::Document {
+            contract_id: CONTRACT,
+            document_type_name: "note",
+        }
+    }
+
+    fn requirements(scope: SigningScope<'_>) -> KeyRequirements<'_> {
+        KeyRequirements {
+            purpose: Purpose::AUTHENTICATION,
+            security_levels: &[SecurityLevel::HIGH, SecurityLevel::CRITICAL],
+            key_types: None,
+            scope,
+        }
+    }
+
+    #[test]
+    fn an_unbound_key_covers_every_scope() {
+        for scope in [
+            SigningScope::NonBatch,
+            doc_scope(),
+            SigningScope::ContractWide {
+                contract_id: CONTRACT,
+            },
+        ] {
+            assert_eq!(bounds_permit(None, scope), Some(true), "{scope:?}");
+        }
+    }
+
+    #[test]
+    fn a_contract_bound_key_never_signs_outside_a_batch() {
+        let bounds = ContractBounds::SingleContract { id: CONTRACT };
+        assert_eq!(
+            bounds_permit(Some(&bounds), SigningScope::NonBatch),
+            Some(false)
+        );
+    }
+
+    #[test]
+    fn a_single_contract_bound_covers_its_documents_and_tokens_only() {
+        let bounds = ContractBounds::SingleContract { id: CONTRACT };
+        assert_eq!(bounds_permit(Some(&bounds), doc_scope()), Some(true));
+        assert_eq!(
+            bounds_permit(
+                Some(&bounds),
+                SigningScope::ContractWide {
+                    contract_id: CONTRACT
+                }
+            ),
+            Some(true)
+        );
+        assert_eq!(
+            bounds_permit(
+                Some(&bounds),
+                SigningScope::Document {
+                    contract_id: OTHER,
+                    document_type_name: "note"
+                }
+            ),
+            Some(false)
+        );
+    }
+
+    #[test]
+    fn a_document_type_bound_covers_that_type_and_no_token() {
+        let bounds = ContractBounds::SingleContractDocumentType {
+            id: CONTRACT,
+            document_type_name: "note".to_string(),
+        };
+        assert_eq!(bounds_permit(Some(&bounds), doc_scope()), Some(true));
+        assert_eq!(
+            bounds_permit(
+                Some(&bounds),
+                SigningScope::Document {
+                    contract_id: CONTRACT,
+                    document_type_name: "other"
+                }
+            ),
+            Some(false)
+        );
+        assert_eq!(
+            bounds_permit(
+                Some(&bounds),
+                SigningScope::ContractWide {
+                    contract_id: CONTRACT
+                }
+            ),
+            Some(false)
+        );
+    }
+
+    #[test]
+    fn a_contract_group_bound_is_left_to_platform_inside_a_batch() {
+        let bounds = ContractBounds::ContractGroup { id: OTHER };
+        assert_eq!(bounds_permit(Some(&bounds), doc_scope()), None);
+        assert_eq!(
+            bounds_permit(Some(&bounds), SigningScope::NonBatch),
+            Some(false)
+        );
+    }
+
+    #[test]
+    fn expiry_is_reached_at_the_instant_itself() {
+        let k = key(1, None).with_limits(None, Some(NOW));
+        assert!(!k.is_expired_at(NOW - 1));
+        assert!(k.is_expired_at(NOW));
+        assert!(!is_auto_selectable(&k, doc_scope(), NOW));
+        assert!(is_auto_selectable(&k, doc_scope(), NOW - 1));
+    }
+
+    #[test]
+    fn selection_prefers_an_unlimited_key_over_a_limited_one() {
+        let limited = key(0, None).with_limits(Some(1_000), None);
+        let unlimited = key(1, None);
+        let picked = select_signing_key(
+            [&limited, &unlimited],
+            requirements(doc_scope()),
+            NOW,
+            |_| true,
+        );
+        assert_eq!(picked.map(|k| k.id()), Some(1));
+    }
+
+    #[test]
+    fn selection_falls_back_to_a_limited_key() {
+        let limited = key(0, None).with_limits(Some(1_000), Some(NOW + 1));
+        let picked = select_signing_key([&limited], requirements(doc_scope()), NOW, |_| true);
+        assert_eq!(picked.map(|k| k.id()), Some(0));
+    }
+
+    #[test]
+    fn selection_skips_expired_disabled_out_of_bounds_and_group_keys() {
+        use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+
+        let expired = key(0, None).with_limits(None, Some(NOW));
+        let mut disabled = key(1, None);
+        disabled.set_disabled_at(1);
+        let elsewhere = key(2, Some(ContractBounds::SingleContract { id: OTHER }));
+        let grouped = key(3, Some(ContractBounds::ContractGroup { id: OTHER }));
+        let keys = [&expired, &disabled, &elsewhere, &grouped];
+
+        assert_eq!(
+            select_signing_key(keys, requirements(doc_scope()), NOW, |_| true),
+            None
+        );
+    }
+
+    #[test]
+    fn selection_takes_a_key_bound_to_the_target_contract() {
+        let bound = key(0, Some(ContractBounds::SingleContract { id: CONTRACT }));
+        assert_eq!(
+            select_signing_key([&bound], requirements(doc_scope()), NOW, |_| true).map(|k| k.id()),
+            Some(0)
+        );
+        assert_eq!(
+            select_signing_key([&bound], requirements(SigningScope::NonBatch), NOW, |_| {
+                true
+            }),
+            None,
+            "but not for a transition outside a batch"
+        );
+    }
+
+    #[test]
+    fn selection_honours_purpose_security_level_and_key_type() {
+        let k = key(0, None);
+        let wrong_level = KeyRequirements {
+            security_levels: &[SecurityLevel::CRITICAL],
+            ..requirements(doc_scope())
+        };
+        let wrong_type = KeyRequirements {
+            key_types: Some(&[KeyType::BLS12_381]),
+            ..requirements(doc_scope())
+        };
+        let wrong_purpose = KeyRequirements {
+            purpose: Purpose::TRANSFER,
+            ..requirements(doc_scope())
+        };
+        for r in [wrong_level, wrong_type, wrong_purpose] {
+            assert_eq!(select_signing_key([&k], r, NOW, |_| true), None);
+        }
+    }
+
+    #[test]
+    fn caveats_list_blocking_ones_first() {
+        let k = key(0, Some(ContractBounds::SingleContract { id: OTHER }))
+            .with_limits(Some(500), Some(NOW - 1));
+        let caveats = key_caveats(&k, doc_scope(), NOW);
+        assert_eq!(
+            caveats,
+            vec![
+                KeyCaveat::Expired {
+                    expired_at: NOW - 1
+                },
+                KeyCaveat::OutOfBounds,
+                KeyCaveat::Budgeted { total_budget: 500 },
+            ]
+        );
+        assert!(caveats[0].blocks_signing());
+    }
+
+    #[test]
+    fn a_live_limited_key_has_only_informational_caveats() {
+        let k = key(0, None).with_limits(Some(500), Some(NOW + 10));
+        let caveats = key_caveats(&k, doc_scope(), NOW);
+        assert_eq!(
+            caveats,
+            vec![
+                KeyCaveat::Budgeted { total_budget: 500 },
+                KeyCaveat::Expiring {
+                    expires_at: NOW + 10
+                },
+            ]
+        );
+        assert!(caveats.iter().all(|c| !c.blocks_signing()));
+    }
+
+    #[test]
+    fn a_plain_key_has_no_caveats() {
+        assert!(key_caveats(&key(0, None), doc_scope(), NOW).is_empty());
+    }
+
+    /// A limited key this device can sign with beats an unlimited key whose
+    /// private half lives elsewhere (upstream `usable_authentication_key`).
+    #[test]
+    fn a_held_limited_key_beats_an_unlimited_key_held_elsewhere() {
+        let limited = key(4, None).with_limits(Some(100_000), None);
+        let unlimited = key(1, None);
+        let picked = select_signing_key(
+            [&unlimited, &limited],
+            requirements(doc_scope()),
+            NOW,
+            |k| k.id() == 4,
+        );
+        assert_eq!(picked.map(|k| k.id()), Some(4));
+    }
+
+    /// An unlimited key still wins when both can sign.
+    #[test]
+    fn an_unlimited_key_wins_when_both_can_sign() {
+        let limited = key(4, None).with_limits(Some(100_000), None);
+        let unlimited = key(1, None);
+        let picked = select_signing_key(
+            [&limited, &unlimited],
+            requirements(doc_scope()),
+            NOW,
+            |_| true,
+        );
+        assert_eq!(picked.map(|k| k.id()), Some(1));
+    }
+
+    /// Availability never widens eligibility: a signable but ineligible key
+    /// is not picked when the eligible one cannot sign.
+    #[test]
+    fn availability_does_not_relax_eligibility() {
+        let bound_elsewhere = key(2, Some(ContractBounds::SingleContract { id: OTHER }));
+        let eligible = key(1, None);
+        let picked = select_signing_key(
+            [&eligible, &bound_elsewhere],
+            requirements(doc_scope()),
+            NOW,
+            |k| k.id() == 2,
+        );
+        assert_eq!(picked, None);
+    }
+}
diff --git a/src/model/key_input.rs b/src/model/key_input.rs
index af7008b5b..cf7793f29 100644
--- a/src/model/key_input.rs
+++ b/src/model/key_input.rs
@@ -60,7 +60,7 @@ pub fn verify_key_input(
                 key_name: key_name.to_owned(),
             }),
         51 | 52 => PrivateKey::from_wif(private_key)
-            .map(|key| Some(key.inner.secret_bytes()))
+            .map(|key| Some(*key.inner.to_bytes()))
             .map_err(|_| KeyInputError::BadWif {
                 key_name: key_name.to_owned(),
             }),
diff --git a/src/model/mod.rs b/src/model/mod.rs
index 7648d0387..9f4625a5d 100644
--- a/src/model/mod.rs
+++ b/src/model/mod.rs
@@ -4,6 +4,7 @@ pub mod asset_lock;
 pub mod avatar;
 pub mod backup_retention;
 pub mod contested_name;
+pub mod contract_fee_pots;
 pub mod dashpay;
 pub mod dashpay_derivation;
 pub(crate) mod data_migration;
@@ -15,7 +16,9 @@ pub mod dpns_voting;
 pub mod fee_estimation;
 pub mod grovestark_prover;
 pub mod identity_discovery;
+pub mod identity_key_limits;
 pub mod identity_key_protection;
+pub mod identity_key_usability;
 pub mod identity_name;
 pub mod key_input;
 pub mod legacy_recovery;
diff --git a/src/model/qualified_identity/encrypted_key_storage.rs b/src/model/qualified_identity/encrypted_key_storage.rs
index 954901e26..d89160c7b 100644
--- a/src/model/qualified_identity/encrypted_key_storage.rs
+++ b/src/model/qualified_identity/encrypted_key_storage.rs
@@ -23,90 +23,110 @@ use zeroize::Zeroizing;
 pub type ResolvedPrivateKey = (QualifiedIdentityPublicKey, Zeroizing<[u8; 32]>);
 
 /// Whether a `stored` public half is the same key as the `live` one, ignoring
-/// only `disabled_at`.
+/// only the fields Platform lets move after the key is added.
 ///
-/// Every field of an `IdentityPublicKey` is immutable once the key is added, with
-/// that single exception: disabling a key rewrites it. The stored copy is a
-/// snapshot taken when the private half was saved, so plain `==` stops matching
-/// as soon as a key is disabled or rotated, and a key this device demonstrably
+/// Every identifying field of an `IdentityPublicKey` is immutable once the key
+/// is added. The exceptions are state, not identity: disabling a key rewrites
+/// `disabled_at`, and an `IdentityKeyLimitsUpdate` (protocol version 14) raises
+/// a V1 key's `total_budget` and moves its `expires_at` later. The stored copy
+/// is a snapshot taken when the private half was saved, so plain `==` stops
+/// matching as soon as any of those move, and a key this device demonstrably
 /// holds gets reported as missing.
 ///
 /// Comparing only the id and the key material would fix that and open a worse
 /// hole the other way. A main identity's voting key and a linked voter identity's
 /// key can carry identical `data` under the same `id`, leaving `purpose` as the
 /// only thing telling them apart — and a lookup that conflates them can hand out,
-/// or delete, material the requested key does not own. So this excludes the one
-/// field that legitimately moves and nothing else.
+/// or delete, material the requested key does not own. So this excludes the
+/// fields that legitimately move and nothing else.
 ///
-/// V1 keys (budget/expiry limits) exist only from protocol 14; DET runs protocol
-/// 13, so they are compared strictly apart from `disabled_at`. Upstream writes a
-/// key without limits as V0, so a V1 key is never the same key as a V0 one.
-// TODO(pv14): `IdentityKeyLimitsUpdate` raises `total_budget` and moves
-// `expires_at`; decide whether those amounts identify a key once DET supports
-// protocol 14.
+/// Whether a key has a budget and whether it has an expiry is identity too: a
+/// limit can only be raised, never added or removed, so that shape is fixed for
+/// the key's life. The key version is not — upstream writes a V1 key without
+/// limits as V0 — so a V0 key and a limit-less V1 key with the same fields are
+/// the same key.
 pub(crate) fn same_key(stored: &IdentityPublicKey, live: &IdentityPublicKey) -> bool {
+    key_identity(stored) == key_identity(live)
+}
+
+/// The fields of `key` that identify it: everything except the state Platform
+/// lets move (see [`same_key`]).
+///
+/// Destructured exhaustively, and without `..`, on purpose: a field added
+/// upstream must break this build rather than be silently ignored. A new field
+/// that distinguishes two keys would otherwise leave [`same_key`] reporting a
+/// match where there is none — which is how one key's private material ends up
+/// attributed to another. Whoever adds it decides here whether it identifies a
+/// key or, like `disabled_at`, only describes its state.
+fn key_identity(key: &IdentityPublicKey) -> KeyIdentity<'_> {
     use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
     use dash_sdk::dpp::identity::identity_public_key::v1::IdentityPublicKeyV1;
 
-    // Destructured exhaustively, and without `..`, on purpose: a field added
-    // upstream must break this build rather than be silently ignored. A new field
-    // that distinguishes two keys would otherwise leave this reporting a match
-    // where there is none — which is how one key's private material ends up
-    // attributed to another. Whoever adds it decides here whether it identifies a
-    // key or, like `disabled_at`, only describes its state.
-    match (stored, live) {
-        (IdentityPublicKey::V0(stored), IdentityPublicKey::V0(live)) => {
-            let IdentityPublicKeyV0 {
-                id,
-                purpose,
-                security_level,
-                contract_bounds,
-                key_type,
-                read_only,
-                data,
-                // The one field Platform lets move after a key is added: disabling
-                // a key rewrites it, and the stored snapshot predates that.
-                disabled_at: _,
-            } = stored;
-
-            *id == live.id
-                && *purpose == live.purpose
-                && *security_level == live.security_level
-                && *contract_bounds == live.contract_bounds
-                && *key_type == live.key_type
-                && *read_only == live.read_only
-                && *data == live.data
-        }
-        (IdentityPublicKey::V1(stored), IdentityPublicKey::V1(live)) => {
-            let IdentityPublicKeyV1 {
-                id,
-                purpose,
-                security_level,
-                contract_bounds,
-                key_type,
-                read_only,
-                data,
-                // Moves when the key is disabled, as for V0.
-                disabled_at: _,
-                total_budget,
-                expires_at,
-            } = stored;
-
-            *id == live.id
-                && *purpose == live.purpose
-                && *security_level == live.security_level
-                && *contract_bounds == live.contract_bounds
-                && *key_type == live.key_type
-                && *read_only == live.read_only
-                && *data == live.data
-                && *total_budget == live.total_budget
-                && *expires_at == live.expires_at
-        }
-        (IdentityPublicKey::V0(_), IdentityPublicKey::V1(_))
-        | (IdentityPublicKey::V1(_), IdentityPublicKey::V0(_)) => false,
+    match key {
+        IdentityPublicKey::V0(IdentityPublicKeyV0 {
+            id,
+            purpose,
+            security_level,
+            contract_bounds,
+            key_type,
+            read_only,
+            data,
+            // Moves when the key is disabled; the stored snapshot predates that.
+            disabled_at: _,
+        }) => KeyIdentity {
+            id: *id,
+            purpose: *purpose,
+            security_level: *security_level,
+            contract_bounds: contract_bounds.as_ref(),
+            key_type: *key_type,
+            read_only: *read_only,
+            data: data.as_slice(),
+            has_budget: false,
+            has_expiry: false,
+        },
+        IdentityPublicKey::V1(IdentityPublicKeyV1 {
+            id,
+            purpose,
+            security_level,
+            contract_bounds,
+            key_type,
+            read_only,
+            data,
+            // Moves when the key is disabled.
+            disabled_at: _,
+            // The amounts move with `IdentityKeyLimitsUpdate`; only whether the
+            // key has each limit is fixed.
+            total_budget,
+            expires_at,
+        }) => KeyIdentity {
+            id: *id,
+            purpose: *purpose,
+            security_level: *security_level,
+            contract_bounds: contract_bounds.as_ref(),
+            key_type: *key_type,
+            read_only: *read_only,
+            data: data.as_slice(),
+            has_budget: total_budget.is_some(),
+            has_expiry: expires_at.is_some(),
+        },
     }
 }
 
+/// The identifying fields of an identity public key, whatever its version.
+#[derive(PartialEq, Eq)]
+struct KeyIdentity<'a> {
+    id: KeyID,
+    purpose: Purpose,
+    security_level: SecurityLevel,
+    contract_bounds:
+        Option<&'a dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds>,
+    key_type: dash_sdk::dpp::identity::KeyType,
+    read_only: bool,
+    data: &'a [u8],
+    has_budget: bool,
+    has_expiry: bool,
+}
+
 /// A `(target, key_id)` map key paired with the raw 32-byte private key the
 /// migration must store in the vault — see
 /// [`KeyStorage::take_plaintext_for_vault`]. Bytes are [`Zeroizing`].
@@ -1409,9 +1429,22 @@ mod tests {
         ));
     }
 
-    /// A V1 key disabled since its snapshot was taken is still the same key.
+    /// A V1 key's budget and expiry are raised by `IdentityKeyLimitsUpdate`, so
+    /// a snapshot taken before the raise still names the key.
+    #[test]
+    fn same_key_ignores_raised_limits() {
+        let base = IdentityPublicKey::random_key(0, Some(1), PlatformVersion::latest());
+        let stored = base.clone().with_limits(Some(1_000), Some(1_800_000));
+        let raised = base.with_limits(Some(5_000), Some(9_000_000));
+
+        assert!(same_key(&stored, &raised), "raised limits keep the key");
+        assert!(same_key(&raised, &stored), "in either direction");
+    }
+
+    /// A limited key is disabled the same way any other key is, and the state
+    /// it carries is no more identifying for having limits beside it.
     #[test]
-    fn same_key_ignores_a_v1_key_being_disabled() {
+    fn same_key_ignores_a_limited_key_being_disabled() {
         use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
 
         let stored = IdentityPublicKey::random_key(0, Some(1), PlatformVersion::latest())
@@ -1423,31 +1456,41 @@ mod tests {
         assert!(same_key(&disabled_since, &stored));
     }
 
-    /// A V1 key carries limits a V0 key cannot, so the two are never the same
-    /// key, and V1 limits are compared strictly — `total_budget` and
-    /// `expires_at` each on their own, so dropping either conjunct fails here.
+    /// Whether a key has a budget or an expiry is fixed when it is added: a
+    /// limit can be raised but never added or removed. A disagreement on the
+    /// presence of a limit is a different key.
     #[test]
-    fn same_key_rejects_a_v1_key_against_v0_or_other_limits() {
+    fn same_key_rejects_a_different_limit_shape() {
         let base = IdentityPublicKey::random_key(0, Some(1), PlatformVersion::latest());
-        let limited = base.clone().with_limits(Some(1_000), None);
-        let raised = base.clone().with_limits(Some(5_000), None);
-        // Same budget as `limited`, differing only in when the key expires.
-        let expiring = base.clone().with_limits(Some(1_000), Some(1_800_000));
-        let expiring_later = base.clone().with_limits(Some(1_000), Some(2_400_000));
-
-        assert!(!same_key(&base, &limited));
-        assert!(!same_key(&limited, &base));
-        assert!(!same_key(&limited, &raised));
+        let budget_only = base.clone().with_limits(Some(1_000), None);
+        let expiry_only = base.clone().with_limits(None, Some(1_800_000));
+        let limits_none = base.clone().with_limits(None, None);
 
+        assert!(!same_key(&budget_only, &expiry_only));
+        assert!(
+            !same_key(&budget_only, &limits_none),
+            "a budget alone tells two keys apart"
+        );
         assert!(
-            !same_key(&limited, &expiring),
-            "an expiry added since the snapshot is a different key"
+            !same_key(&expiry_only, &limits_none),
+            "and so does an expiry alone"
         );
-        assert!(!same_key(&expiring, &limited));
         assert!(
-            !same_key(&expiring, &expiring_later),
-            "a moved expiry is a different key, at an identical budget"
+            !same_key(&base, &budget_only),
+            "a V0 key never gains a budget"
         );
+        assert!(!same_key(&expiry_only, &base), "nor an expiry");
+    }
+
+    /// Upstream writes a V1 key without limits as V0, so the two encodings of
+    /// one key must still compare equal.
+    #[test]
+    fn same_key_treats_a_limitless_v1_key_as_its_v0_form() {
+        let base = IdentityPublicKey::random_key(0, Some(1), PlatformVersion::latest());
+        let limits_none = base.clone().with_limits(None, None);
+
+        assert!(same_key(&base, &limits_none));
+        assert!(same_key(&limits_none, &base));
     }
 
     /// A storage filing one key under several placements, each with the given
diff --git a/src/model/qualified_identity/mod.rs b/src/model/qualified_identity/mod.rs
index e8d48b64d..e4d8620f6 100644
--- a/src/model/qualified_identity/mod.rs
+++ b/src/model/qualified_identity/mod.rs
@@ -8,6 +8,9 @@ pub mod qualified_identity_public_key;
 // requires making that secret-seam chokepoint generic over the closure error
 // type — a wallet_backend change out of scope here.
 use crate::backend_task::error::{SigningKeyUnavailableCause, TaskError};
+use crate::model::identity_key_usability::{
+    KeyRequirements, SigningScope, document_security_levels, now_ms, select_identity_signing_key,
+};
 use crate::model::qualified_identity::encrypted_key_storage::{
     KeyStorage, ResolvedPrivateKey, same_key,
 };
@@ -18,12 +21,12 @@ use crate::model::wallet::{Wallet, WalletSeedHash};
 use bincode::{Decode, Encode};
 use dash_sdk::dashcore_rpc::dashcore::{PubkeyHash, signer};
 use dash_sdk::dpp::async_trait::async_trait;
-use dash_sdk::dpp::bls_signatures::{Bls12381G2Impl, SignatureSchemes};
 use dash_sdk::dpp::dashcore::address::Payload;
 use dash_sdk::dpp::dashcore::hashes::Hash;
 use dash_sdk::dpp::dashcore::{Address, Network, ScriptHash};
+use dash_sdk::dpp::data_contract::DataContract;
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::data_contract::document_type::DocumentTypeRef;
-use dash_sdk::dpp::data_contract::document_type::accessors::DocumentTypeV0Getters;
 use dash_sdk::dpp::ed25519_dalek::Signer as EDDSASigner;
 use dash_sdk::dpp::identity::KeyType::{BIP13_SCRIPT_HASH, ECDSA_HASH160};
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
@@ -35,9 +38,9 @@ use dash_sdk::dpp::key_wallet::bip32::ChildNumber;
 use dash_sdk::dpp::platform_value::BinaryData;
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
 use dash_sdk::dpp::state_transition::errors::InvalidIdentityPublicKeyTypeError;
-use dash_sdk::dpp::{ProtocolError, bls_signatures, ed25519_dalek};
+use dash_sdk::dpp::{ProtocolError, bls, ed25519_dalek};
 use dash_sdk::platform::IdentityPublicKey;
-use std::collections::{BTreeMap, HashSet};
+use std::collections::BTreeMap;
 use std::fmt::{Display, Formatter};
 use std::sync::{Arc, RwLock};
 use zeroize::Zeroizing;
@@ -445,13 +448,12 @@ impl Signer<IdentityPublicKey> for QualifiedIdentity {
                 if identity_public_key.key_type() == KeyType::ECDSA_HASH160 {
                     use dash_sdk::dpp::dashcore::PublicKey;
                     use dash_sdk::dpp::dashcore::hashes::{Hash, ripemd160, sha256};
-                    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
+                    use dash_sdk::dpp::secp256k1::SecretKey;
 
                     let platform_key_data = identity_public_key.data().as_slice();
 
-                    if let Ok(secret_key) = SecretKey::from_slice(&private_key[..]) {
-                        let secp = Secp256k1::new();
-                        let derived_pubkey = PublicKey::new(secret_key.public_key(&secp));
+                    if let Ok(secret_key) = SecretKey::from_secret_bytes(*private_key) {
+                        let derived_pubkey = PublicKey::new(secret_key.public_key());
                         let pubkey_bytes = derived_pubkey.to_bytes();
                         let sha256_hash = sha256::Hash::hash(&pubkey_bytes);
                         let hash160 = ripemd160::Hash::hash(sha256_hash.as_byte_array());
@@ -482,17 +484,10 @@ impl Signer<IdentityPublicKey> for QualifiedIdentity {
                 Ok(signature.to_vec().into())
             }
             KeyType::BLS12_381 => {
-                let pk = bls_signatures::SecretKey::<Bls12381G2Impl>::from_be_bytes(&private_key)
-                    .into_option()
-                    .ok_or(ProtocolError::Generic(
-                        "bls private key from bytes isn't correct".to_string(),
-                    ))?;
-                Ok(pk
-                    .sign(SignatureSchemes::Basic, data)?
-                    .as_raw_value()
-                    .to_compressed()
-                    .to_vec()
-                    .into())
+                let pk = bls::SecretKey::from_be_bytes(&private_key).ok_or(
+                    ProtocolError::Generic("bls private key from bytes isn't correct".to_string()),
+                )?;
+                Ok(pk.sign(data)?.to_bytes().to_vec().into())
             }
             KeyType::EDDSA_25519_HASH160 => {
                 let pk = ed25519_dalek::SigningKey::from(&*private_key);
@@ -990,7 +985,7 @@ impl QualifiedIdentity {
     ) -> Result<Option<BinaryData>, ProtocolError> {
         use dash_sdk::dpp::dashcore::PublicKey;
         use dash_sdk::dpp::dashcore::hashes::{Hash, ripemd160, sha256};
-        use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
         use dash_sdk::dpp::key_wallet::bip32::{DerivationPath as DP, KeyDerivationType};
 
         let (Some(secret_access), Some(seed_hash)) =
@@ -1012,7 +1007,7 @@ impl QualifiedIdentity {
                     let Some(seed) = plaintext.expose_hd_seed() else {
                         return Ok(None);
                     };
-                    let secp = Secp256k1::new();
+
                     for identity_index in 0..10u32 {
                         let correct_path = DP::identity_authentication_path(
                             network,
@@ -1025,8 +1020,7 @@ impl QualifiedIdentity {
                         else {
                             continue;
                         };
-                        let correct_pubkey =
-                            PublicKey::new(extended_key.private_key.public_key(&secp));
+                        let correct_pubkey = PublicKey::new(extended_key.private_key.public_key());
                         let correct_hash = ripemd160::Hash::hash(
                             sha256::Hash::hash(&correct_pubkey.to_bytes()).as_byte_array(),
                         );
@@ -1038,7 +1032,7 @@ impl QualifiedIdentity {
                                 "Using corrected derivation path for signing (found via scan)"
                             );
                             let signature =
-                                signer::sign(&data, &extended_key.private_key.secret_bytes())
+                                signer::sign(&data, extended_key.private_key.to_bytes().as_slice())
                                     .map_err(|_| TaskError::EncryptionError {
                                         detail:
                                             "Failed to sign with the recovered derivation path."
@@ -1163,18 +1157,100 @@ impl QualifiedIdentity {
         None
     }
 
+    /// The key to sign document transitions on `document_type` with, within
+    /// `scope`: a live AUTHENTICATION key at a level the type accepts
+    /// ([`document_security_levels`]) whose contract bounds permit `scope`,
+    /// unlimited keys first (see [`crate::model::identity_key_usability`]).
+    /// The level the type requires is preferred; a stronger key signs only
+    /// when no key at that level qualifies.
     pub fn document_signing_key(
         &self,
+        scope: SigningScope<'_>,
         document_type: &DocumentTypeRef,
     ) -> Option<&IdentityPublicKey> {
-        self.identity.get_first_public_key_matching(
+        document_security_levels(*document_type)
+            .iter()
+            .rev()
+            .find_map(|level| {
+                self.signing_key_now(KeyRequirements::new(
+                    Purpose::AUTHENTICATION,
+                    std::slice::from_ref(level),
+                    scope,
+                ))
+            })
+    }
+
+    /// The key to sign an action on document type `document_type_name` of
+    /// `contract` with: a live AUTHENTICATION key at a level the type accepts
+    /// ([`document_security_levels`]), of one of `key_types` when given, whose
+    /// bounds permit that document type; unlimited keys first. `None` when the
+    /// contract has no such type or no key qualifies.
+    pub fn document_action_signing_key(
+        &self,
+        contract: &DataContract,
+        document_type_name: &str,
+        key_types: Option<&[KeyType]>,
+    ) -> Option<&IdentityPublicKey> {
+        let document_type = contract.document_type_for_name(document_type_name).ok()?;
+        let levels = document_security_levels(document_type);
+        let mut requirements = KeyRequirements::new(
             Purpose::AUTHENTICATION,
-            HashSet::from([document_type.security_level_requirement()]),
-            HashSet::from(KeyType::all_key_types()),
+            &levels,
+            SigningScope::Document {
+                contract_id: contract.id(),
+                document_type_name,
+            },
+        );
+        if let Some(key_types) = key_types {
+            requirements = requirements.with_key_types(key_types);
+        }
+        self.signing_key_now(requirements)
+    }
+
+    /// The ENCRYPTION key whose wallet seeds DashPay auto-accept proofs
+    /// (DIP-15): the first MEDIUM ECDSA_SECP256K1 one.
+    pub fn auto_accept_proof_key(&self) -> Option<&IdentityPublicKey> {
+        self.identity.get_first_public_key_matching(
+            Purpose::ENCRYPTION,
+            std::collections::HashSet::from([SecurityLevel::MEDIUM]),
+            std::collections::HashSet::from([KeyType::ECDSA_SECP256K1]),
             false,
         )
     }
 
+    /// The key as the identity holds it now for `snapshot`, a copy taken
+    /// earlier (e.g. stored next to its private half): budget and expiry move
+    /// with key limits updates, so the snapshot may be stale. Falls back to
+    /// the snapshot when the identity no longer holds the same key.
+    pub fn live_public_key<'a>(&'a self, snapshot: &'a IdentityPublicKey) -> &'a IdentityPublicKey {
+        self.identity
+            .public_keys()
+            .get(&snapshot.id())
+            .filter(|live| encrypted_key_storage::same_key(snapshot, live))
+            .unwrap_or(snapshot)
+    }
+
+    /// The key to sign with for `requirements` now: the automatic choice of
+    /// [`select_identity_signing_key`] among the keys this device holds the
+    /// private half of.
+    pub fn signing_key_now(&self, requirements: KeyRequirements<'_>) -> Option<&IdentityPublicKey> {
+        select_identity_signing_key(&self.identity, requirements, now_ms(), |key| {
+            self.can_sign_with(key)
+        })
+    }
+
+    /// The key [`select_identity_signing_key`] would pick for `requirements`
+    /// now, whether or not this device holds its private half. For
+    /// informational lookups only (e.g. pointing the user at a key whose
+    /// private half they should load) — never for signing; use
+    /// [`Self::signing_key_now`] for that.
+    pub fn matching_key_now(
+        &self,
+        requirements: KeyRequirements<'_>,
+    ) -> Option<&IdentityPublicKey> {
+        select_identity_signing_key(&self.identity, requirements, now_ms(), |_| true)
+    }
+
     pub fn available_withdrawal_keys(&self) -> Vec<&QualifiedIdentityPublicKey> {
         let mut keys = vec![];
 
@@ -2022,6 +2098,34 @@ mod key_resolution_tests {
         }
     }
 
+    #[tokio::test]
+    async fn bls_signing_preserves_the_previous_sdk_basic_signature_bytes() {
+        // Generated with the previous pin's blsful Basic signer using this synthetic key.
+        let secret = [0x11; 32];
+        let public = bls::SecretKey::from_be_bytes(&secret).unwrap().public_key();
+        let key = IdentityPublicKey::V0(IdentityPublicKeyV0 {
+            id: 3,
+            purpose: Purpose::AUTHENTICATION,
+            security_level: SecurityLevel::HIGH,
+            contract_bounds: None,
+            key_type: KeyType::BLS12_381,
+            read_only: false,
+            data: BinaryData::new(public.to_bytes().to_vec()),
+            disabled_at: None,
+        });
+        let identity = masternode_with(&key, &[(MAIN, PrivateKeyData::Clear(secret))]);
+        let signature = identity
+            .sign(&key, b"DET BLS adapter parity")
+            .await
+            .unwrap();
+        assert_eq!(
+            hex::encode(signature.as_slice()),
+            "94765bd6758b7cd55024a38dc591f3090e9535d97a94ae7674239c559b4733e64dcae72c3d50d96788dfb0475e921bd608410c7a556ab0fab22f9ceb15139c54f8cf8a34e3900f7ab58c6497d3e9b7f6e04445237da30cf635550276eb981c45"
+        );
+        let invalid = masternode_with(&key, &[(MAIN, PrivateKeyData::Clear([0; 32]))]);
+        assert!(invalid.sign(&key, b"DET BLS adapter parity").await.is_err());
+    }
+
     /// T0 — a `Purpose::VOTING` key on the main identity must be signable
     /// wherever its private half is filed. Held under `Main` is what the
     /// authoritative loader writes and what the structural target names; held
@@ -2620,6 +2724,30 @@ pub(crate) mod withdrawal_key_tests {
         assert!(qi.default_withdrawal_key().is_none());
     }
 
+    /// Regression: the withdraw screen's "Check Owner Key" / "Check Payout
+    /// Address Key" buttons render exactly when no signable key is held, so
+    /// their lookup must still find a public-only key.
+    #[test]
+    fn a_public_only_owner_key_is_found_for_information_but_not_for_signing() {
+        let owner = key(2, Purpose::OWNER);
+        let transfer = key(3, Purpose::TRANSFER);
+        let qi = build_identity(IdentityType::Masternode, vec![owner, transfer], vec![]);
+        let levels = SecurityLevel::full_range();
+        let requirements = |purpose| KeyRequirements::new(purpose, &levels, SigningScope::NonBatch);
+
+        assert!(qi.signing_key_now(requirements(Purpose::OWNER)).is_none());
+        assert_eq!(
+            qi.matching_key_now(requirements(Purpose::OWNER))
+                .map(|k| k.id()),
+            Some(2)
+        );
+        assert_eq!(
+            qi.matching_key_now(requirements(Purpose::TRANSFER))
+                .map(|k| k.id()),
+            Some(3)
+        );
+    }
+
     #[test]
     fn private_backed_transfer_key_is_selected() {
         let transfer = key(1, Purpose::TRANSFER);
@@ -3236,6 +3364,295 @@ mod decode_limit_tests {
     }
 }
 
+/// Protocol version 14 added `IdentityPublicKey::V1` (key limits) and
+/// `ContractBounds::ContractGroup`. Stored identity blobs carry both enums, so
+/// blobs written before the bump must decode unchanged and the new variants
+/// must round-trip.
+#[cfg(test)]
+mod protocol_v14_compat_tests {
+    use super::*;
+    use crate::model::identity_key_usability::SigningScope;
+    use dash_sdk::dpp::data_contract::document_type::DocumentTypeRef;
+    use dash_sdk::dpp::data_contract::document_type::accessors::DocumentTypeV0Getters;
+    use dash_sdk::dpp::identity::accessors::IdentitySettersV0;
+    use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+    use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
+    use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+    use dash_sdk::dpp::version::PlatformVersion;
+    use dash_sdk::platform::Identifier;
+
+    /// The bundled v0.9.3 profile: real identity rows written by DET v0.9.3.
+    const V0_9_3_DATA_SQL: &str =
+        include_str!("../../../tests/migration-fixtures/v0.9.3-public-identities/data.sql");
+
+    /// The stored blob of the v0.9.3 user identity `public-dpns-user`.
+    fn v0_9_3_user_blob() -> Vec<u8> {
+        const ROW: &str = "INSERT INTO \"identity\" VALUES(X'3B9DA97EBC06C07C0C0C48695EA5D36CAECE9E19E4944AAE5548691D9A80FAE5',X'";
+        let start = V0_9_3_DATA_SQL.find(ROW).expect("the user identity row") + ROW.len();
+        let len = V0_9_3_DATA_SQL[start..]
+            .find('\'')
+            .expect("the end of the blob literal");
+        hex::decode(&V0_9_3_DATA_SQL[start..start + len]).expect("a hex blob")
+    }
+
+    #[test]
+    fn a_blob_written_before_protocol_v14_still_decodes_with_v0_keys() {
+        let qi = QualifiedIdentity::from_bytes(&v0_9_3_user_blob()).expect("decodes");
+
+        let keys = qi.identity.public_keys();
+        assert_eq!(keys.len(), 6, "as the v0.9.3 fixture expectations list");
+        assert!(
+            keys.values().all(|k| matches!(k, IdentityPublicKey::V0(_))),
+            "every pre-v14 key decodes as V0"
+        );
+        assert!(keys.values().all(|k| !k.has_limits()));
+        let bounds: Vec<_> = keys.values().filter_map(|k| k.contract_bounds()).collect();
+        assert_eq!(
+            bounds.len(),
+            2,
+            "the DashPay encryption and decryption keys"
+        );
+        assert!(bounds.iter().all(|b| matches!(
+            b,
+            ContractBounds::SingleContractDocumentType { document_type_name, .. }
+                if document_type_name == "contactRequest"
+        )));
+
+        let reencoded = QualifiedIdentity::from_bytes(&qi.to_bytes()).expect("re-decodes");
+        assert_eq!(reencoded.identity, qi.identity, "a re-save keeps every key");
+    }
+
+    #[test]
+    fn keys_with_limits_and_group_bounds_round_trip_through_the_blob() {
+        let mut qi = QualifiedIdentity::from_bytes(&v0_9_3_user_blob()).expect("decodes");
+        let pv = PlatformVersion::latest();
+        let limited = IdentityPublicKey::random_key(10, Some(1), pv)
+            .with_limits(Some(5_000_000), Some(1_900_000_000_000));
+        let grouped = match IdentityPublicKey::random_key(11, Some(2), pv) {
+            IdentityPublicKey::V0(mut v0) => {
+                v0.contract_bounds = Some(ContractBounds::ContractGroup {
+                    id: Identifier::from([7u8; 32]),
+                });
+                IdentityPublicKey::V0(v0)
+            }
+            other => other,
+        };
+        let mut keys = qi.identity.public_keys().clone();
+        keys.insert(10, limited.clone());
+        keys.insert(11, grouped.clone());
+        qi.identity.set_public_keys(keys);
+
+        let decoded = QualifiedIdentity::from_bytes(&qi.to_bytes()).expect("decodes");
+        let keys = decoded.identity.public_keys();
+        assert_eq!(keys.get(&10), Some(&limited));
+        assert_eq!(keys[&10].total_budget(), Some(5_000_000));
+        assert_eq!(keys[&10].expires_at(), Some(1_900_000_000_000));
+        assert_eq!(keys.get(&11), Some(&grouped));
+    }
+
+    /// A key extended on the network but stored here as its expired copy is
+    /// judged by the live key: no "expired" caveat (the key chooser's view).
+    #[test]
+    fn an_extended_key_is_not_reported_expired_from_its_stale_copy() {
+        use crate::model::identity_key_usability::{KeyCaveat, key_caveats};
+        let pv = PlatformVersion::latest();
+        let stale = IdentityPublicKey::random_key(7, Some(7), pv).with_limits(None, Some(1));
+        let extended = stale.clone().with_limits(None, Some(u64::MAX));
+        let mut qi = QualifiedIdentity::from_bytes(&v0_9_3_user_blob()).expect("decodes");
+        qi.identity
+            .set_public_keys(BTreeMap::from([(7, extended.clone())]));
+
+        let live = qi.live_public_key(&stale);
+        assert_eq!(live, &extended);
+        let caveats = key_caveats(live, SigningScope::NonBatch, 1_000);
+        assert!(
+            !caveats
+                .iter()
+                .any(|caveat| matches!(caveat, KeyCaveat::Expired { .. })),
+            "{caveats:?}"
+        );
+        assert!(
+            key_caveats(&stale, SigningScope::NonBatch, 1_000)
+                .iter()
+                .any(|caveat| matches!(caveat, KeyCaveat::Expired { .. })),
+            "the stale copy alone would say expired"
+        );
+    }
+
+    /// Platform accepts a stronger key than a document type requires, so a
+    /// CRITICAL key signs a HIGH document type when no HIGH key is held; a
+    /// MASTER key never does.
+    #[test]
+    fn document_signing_key_accepts_a_stronger_key_than_required() {
+        use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+        use dash_sdk::dpp::identity::{KeyType, Purpose};
+
+        let pv = PlatformVersion::latest();
+        let dpns = dash_sdk::dpp::system_data_contracts::load_system_data_contract(
+            dash_sdk::dpp::system_data_contracts::SystemDataContract::DPNS,
+            pv,
+        )
+        .expect("the DPNS contract");
+        let preorder: DocumentTypeRef = dpns.document_type_for_name("preorder").expect("preorder");
+        assert_eq!(preorder.security_level_requirement(), SecurityLevel::HIGH);
+
+        let auth_key = |id: KeyID, level: SecurityLevel| {
+            let mut key = IdentityPublicKey::random_key(id, Some(u64::from(id)), pv);
+            key.set_purpose(Purpose::AUTHENTICATION);
+            key.set_security_level(level);
+            key.set_key_type(KeyType::ECDSA_SECP256K1);
+            key
+        };
+        let all = [
+            auth_key(1, SecurityLevel::MASTER),
+            auth_key(2, SecurityLevel::CRITICAL),
+        ];
+        let mut qi = QualifiedIdentity::from_bytes(&v0_9_3_user_blob()).expect("decodes");
+        qi.private_keys = Default::default();
+        for key in &all {
+            qi.private_keys
+                .insert_non_encrypted(
+                    (PrivateKeyTarget::PrivateKeyOnMainIdentity, key.id()),
+                    (
+                        QualifiedIdentityPublicKey {
+                            identity_public_key: key.clone(),
+                            in_wallet_at_derivation_path: None,
+                        },
+                        [key.id() as u8; 32],
+                    ),
+                )
+                .expect("a free slot");
+        }
+        qi.identity
+            .set_public_keys(all.iter().map(|key| (key.id(), key.clone())).collect());
+        let scope = SigningScope::ContractWide {
+            contract_id: dpns.id(),
+        };
+        assert_eq!(
+            qi.document_signing_key(scope, &preorder).map(|k| k.id()),
+            Some(2),
+            "the CRITICAL key, never the MASTER key"
+        );
+
+        // A key at the required level is still preferred over a stronger one.
+        let high = auth_key(3, SecurityLevel::HIGH);
+        qi.private_keys
+            .insert_non_encrypted(
+                (PrivateKeyTarget::PrivateKeyOnMainIdentity, high.id()),
+                (
+                    QualifiedIdentityPublicKey {
+                        identity_public_key: high.clone(),
+                        in_wallet_at_derivation_path: None,
+                    },
+                    [high.id() as u8; 32],
+                ),
+            )
+            .expect("a free slot");
+        let mut keys = qi.identity.public_keys().clone();
+        keys.insert(high.id(), high);
+        qi.identity.set_public_keys(keys);
+        assert_eq!(
+            qi.document_signing_key(scope, &preorder).map(|k| k.id()),
+            Some(3),
+            "the HIGH key the type asks for"
+        );
+    }
+
+    /// The document signing key skips a key Platform would refuse (expired,
+    /// bound elsewhere) and prefers an unlimited key over a limited one.
+    #[test]
+    fn document_signing_key_picks_a_usable_unlimited_key() {
+        use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+        use dash_sdk::dpp::identity::{KeyType, Purpose};
+
+        let pv = PlatformVersion::latest();
+        let dpns = dash_sdk::dpp::system_data_contracts::load_system_data_contract(
+            dash_sdk::dpp::system_data_contracts::SystemDataContract::DPNS,
+            pv,
+        )
+        .expect("the DPNS contract");
+        let preorder: DocumentTypeRef = dpns.document_type_for_name("preorder").expect("preorder");
+        let level = preorder.security_level_requirement();
+
+        let auth_key = |id: KeyID| {
+            let mut key = IdentityPublicKey::random_key(id, Some(u64::from(id)), pv);
+            key.set_purpose(Purpose::AUTHENTICATION);
+            key.set_security_level(level);
+            key.set_key_type(KeyType::ECDSA_SECP256K1);
+            key
+        };
+        let expired = auth_key(1).with_limits(None, Some(1));
+        let elsewhere = match auth_key(2) {
+            IdentityPublicKey::V0(mut v0) => {
+                v0.contract_bounds = Some(ContractBounds::SingleContract {
+                    id: Identifier::from([9u8; 32]),
+                });
+                IdentityPublicKey::V0(v0)
+            }
+            other => other,
+        };
+        let limited = auth_key(3).with_limits(Some(1_000), None);
+        let plain = auth_key(4);
+
+        let mut qi = QualifiedIdentity::from_bytes(&v0_9_3_user_blob()).expect("decodes");
+        let all = [expired, elsewhere, limited, plain];
+        qi.private_keys = Default::default();
+        for key in &all {
+            qi.private_keys
+                .insert_non_encrypted(
+                    (PrivateKeyTarget::PrivateKeyOnMainIdentity, key.id()),
+                    (
+                        QualifiedIdentityPublicKey {
+                            identity_public_key: key.clone(),
+                            in_wallet_at_derivation_path: None,
+                        },
+                        [key.id() as u8; 32],
+                    ),
+                )
+                .expect("a free slot");
+        }
+        qi.identity
+            .set_public_keys(all.iter().map(|key| (key.id(), key.clone())).collect());
+        let scope = SigningScope::ContractWide {
+            contract_id: dpns.id(),
+        };
+        assert_eq!(
+            qi.document_signing_key(scope, &preorder).map(|k| k.id()),
+            Some(4),
+            "the unlimited, unbound, live key"
+        );
+
+        let mut keys = qi.identity.public_keys().clone();
+        keys.remove(&4);
+        qi.identity.set_public_keys(keys);
+        assert_eq!(
+            qi.document_signing_key(scope, &preorder).map(|k| k.id()),
+            Some(3),
+            "a limited key when it is the only usable one"
+        );
+
+        // The stored snapshot of key 3 is judged by the live key.
+        let mut keys = qi.identity.public_keys().clone();
+        let raised = keys[&3].clone().with_limits(Some(9_000), None);
+        let snapshot = keys[&3].clone();
+        keys.insert(3, raised.clone());
+        qi.identity.set_public_keys(keys);
+        assert_eq!(qi.live_public_key(&snapshot), &raised);
+        let unknown = auth_key(42);
+        assert_eq!(qi.live_public_key(&unknown), &unknown);
+
+        // A held limited key beats an unlimited key whose private half is
+        // not on this device.
+        let mut keys = qi.identity.public_keys().clone();
+        keys.insert(5, auth_key(5));
+        qi.identity.set_public_keys(keys);
+        assert_eq!(
+            qi.document_signing_key(scope, &preorder).map(|k| k.id()),
+            Some(3),
+            "the unlimited key 5 cannot be signed with here"
+        );
+    }
+}
 #[cfg(test)]
 mod identity_display_name_tests {
     use super::*;
diff --git a/src/model/qualified_identity/qualified_identity_public_key.rs b/src/model/qualified_identity/qualified_identity_public_key.rs
index dbfd56424..b5e1e0966 100644
--- a/src/model/qualified_identity/qualified_identity_public_key.rs
+++ b/src/model/qualified_identity/qualified_identity_public_key.rs
@@ -132,11 +132,11 @@ fn find_wallet_path(
 mod tests {
     use super::*;
     use dash_sdk::dpp::dashcore::hashes::Hash;
-    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
     use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
     use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
     use dash_sdk::dpp::key_wallet::bip32::{DerivationPath, KeyDerivationType};
     use dash_sdk::dpp::platform_value::BinaryData;
+    use dash_sdk::dpp::secp256k1::SecretKey;
 
     const TEST_SEED: [u8; 64] = [7u8; 64];
 
@@ -145,9 +145,9 @@ mod tests {
     fn pubkey(n: u8) -> PublicKey {
         let mut sk_bytes = [3u8; 32];
         sk_bytes[31] = n.max(1);
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&sk_bytes).expect("valid secret key");
-        PublicKey::new(sk.public_key(&secp))
+
+        let sk = SecretKey::from_secret_bytes(sk_bytes).expect("valid secret key");
+        PublicKey::new(sk.public_key())
     }
 
     /// An identity public key of `key_type` carrying `data`. `id`/`purpose`/
diff --git a/src/model/single_key.rs b/src/model/single_key.rs
index 85b21b8b0..27951c958 100644
--- a/src/model/single_key.rs
+++ b/src/model/single_key.rs
@@ -10,7 +10,7 @@
 //! (spending gated) until single-key moves onto the upstream wallet runtime.
 
 use dash_sdk::dpp::dashcore::key::Error as KeyError;
-use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
 use dash_sdk::dpp::dashcore::{Address, Network, PrivateKey, PublicKey};
 use serde::{Deserialize, Serialize};
 
@@ -22,10 +22,10 @@ use serde::{Deserialize, Serialize};
 /// task is the authoritative enforcement layer.
 pub fn validate_wif(wif: &str, network: Network) -> Result<String, KeyError> {
     let priv_key = PrivateKey::from_wif(wif)?;
-    let secp = Secp256k1::new();
+
     let pub_key = PublicKey {
         compressed: priv_key.compressed,
-        inner: priv_key.inner.public_key(&secp),
+        inner: priv_key.inner.public_key(),
     };
     let address = Address::p2pkh(&pub_key, network);
     Ok(address.to_string())
diff --git a/src/model/token.rs b/src/model/token.rs
index de3669c7d..50ce92616 100644
--- a/src/model/token.rs
+++ b/src/model/token.rs
@@ -1,4 +1,15 @@
 use super::validation::{TextLengthError, validate_char_count};
+use dash_sdk::dpp::balances::credits::TokenAmount;
+use dash_sdk::dpp::data_contract::TokenConfiguration;
+use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::TokenDistributionRules;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::accessors::v1::TokenDistributionRulesV1Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::v0::TokenDistributionRulesV0;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::v1::TokenDistributionRulesV1;
+use dash_sdk::dpp::data_contract::associated_token::token_once_per_identity_distribution::{
+    TokenOncePerIdentityDistribution, accessors::v0::TokenOncePerIdentityDistributionV0Methods,
+    v0::TokenOncePerIdentityDistributionV0,
+};
 
 /// Minimum number of characters in a searchable contract keyword.
 pub const MIN_CONTRACT_KEYWORD_CHARS: usize = 3;
@@ -14,10 +25,150 @@ pub fn validate_contract_keyword(keyword: &str) -> Result<(), TextLengthError> {
     )
 }
 
+/// The largest amount a once-per-identity distribution may pay: a token
+/// balance must fit in `i64`.
+pub const MAX_ONCE_PER_IDENTITY_AMOUNT: TokenAmount = i64::MAX as TokenAmount;
+
+/// Why a once-per-identity amount entered by the user is not acceptable.
+#[derive(Debug, Clone, PartialEq, Eq, thiserror::Error)]
+pub enum OncePerIdentityAmountError {
+    /// Not a whole number.
+    #[error("Enter the amount each identity can claim as a whole number.")]
+    NotANumber,
+    /// Zero pays nothing.
+    #[error("Enter an amount of at least 1 for each identity to claim.")]
+    Zero,
+    /// More than a token balance can hold.
+    #[error("Enter an amount of at most {max} for each identity to claim.")]
+    TooLarge { max: TokenAmount },
+}
+
+/// Parse the amount (in the token's smallest units) every identity may claim
+/// once, as Platform bounds it: at least 1, at most
+/// [`MAX_ONCE_PER_IDENTITY_AMOUNT`].
+pub fn parse_once_per_identity_amount(
+    input: &str,
+) -> Result<TokenAmount, OncePerIdentityAmountError> {
+    let amount: TokenAmount = input
+        .trim()
+        .parse()
+        .map_err(|_| OncePerIdentityAmountError::NotANumber)?;
+    match amount {
+        0 => Err(OncePerIdentityAmountError::Zero),
+        amount if amount > MAX_ONCE_PER_IDENTITY_AMOUNT => {
+            Err(OncePerIdentityAmountError::TooLarge {
+                max: MAX_ONCE_PER_IDENTITY_AMOUNT,
+            })
+        }
+        amount => Ok(amount),
+    }
+}
+
+/// The amount every identity may claim once from `config`, when the token has
+/// a once-per-identity distribution (protocol version 14).
+pub fn once_per_identity_amount(config: &TokenConfiguration) -> Option<TokenAmount> {
+    config
+        .distribution_rules()
+        .once_per_identity_distribution()
+        .map(|distribution| distribution.amount())
+}
+
+/// The distribution rules for `rules` plus an optional once-per-identity
+/// distribution of `once_per_identity_amount`.
+///
+/// Without one the rules stay version 0, the wire format every token used
+/// before protocol version 14 and the only one older networks accept; with one
+/// they become version 1.
+pub fn distribution_rules_with_once_per_identity(
+    rules: TokenDistributionRulesV0,
+    once_per_identity_amount: Option<TokenAmount>,
+) -> TokenDistributionRules {
+    match once_per_identity_amount {
+        None => TokenDistributionRules::V0(rules),
+        Some(amount) => {
+            let mut v1 = TokenDistributionRulesV1::from(rules);
+            v1.once_per_identity_distribution = Some(TokenOncePerIdentityDistribution::V0(
+                TokenOncePerIdentityDistributionV0 { amount },
+            ));
+            TokenDistributionRules::V1(v1)
+        }
+    }
+}
+
+/// Whether this application supports editing the requested token setting.
+pub(crate) fn token_change_item_is_supported(
+    item: &dash_sdk::dpp::data_contract::associated_token::token_configuration_item::TokenConfigurationChangeItem,
+) -> bool {
+    use dash_sdk::dpp::data_contract::associated_token::token_configuration_item::TokenConfigurationChangeItem;
+    !matches!(
+        item,
+        TokenConfigurationChangeItem::MinimumPoolNotesForOutgoing(_)
+            | TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingControlGroup(_)
+            | TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingAdminGroup(_)
+    )
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
 
+    #[test]
+    fn once_per_identity_amount_is_bounded_like_a_token_balance() {
+        assert_eq!(parse_once_per_identity_amount(" 25 "), Ok(25));
+        assert_eq!(
+            parse_once_per_identity_amount(&MAX_ONCE_PER_IDENTITY_AMOUNT.to_string()),
+            Ok(MAX_ONCE_PER_IDENTITY_AMOUNT)
+        );
+        assert_eq!(
+            parse_once_per_identity_amount("0"),
+            Err(OncePerIdentityAmountError::Zero)
+        );
+        assert_eq!(
+            parse_once_per_identity_amount(&(MAX_ONCE_PER_IDENTITY_AMOUNT + 1).to_string()),
+            Err(OncePerIdentityAmountError::TooLarge {
+                max: MAX_ONCE_PER_IDENTITY_AMOUNT
+            })
+        );
+        assert_eq!(
+            parse_once_per_identity_amount("1.5"),
+            Err(OncePerIdentityAmountError::NotANumber)
+        );
+    }
+
+    /// The rules of the most restrictive default token, which are version 0.
+    fn base_rules() -> TokenDistributionRulesV0 {
+        use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+        match TokenConfigurationV0::default_most_restrictive().distribution_rules {
+            TokenDistributionRules::V0(v0) => v0,
+            TokenDistributionRules::V1(_) => panic!("the default rules are version 0"),
+        }
+    }
+
+    #[test]
+    fn rules_without_a_once_per_identity_distribution_stay_version_0() {
+        let rules = distribution_rules_with_once_per_identity(base_rules(), None);
+        assert!(matches!(rules, TokenDistributionRules::V0(_)));
+        assert_eq!(rules.once_per_identity_distribution(), None);
+    }
+
+    #[test]
+    fn a_once_per_identity_distribution_makes_version_1_rules() {
+        let base = base_rules();
+        let rules = distribution_rules_with_once_per_identity(base.clone(), Some(40));
+        let TokenDistributionRules::V1(v1) = &rules else {
+            panic!("expected version 1 rules");
+        };
+        assert_eq!(v1.perpetual_distribution, base.perpetual_distribution);
+        assert_eq!(
+            v1.pre_programmed_distribution,
+            base.pre_programmed_distribution
+        );
+        assert_eq!(
+            rules.once_per_identity_distribution().map(|d| d.amount()),
+            Some(40)
+        );
+    }
+
     #[test]
     fn contract_keyword_accepts_boundary_lengths() {
         assert!(validate_contract_keyword("abc").is_ok());
diff --git a/src/model/wallet/auth_pubkey_cache.rs b/src/model/wallet/auth_pubkey_cache.rs
index 374653d82..4dcb8284a 100644
--- a/src/model/wallet/auth_pubkey_cache.rs
+++ b/src/model/wallet/auth_pubkey_cache.rs
@@ -117,7 +117,7 @@ impl AuthPubkeyCache {
         public_key: &PublicKey,
     ) -> bool {
         let coord = AuthKeyCoord::new(network, identity_index, key_index);
-        let bytes = public_key.inner.serialize().to_vec();
+        let bytes = public_key.inner.to_compressed().to_vec();
         match self.entries.entry(coord) {
             Entry::Occupied(e) if *e.get() == bytes => false,
             Entry::Occupied(mut e) => {
@@ -156,15 +156,12 @@ impl std::fmt::Debug for AuthPubkeyCache {
 #[cfg(test)]
 mod tests {
     use super::*;
-    use dash_sdk::dpp::dashcore::secp256k1::{
-        PublicKey as Secp256k1PublicKey, Secp256k1, SecretKey,
-    };
+    use dash_sdk::dpp::secp256k1::{PublicKey as Secp256k1PublicKey, SecretKey};
 
     /// Deterministic test public key from a one-byte seed.
     fn pubkey(seed: u8) -> PublicKey {
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[seed.max(1); 32]).expect("valid secret key");
-        let inner = Secp256k1PublicKey::from_secret_key(&secp, &sk);
+        let sk = SecretKey::from_secret_bytes([seed.max(1); 32]).expect("valid secret key");
+        let inner = Secp256k1PublicKey::from_secret_key(&sk);
         PublicKey::new(inner)
     }
 
@@ -187,7 +184,7 @@ mod tests {
         assert!(cache.insert(Network::Mainnet, 1, 2, &pk));
         let got = cache.get(Network::Mainnet, 1, 2).expect("hit");
         assert_eq!(got, pk);
-        assert_eq!(got.inner.serialize(), pk.inner.serialize());
+        assert_eq!(got.inner.to_compressed(), pk.inner.to_compressed());
     }
 
     /// AUTH-CACHE-003 — coordinates are network-keyed: the same indices
diff --git a/src/model/wallet/mod.rs b/src/model/wallet/mod.rs
index d84ab6ac2..600c585e9 100644
--- a/src/model/wallet/mod.rs
+++ b/src/model/wallet/mod.rs
@@ -22,7 +22,6 @@ use dash_sdk::dpp::prelude::AddressNonce;
 use dash_sdk::platform::address_sync::{AddressFunds, AddressIndex, AddressProvider};
 use platform_wallet_storage::secrets::{MAX_PASSPHRASE_LEN, MIN_PASSPHRASE_LEN};
 
-use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
 use dash_sdk::dpp::dashcore::{
     Address, BlockHash, Network, PrivateKey, PublicKey, Transaction, Txid,
 };
@@ -486,14 +485,13 @@ impl Wallet {
             }
         })?;
         let bip44_path = Self::bip44_account0_path(network);
-        let secp = Secp256k1::new();
-        let account_priv = master_priv.derive_priv(&secp, &bip44_path).map_err(|e| {
+
+        let account_priv = master_priv.derive_priv(&bip44_path).map_err(|e| {
             WalletCreationError::KeyDerivation {
                 source: Box::new(e),
             }
         })?;
-        let master_bip44_ecdsa_extended_public_key =
-            ExtendedPubKey::from_priv(&secp, &account_priv);
+        let master_bip44_ecdsa_extended_public_key = ExtendedPubKey::from_priv(&account_priv);
 
         // Cache the DIP-17 platform-payment account xpub up front (like the
         // BIP44 one above) so platform addresses stay reverse-derivable —
@@ -511,7 +509,7 @@ impl Wallet {
 
         // Derive the first receive address (m/44'/coin'/0'/0/0)
         let (known_addresses, watched_addresses) =
-            Self::derive_first_address(&master_bip44_ecdsa_extended_public_key, network, &secp)
+            Self::derive_first_address(&master_bip44_ecdsa_extended_public_key, network)
                 .map_err(|e| WalletCreationError::KeyDerivation { source: e.into() })?;
 
         Ok(Wallet {
@@ -551,7 +549,6 @@ impl Wallet {
     fn derive_first_address(
         master_pub: &ExtendedPubKey,
         network: Network,
-        secp: &Secp256k1<dash_sdk::dpp::dashcore::secp256k1::All>,
     ) -> Result<
         (
             BTreeMap<Address, DerivationPath>,
@@ -570,7 +567,7 @@ impl Wallet {
             .as_slice(),
         );
 
-        let pk = master_pub.derive_pub(secp, &address_path)?;
+        let pk = master_pub.derive_pub(&address_path)?;
         let address = Address::p2pkh(&pk.to_pub(), network);
         let bip44 = match network {
             Network::Mainnet => &DASH_BIP44_ACCOUNT_0_PATH_MAINNET,
@@ -1036,18 +1033,13 @@ impl Wallet {
         for wallet in slice {
             let wallet_ref = wallet.read_recover();
             if wallet_ref.seed_hash() == wallet_seed_hash {
-                // SECURITY: `ExtendedPrivKey` is a `Copy` BIP-32 type from
-                // key_wallet with no `Drop`, so its inner SecretKey + ChainCode
-                // cannot be wiped by RAII here. Extract the key straight into a
-                // `Zeroizing` buffer and never bind the intermediate to a named
-                // local; the transient copy left on the stack is the
-                // unavoidable residue of a third-party `Copy` type.
-                let secret = Zeroizing::new(
-                    derivation_path
-                        .derive_priv_ecdsa_for_master_seed(seed, network)?
-                        .private_key
-                        .secret_bytes(),
-                );
+                // SECURITY: extract the key straight into a `Zeroizing` buffer
+                // and never bind the intermediate `ExtendedPrivKey` to a named
+                // local; its secret key wipes itself when the temporary drops.
+                let secret = derivation_path
+                    .derive_priv_ecdsa_for_master_seed(seed, network)?
+                    .private_key
+                    .to_bytes();
                 return Ok(Some(secret));
             }
         }
@@ -1243,7 +1235,7 @@ impl Wallet {
         key_index: u32,
         public_key: &PublicKey,
     ) -> Result<(), WalletError> {
-        public_key_result_map.insert(public_key.inner.serialize().to_vec(), key_index);
+        public_key_result_map.insert(public_key.inner.to_compressed().to_vec(), key_index);
         public_key_hash_result_map.insert(public_key.pubkey_hash().to_byte_array(), key_index);
         if register_addresses {
             let derivation_path = DerivationPath::identity_authentication_path(
@@ -1271,8 +1263,7 @@ impl Wallet {
         path_reference: DerivationPathReference,
         app_context: &AppContext,
     ) -> Result<(), WalletError> {
-        let secp = Secp256k1::new();
-        let address = Address::p2pkh(&private_key.public_key(&secp), app_context.network);
+        let address = Address::p2pkh(&private_key.public_key(), app_context.network);
         self.register_address(
             address,
             derivation_path,
@@ -1350,7 +1341,7 @@ impl Wallet {
         app_context: &AppContext,
     ) -> Result<(), WalletError> {
         let coin_type = coin_type_for_network(network);
-        let secp = Secp256k1::new();
+
         for (change_flag, max) in [
             (false, BOOTSTRAP_BIP44_EXTERNAL_COUNT),
             (true, BOOTSTRAP_BIP44_CHANGE_COUNT),
@@ -1364,8 +1355,8 @@ impl Wallet {
                 ];
                 let derived = self
                     .master_bip44_ecdsa_extended_public_key
-                    .derive_pub(&secp, &child_path)?;
-                let dash_public_key = PublicKey::from_slice(&derived.public_key.serialize())
+                    .derive_pub(&child_path)?;
+                let dash_public_key = PublicKey::from_slice(&derived.public_key.to_compressed())
                     .map_err(|e| WalletError::PublicKeyParse(Box::new(e)))?;
                 let derivation_path = DerivationPath::from(vec![
                     ChildNumber::Hardened { index: 44 },
@@ -1640,8 +1631,8 @@ impl Wallet {
             let private_key = extended_private_key.to_priv();
 
             // Create a P2PKH address for platform payment
-            let secp = Secp256k1::new();
-            let public_key = private_key.public_key(&secp);
+
+            let public_key = private_key.public_key();
             let platform_address = Address::p2pkh(&public_key, network);
 
             let canonical = Wallet::canonical_address(&platform_address, network);
@@ -1699,7 +1690,6 @@ impl Wallet {
         seed: &[u8; 64],
         network: Network,
     ) -> Result<Address, WalletError> {
-        let secp = Secp256k1::new();
         let account = 0u32;
         let key_class = 0u32;
 
@@ -1716,7 +1706,7 @@ impl Wallet {
         let extended_private_key =
             derivation_path.derive_priv_ecdsa_for_master_seed(seed, network)?;
         let private_key = extended_private_key.to_priv();
-        let public_key = private_key.public_key(&secp);
+        let public_key = private_key.public_key();
 
         // Create a P2PKH address for platform payment
         let platform_address = Address::p2pkh(&public_key, network);
@@ -1733,7 +1723,6 @@ impl Wallet {
         change: bool,
         address_index: u32,
     ) -> Result<Address, WalletError> {
-        let secp = Secp256k1::new();
         let path_extension = [
             ChildNumber::Normal {
                 index: change as u32,
@@ -1744,7 +1733,7 @@ impl Wallet {
         ];
         let public_key = self
             .master_bip44_ecdsa_extended_public_key
-            .derive_pub(&secp, &path_extension)?
+            .derive_pub(&path_extension)?
             .to_pub();
         Ok(Address::p2pkh(&public_key, network))
     }
@@ -1920,9 +1909,8 @@ impl Wallet {
             .max(DEFAULT_GAP_LIMIT)
             .saturating_add(PLATFORM_RECONCILE_SCAN_MARGIN);
 
-        let secp = Secp256k1::new();
         for index in 0..=ceiling {
-            let child = match account_xpub.derive_pub(&secp, &[ChildNumber::Normal { index }]) {
+            let child = match account_xpub.derive_pub(&[ChildNumber::Normal { index }]) {
                 Ok(child) => child,
                 Err(e) => {
                     tracing::warn!(
@@ -2024,10 +2012,10 @@ pub(crate) fn derive_platform_payment_account_xpub(
         ChildNumber::Hardened { index: account },
         ChildNumber::Hardened { index: key_class },
     ]);
-    let secp = Secp256k1::new();
+
     let master = ExtendedPrivKey::new_master(network, seed)?;
-    let account_priv = master.derive_priv(&secp, &account_path)?;
-    Ok(ExtendedPubKey::from_priv(&secp, &account_priv))
+    let account_priv = master.derive_priv(&account_path)?;
+    Ok(ExtendedPubKey::from_priv(&account_priv))
 }
 
 /// Provider for wallet Platform addresses that implements AddressProvider for SDK address sync.
@@ -2217,10 +2205,9 @@ impl WalletAddressProvider {
         &self,
         index: AddressIndex,
     ) -> Result<(PlatformAddress, Address), WalletError> {
-        let secp = Secp256k1::new();
         let child = self
             .account_xpub
-            .derive_pub(&secp, &[ChildNumber::Normal { index }])?;
+            .derive_pub(&[ChildNumber::Normal { index }])?;
         let public_key = child.to_pub();
 
         // Create P2PKH address
@@ -2346,7 +2333,6 @@ pub(crate) mod test_support {
     pub(crate) fn open_wallet() -> Wallet {
         let seed = TEST_SEED;
         let network = Network::Testnet;
-        let secp = Secp256k1::new();
 
         // Derive master private key from seed
         let master_private_key =
@@ -2359,10 +2345,10 @@ pub(crate) mod test_support {
             ChildNumber::Hardened { index: 0 },
         ]);
         let bip44_account_private = master_private_key
-            .derive_priv(&secp, &bip44_account_path)
+            .derive_priv(&bip44_account_path)
             .expect("bip44 derivation");
         let master_bip44_ecdsa_extended_public_key =
-            ExtendedPubKey::from_priv(&secp, &bip44_account_private);
+            ExtendedPubKey::from_priv(&bip44_account_private);
 
         let seed_hash = ClosedKeyItem::compute_seed_hash(&seed);
 
@@ -2409,12 +2395,12 @@ mod tests {
 
     /// Helper: create a test address on Testnet
     fn test_address(index: u8) -> Address {
-        use dash_sdk::dpp::dashcore::secp256k1::SecretKey;
-        let secp = Secp256k1::new();
+        use dash_sdk::dpp::secp256k1::SecretKey;
+
         let mut sk_bytes = [0u8; 32];
         sk_bytes[0] = if index == 0 { 1 } else { index };
-        let sk = SecretKey::from_slice(&sk_bytes).expect("valid secret key");
-        let inner = dash_sdk::dpp::dashcore::secp256k1::PublicKey::from_secret_key(&secp, &sk);
+        let sk = SecretKey::from_secret_bytes(sk_bytes).expect("valid secret key");
+        let inner = dash_sdk::dpp::secp256k1::PublicKey::from_secret_key(&sk);
         let pubkey = PublicKey::from_slice(&inner.serialize()).expect("valid pubkey");
         Address::p2pkh(&pubkey, Network::Testnet)
     }
@@ -2964,7 +2950,10 @@ mod tests {
                     .expect("cache hit");
 
                 assert_eq!(from_cache, from_seed);
-                assert_eq!(from_cache.inner.serialize(), from_seed.inner.serialize());
+                assert_eq!(
+                    from_cache.inner.to_compressed(),
+                    from_seed.inner.to_compressed()
+                );
                 assert_eq!(from_cache.pubkey_hash(), from_seed.pubkey_hash());
             }
         }
@@ -3122,8 +3111,8 @@ mod tests {
             .derive_priv_ecdsa_for_master_seed(&seed, network)
             .expect("reference derive")
             .to_priv();
-        let secp = Secp256k1::new();
-        let address = Address::p2pkh(&reference.public_key(&secp), network);
+
+        let address = Address::p2pkh(&reference.public_key(), network);
 
         let mut wallet = wallet;
         wallet.known_addresses.insert(address.clone(), path);
@@ -3150,8 +3139,8 @@ mod tests {
             let reference_xprv = reference_path
                 .derive_priv_ecdsa_for_master_seed(&seed, network)
                 .expect("reference derive");
-            let secp = Secp256k1::new();
-            let reference = Address::p2pkh(&reference_xprv.to_priv().public_key(&secp), network);
+
+            let reference = Address::p2pkh(&reference_xprv.to_priv().public_key(), network);
 
             let param = param_wallet
                 .generate_platform_receive_address_with_seed(&seed, network)
@@ -3175,11 +3164,11 @@ mod tests {
         let slice = vec![Arc::new(RwLock::new(wallet))];
 
         let path = DerivationPath::identity_registration_path(network, 0);
-        let reference = path
+        let reference = *path
             .derive_priv_ecdsa_for_master_seed(&seed, network)
             .expect("reference derive")
             .private_key
-            .secret_bytes();
+            .to_bytes();
         let param = Wallet::derive_private_key_in_arc_rw_lock_slice_with_seed(
             &slice, seed_hash, &seed, &path, network,
         )
@@ -3550,7 +3539,6 @@ mod tests {
             let wallet = Wallet::new_from_seed(seed, network, None, None).expect("wallet");
             let provider = WalletAddressProvider::new(&wallet, network, &seed).expect("provider");
 
-            let secp = Secp256k1::new();
             for index in 0u32..DEFAULT_GAP_LIMIT {
                 // Legacy seed-based derivation (what the old provider and the
                 // platform signer used).
@@ -3559,7 +3547,7 @@ mod tests {
                     .derive_priv_ecdsa_for_master_seed(&seed, network)
                     .expect("legacy derive")
                     .to_priv();
-                let legacy_address = Address::p2pkh(&legacy_priv.public_key(&secp), network);
+                let legacy_address = Address::p2pkh(&legacy_priv.public_key(), network);
 
                 // Provider's xpub-based derivation.
                 let (_platform, provider_address) = provider
@@ -3795,11 +3783,11 @@ mod tests {
     /// for. Independent of the reconciliation path under test.
     fn platform_address_at(index: u32, network: Network) -> Address {
         let path = DerivationPath::platform_payment_path(network, 0, 0, index);
-        let secp = Secp256k1::new();
+
         let xprv = path
             .derive_priv_ecdsa_for_master_seed(&TEST_SEED, network)
             .expect("derive platform key");
-        Address::p2pkh(&xprv.to_priv().public_key(&secp), network)
+        Address::p2pkh(&xprv.to_priv().public_key(), network)
     }
 
     /// `new_from_seed` caches the platform-payment account xpub eagerly, and the
@@ -4022,11 +4010,11 @@ mod tests {
 
         let foreign_seed = [0x11u8; 64];
         let path = DerivationPath::platform_payment_path(network, 0, 0, 0);
-        let secp = Secp256k1::new();
+
         let xprv = path
             .derive_priv_ecdsa_for_master_seed(&foreign_seed, network)
             .expect("derive foreign key");
-        let foreign = Address::p2pkh(&xprv.to_priv().public_key(&secp), network);
+        let foreign = Address::p2pkh(&xprv.to_priv().public_key(), network);
 
         assert!(!wallet.reconcile_platform_address(&foreign, network));
         assert!(!wallet.known_addresses.contains_key(&foreign));
diff --git a/src/model/wallet/single_key.rs b/src/model/wallet/single_key.rs
index eaf01b82a..9cb27bbca 100644
--- a/src/model/wallet/single_key.rs
+++ b/src/model/wallet/single_key.rs
@@ -10,7 +10,7 @@
 
 use aes_gcm::aead::Aead;
 use aes_gcm::{Aes256Gcm, KeyInit};
-use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
 use dash_sdk::dpp::dashcore::{Address, Network, OutPoint, PrivateKey, PublicKey, TxOut};
 use sha2::{Digest, Sha256};
 use std::collections::HashMap;
@@ -233,12 +233,10 @@ impl SingleKeyWallet {
         password: Option<&str>,
         alias: Option<String>,
     ) -> Result<Self, String> {
-        let secp = Secp256k1::new();
-
         // Create PrivateKey and derive public key and address
         let private_key =
             PrivateKey::from_byte_array(&private_key_bytes, network).map_err(|e| e.to_string())?;
-        let public_key = private_key.public_key(&secp);
+        let public_key = private_key.public_key();
         let address = Address::p2pkh(&public_key, network);
 
         let key_hash = ClosedSingleKey::compute_key_hash(&private_key_bytes);
@@ -305,7 +303,7 @@ impl SingleKeyWallet {
         let private_key = PrivateKey::from_wif(wif).map_err(|e| e.to_string())?;
         let network = private_key.network;
         let mut key_bytes = [0u8; 32];
-        key_bytes.copy_from_slice(&private_key.inner[..]);
+        key_bytes.copy_from_slice(&*private_key.inner.to_bytes());
         Self::new(key_bytes, network, password, alias)
     }
 
@@ -518,8 +516,8 @@ mod tests {
         // Through a SingleKeyWallet that holds the closed key.
         let priv_key =
             PrivateKey::from_byte_array(&secret, Network::Testnet).expect("valid key bytes");
-        let secp = Secp256k1::new();
-        let public_key = priv_key.public_key(&secp);
+
+        let public_key = priv_key.public_key();
         let address = Address::p2pkh(&public_key, Network::Testnet);
         let wallet = SingleKeyWallet {
             private_key_data: data,
diff --git a/src/sdk_wrapper.rs b/src/sdk_wrapper.rs
index 1f6f53879..82b0a6ea8 100644
--- a/src/sdk_wrapper.rs
+++ b/src/sdk_wrapper.rs
@@ -1,4 +1,3 @@
-use crate::context::default_platform_version;
 use dash_sdk::dapi_client::AddressList;
 use dash_sdk::dpp::dashcore::Network;
 use dash_sdk::platform::ContextProvider;
@@ -17,16 +16,20 @@ fn request_settings() -> RequestSettings {
     }
 }
 
+/// Build an SDK for `network` that tracks the network's protocol version.
+///
+/// The SDK is never pinned: it starts at upstream's per-network minimum (the
+/// lowest version the network still runs) and ratchets upward to whatever the
+/// network reports in proven responses. A rebuilt connection starts there
+/// too: nothing learned from the endpoints it replaces is carried over.
 pub fn initialize_sdk<P: ContextProvider + 'static>(
     address_list: AddressList,
     network: Network,
     context_provider: P,
 ) -> Result<Sdk, String> {
     let request_settings = request_settings();
-    let platform_version = default_platform_version(&network);
 
     let sdk = SdkBuilder::new(address_list)
-        .with_initial_version(platform_version)
         .with_network(network)
         .with_context_provider(context_provider)
         .with_settings(request_settings)
@@ -35,7 +38,7 @@ pub fn initialize_sdk<P: ContextProvider + 'static>(
 
     info!(
         ?network,
-        protocol_version = platform_version.protocol_version,
+        protocol_version = sdk.protocol_version_number(),
         "SDK initialized successfully"
     );
 
diff --git a/src/ui/components/address_input.rs b/src/ui/components/address_input.rs
index b732e6782..9dba6378d 100644
--- a/src/ui/components/address_input.rs
+++ b/src/ui/components/address_input.rs
@@ -1483,15 +1483,15 @@ fn row_accessible_label(entry: &AddressEntry, address_display: &str, balance_str
 #[cfg(test)]
 mod tests {
     use super::*;
-    use dash_sdk::dashcore_rpc::dashcore::secp256k1::{Secp256k1, SecretKey};
     use dash_sdk::dashcore_rpc::dashcore::{PrivateKey, PublicKey};
+    use dash_sdk::dpp::secp256k1::SecretKey;
 
     /// Generate a valid testnet P2PKH address for testing.
     fn testnet_core_address() -> (String, Address) {
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[1u8; 32]).unwrap();
-        let privkey = PrivateKey::new(sk, Network::Testnet);
-        let pubkey = PublicKey::from_private_key(&secp, &privkey);
+        let sk = SecretKey::from_secret_bytes([1u8; 32]).unwrap();
+        let privkey = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key");
+        let pubkey = PublicKey::from_private_key(&privkey);
         let addr = Address::p2pkh(&pubkey, Network::Testnet);
         (addr.to_string(), addr)
     }
@@ -1513,10 +1513,10 @@ mod tests {
 
     /// Generate a valid mainnet P2PKH address for testing.
     fn mainnet_core_address() -> (String, Address) {
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[2u8; 32]).unwrap();
-        let privkey = PrivateKey::new(sk, Network::Mainnet);
-        let pubkey = PublicKey::from_private_key(&secp, &privkey);
+        let sk = SecretKey::from_secret_bytes([2u8; 32]).unwrap();
+        let privkey = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Mainnet)
+            .expect("valid secret key");
+        let pubkey = PublicKey::from_private_key(&privkey);
         let addr = Address::p2pkh(&pubkey, Network::Mainnet);
         (addr.to_string(), addr)
     }
diff --git a/src/ui/contracts_documents/contract_fee_pots_screen.rs b/src/ui/contracts_documents/contract_fee_pots_screen.rs
new file mode 100644
index 000000000..c758bc4c9
--- /dev/null
+++ b/src/ui/contracts_documents/contract_fee_pots_screen.rs
@@ -0,0 +1,661 @@
+//! The fee pots of a contract (protocol version 14): what its document action
+//! fees have collected for the contract owner and for its moderators, and
+//! claiming a pot with an identity that receives it.
+
+use crate::app::AppAction;
+use crate::backend_task::contract::ContractTask;
+use crate::backend_task::error::TaskError;
+use crate::backend_task::{BackendTask, BackendTaskContext, BackendTaskSuccessResult};
+use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
+use crate::model::contract_fee_pots::{SeatedModerators, pot_claimants};
+use crate::model::datetime::local_date_time_from_unix_millis;
+use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::qualified_contract::QualifiedContract;
+use crate::model::qualified_identity::QualifiedIdentity;
+use crate::ui::components::identity_selector::IdentitySelector;
+use crate::ui::components::left_panel::add_left_panel;
+use crate::ui::components::message_banner::{BannerHandle, MessageBanner, OptionBannerExt};
+use crate::ui::components::styled::island_central_panel;
+use crate::ui::components::top_panel::add_top_panel;
+use crate::ui::helpers::add_contract_chooser_pre_filtered;
+use crate::ui::theme::DashColors;
+use crate::ui::{MessageType, RootScreenType, ScreenLike};
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+use dash_sdk::dpp::data_contract::document_type::action_fees::ContractFeePot;
+use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
+use dash_sdk::dpp::platform_value::string_encoding::Encoding;
+use dash_sdk::platform::Identifier;
+use dash_sdk::platform::contract_fee_pots::{ContractFeePotState, ContractFeePots};
+use eframe::egui::{self, RichText};
+use std::sync::Arc;
+
+/// What the screen knows about the selected contract's fee pots.
+#[derive(Debug, Clone, PartialEq)]
+enum FeePotsState {
+    /// No contract selected, or its pots not asked for yet.
+    NotLoaded,
+    /// The read for this contract is in flight.
+    Loading(Identifier),
+    /// Platform's answer for this contract.
+    Loaded {
+        contract_id: Identifier,
+        pots: ContractFeePots,
+        seated_moderators: SeatedModerators,
+    },
+    /// The read failed; the banner says why.
+    Failed(Identifier),
+}
+
+impl FeePotsState {
+    fn contract_id(&self) -> Option<Identifier> {
+        match self {
+            FeePotsState::NotLoaded => None,
+            FeePotsState::Loading(id) | FeePotsState::Failed(id) => Some(*id),
+            FeePotsState::Loaded { contract_id, .. } => Some(*contract_id),
+        }
+    }
+}
+
+/// What decides whether a pot's Claim button is enabled.
+#[derive(Debug, Clone, Copy)]
+struct ClaimGate {
+    has_recipients: bool,
+    identity_selected: bool,
+    identity_receives: bool,
+    credits: u64,
+    claim_in_flight: bool,
+}
+
+/// Why a pot cannot be claimed right now, `None` when it can. Each reason is
+/// a claim Platform would refuse (and still charge for) or one that cannot
+/// be sent yet.
+///
+/// A claim already made in the current epoch is not blocked here: the only
+/// current epoch at hand is the response metadata's, which the proof does not
+/// sign. Platform refuses such a claim, and the error says when to retry.
+fn claim_blocked_reason(gate: ClaimGate) -> Option<&'static str> {
+    if !gate.has_recipients {
+        Some("This contract has no moderators, so nobody can claim these fees.")
+    } else if !gate.identity_selected {
+        Some("Select an identity above to claim these fees.")
+    } else if !gate.identity_receives {
+        Some("The selected identity does not receive these fees.")
+    } else if gate.credits == 0 {
+        Some("There are no fees to claim yet.")
+    } else if gate.claim_in_flight {
+        Some("A claim is in progress.")
+    } else {
+        None
+    }
+}
+
+const CONTRACTS_LOAD_FAILED: &str = "Your saved contracts could not be loaded from this device. Select Retry Loading on this screen to try again.";
+const IDENTITIES_LOAD_FAILED: &str = "Your identities could not be loaded from this device. Select Retry Loading on this screen to try again.";
+const LOCAL_DATA_INCOMPLETE: &str =
+    "Some saved data could not be loaded, so the lists below may be incomplete.";
+
+pub struct ContractFeePotsScreen {
+    pub app_context: Arc<AppContext>,
+    contracts: Vec<QualifiedContract>,
+    contract_search: String,
+    selected_contract: Option<QualifiedContract>,
+    identities: Vec<QualifiedIdentity>,
+    selected_identity: Option<QualifiedIdentity>,
+    selected_identity_str: String,
+    pots: FeePotsState,
+    /// The pot a claim is in flight for; claiming is disabled meanwhile.
+    claim_in_flight: Option<ContractFeePot>,
+    progress_banner: Option<BannerHandle>,
+    /// Set while the last contract read failed; the banner says why.
+    contracts_load_banner: Option<BannerHandle>,
+    /// Set while the last identity read failed; the banner says why.
+    identities_load_banner: Option<BannerHandle>,
+}
+
+impl ContractFeePotsScreen {
+    pub fn new(app_context: &Arc<AppContext>) -> Self {
+        let mut screen = Self {
+            app_context: app_context.clone(),
+            contracts: vec![],
+            contract_search: String::new(),
+            selected_contract: None,
+            identities: vec![],
+            selected_identity: None,
+            selected_identity_str: String::new(),
+            pots: FeePotsState::NotLoaded,
+            claim_in_flight: None,
+            progress_banner: None,
+            contracts_load_banner: None,
+            identities_load_banner: None,
+        };
+        screen.reload_local_data();
+        screen
+    }
+
+    /// Reads the contracts and identities saved on this device.
+    fn reload_local_data(&mut self) {
+        let contracts = self.app_context.get_contracts();
+        let identities = self.app_context.load_local_qualified_identities();
+        self.apply_local_data(contracts, identities);
+    }
+
+    /// Takes each list that loaded; a failed read keeps the previous list and
+    /// raises a banner that stays until a retry succeeds.
+    fn apply_local_data(
+        &mut self,
+        contracts: Result<Vec<QualifiedContract>, TaskError>,
+        identities: Result<Vec<QualifiedIdentity>, TaskError>,
+    ) {
+        let ctx = self.app_context.egui_ctx().clone();
+        self.contracts_load_banner.take_and_clear();
+        match contracts {
+            Ok(contracts) => self.contracts = contracts,
+            Err(error) => {
+                self.contracts_load_banner =
+                    Some(load_failure_banner(&ctx, CONTRACTS_LOAD_FAILED, &error));
+            }
+        }
+        self.identities_load_banner.take_and_clear();
+        match identities {
+            Ok(identities) => self.identities = identities,
+            Err(error) => {
+                self.identities_load_banner =
+                    Some(load_failure_banner(&ctx, IDENTITIES_LOAD_FAILED, &error));
+            }
+        }
+    }
+
+    fn local_data_failed(&self) -> bool {
+        self.contracts_load_banner.is_some() || self.identities_load_banner.is_some()
+    }
+
+    fn fetch_pots(&mut self, contract_id: Identifier) -> AppAction {
+        self.pots = FeePotsState::Loading(contract_id);
+        self.owned_request(BackendTask::ContractTask(Box::new(
+            ContractTask::FetchContractFeePots(contract_id),
+        )))
+    }
+
+    /// The request that pays out `pot` of `contract_id` to `identity`.
+    fn claim_request(
+        &self,
+        contract_id: Identifier,
+        pot: ContractFeePot,
+        identity: &QualifiedIdentity,
+    ) -> AppAction {
+        self.owned_request(BackendTask::ContractTask(Box::new(
+            ContractTask::ClaimContractFees {
+                contract_id,
+                pot,
+                identity: Box::new(identity.clone()),
+            },
+        )))
+    }
+
+    /// Dispatch `task` with a context, so its result and error come back to
+    /// this screen even if another screen covers it before the task finishes.
+    fn owned_request(&self, task: BackendTask) -> AppAction {
+        let context = BackendTaskContext::for_dispatch_on(&task, self.app_context.network());
+        AppAction::BackendTaskWithContext { task, context }
+    }
+
+    fn contract_matches_search(&self, contract: &QualifiedContract) -> bool {
+        let term = self.contract_search.to_lowercase();
+        term.is_empty()
+            || contract
+                .alias
+                .as_ref()
+                .is_some_and(|alias| alias.to_lowercase().contains(&term))
+            || contract
+                .contract
+                .id()
+                .to_string(Encoding::Base58)
+                .to_lowercase()
+                .contains(&term)
+    }
+
+    /// One row of the pots grid: the pot, its credits, its last payout and,
+    /// for a selected identity that receives it, the Claim button.
+    fn render_pot_row(
+        &mut self,
+        ui: &mut egui::Ui,
+        contract: &QualifiedContract,
+        pot: ContractFeePot,
+        state: &ContractFeePotState,
+        seated_moderators: &SeatedModerators,
+    ) -> AppAction {
+        let dark_mode = ui.style().visuals.dark_mode;
+        ui.label(match pot {
+            ContractFeePot::Owner => "Contract owner",
+            ContractFeePot::Moderators => "Moderators",
+        });
+        ui.label(format_credits_as_dash(state.credits));
+        ui.label(match state.last_claim {
+            Some(last_claim) => format!(
+                "Epoch {epoch}, {date}, by {claimant}",
+                epoch = last_claim.epoch_index,
+                date = local_date_time_from_unix_millis(last_claim.time_ms),
+                claimant = last_claim.claimant_id.to_string(Encoding::Base58)
+            ),
+            None => "Never claimed".to_string(),
+        });
+
+        let claimants = pot_claimants(pot, &contract.contract, seated_moderators);
+        let claimant = self
+            .selected_identity
+            .as_ref()
+            .filter(|identity| claimants.includes(&identity.identity.id()));
+        let disabled_reason = claim_blocked_reason(ClaimGate {
+            has_recipients: claimants.any(),
+            identity_selected: self.selected_identity.is_some(),
+            identity_receives: claimant.is_some(),
+            credits: state.credits,
+            claim_in_flight: self.claim_in_flight.is_some(),
+        });
+
+        let mut action = AppAction::None;
+        let button = ui.add_enabled(disabled_reason.is_none(), egui::Button::new("Claim"));
+        if let Some(reason) = disabled_reason {
+            button.on_disabled_hover_text(
+                RichText::new(reason).color(DashColors::text_secondary(dark_mode)),
+            );
+        } else if button.clicked()
+            && let Some(identity) = claimant
+        {
+            self.claim_in_flight = Some(pot);
+            self.progress_banner.take_and_clear();
+            let handle =
+                MessageBanner::set_global(ui.ctx(), "Claiming the fees...", MessageType::Info);
+            handle.with_elapsed();
+            self.progress_banner = Some(handle);
+            action = self.claim_request(contract.contract.id(), pot, identity);
+        }
+        ui.end_row();
+        action
+    }
+}
+
+/// An error banner for a local read, kept until the read is retried.
+fn load_failure_banner(ctx: &egui::Context, message: &str, error: &TaskError) -> BannerHandle {
+    let handle = MessageBanner::set_global(ctx, message, MessageType::Error);
+    handle.with_details(error);
+    handle.disable_auto_dismiss();
+    handle
+}
+
+impl ScreenLike for ContractFeePotsScreen {
+    fn refresh(&mut self) {
+        self.reload_local_data();
+        self.pots = FeePotsState::NotLoaded;
+    }
+
+    fn display_message(&mut self, _message: &str, message_type: MessageType) {
+        // The result banner is set by AppState; settle this screen's state.
+        if matches!(message_type, MessageType::Error | MessageType::Warning) {
+            self.progress_banner.take_and_clear();
+            self.claim_in_flight = None;
+            if let FeePotsState::Loading(contract_id) = self.pots {
+                self.pots = FeePotsState::Failed(contract_id);
+            }
+        }
+    }
+
+    fn display_backend_task_error(&mut self, _context: &BackendTaskContext, error: &TaskError) {
+        // The claim was paid out though its balance was not saved: re-read
+        // the pots so the emptied pot shows and no retry is invited.
+        if matches!(
+            error,
+            TaskError::ContractFeesClaimedButBalanceNotSaved { .. }
+        ) {
+            self.pots = FeePotsState::NotLoaded;
+        }
+    }
+
+    fn display_task_result(&mut self, result: BackendTaskSuccessResult) {
+        match result {
+            BackendTaskSuccessResult::ContractFeePots {
+                contract_id,
+                pots,
+                seated_moderators,
+            } if self.pots == FeePotsState::Loading(contract_id) => {
+                self.pots = FeePotsState::Loaded {
+                    contract_id,
+                    pots,
+                    seated_moderators,
+                };
+            }
+            BackendTaskSuccessResult::ContractFeesClaimed {
+                contract_id,
+                claimant_balance,
+                ..
+            } => {
+                self.progress_banner.take_and_clear();
+                self.claim_in_flight = None;
+                let message = match claimant_balance {
+                    Some(balance) => format!(
+                        "The fees were paid out. The identity's balance is now {balance}.",
+                        balance = format_credits_as_dash(balance)
+                    ),
+                    None => "The fees were paid out.".to_string(),
+                };
+                MessageBanner::set_global(
+                    self.app_context.egui_ctx(),
+                    message,
+                    MessageType::Success,
+                );
+                // Show the emptied pot and the new balance.
+                if let Ok(identities) = self.app_context.load_local_qualified_identities() {
+                    self.identities = identities;
+                }
+                if self.pots.contract_id() == Some(contract_id) {
+                    self.pots = FeePotsState::NotLoaded;
+                }
+            }
+            _ => {}
+        }
+    }
+
+    fn ui(&mut self, ui: &mut egui::Ui) -> AppAction {
+        let mut action = add_top_panel(
+            ui,
+            &self.app_context,
+            vec![
+                ("Contracts", AppAction::GoToMainScreen),
+                ("Fee Pots", AppAction::None),
+            ],
+            vec![],
+        );
+        action |= add_left_panel(
+            ui,
+            &self.app_context,
+            RootScreenType::RootScreenDocumentQuery,
+        );
+
+        action |= island_central_panel(ui, |ui| {
+            let mut inner_action = AppAction::None;
+            let dark_mode = ui.style().visuals.dark_mode;
+            ui.heading("Contract Fee Pots");
+            ui.add_space(6.0);
+            ui.label(
+                RichText::new(
+                    "Fees that users pay for document actions collect in two pots: one for the contract owner and one shared by its moderators. A pot can be claimed once per epoch.",
+                )
+                .color(DashColors::text_secondary(dark_mode)),
+            );
+            ui.add_space(10.0);
+
+            if self.local_data_failed() {
+                ui.colored_label(DashColors::warning_color(dark_mode), LOCAL_DATA_INCOMPLETE);
+                if ui.button("Retry Loading").clicked() {
+                    self.reload_local_data();
+                }
+                ui.add_space(10.0);
+            }
+
+            if !FeatureGate::ContractFeePots.is_available(&self.app_context) {
+                ui.label(
+                    "This network does not support contract fees yet. Connect to a network that supports them to see fee pots.",
+                );
+                return inner_action;
+            }
+
+            ui.heading("1. Select a contract:");
+            ui.add_space(6.0);
+            let visible: Vec<&QualifiedContract> = self
+                .contracts
+                .iter()
+                .filter(|contract| self.contract_matches_search(contract))
+                .collect();
+            add_contract_chooser_pre_filtered(
+                ui,
+                &mut self.contract_search,
+                visible.into_iter(),
+                &mut self.selected_contract,
+            );
+
+            ui.add_space(10.0);
+            ui.heading("2. Select the identity that claims:");
+            ui.add_space(6.0);
+            // Session-local selection: claiming for a contract must not
+            // re-point the app-wide identity selection.
+            ui.add(
+                IdentitySelector::new(
+                    "contract_fee_pots_identity_selector",
+                    &mut self.selected_identity_str,
+                    &self.identities,
+                )
+                .selected_identity(&mut self.selected_identity)
+                .expect("identity selector over the loaded identities")
+                .other_option(false)
+                .width(250.0)
+                .label("Identity:"),
+            );
+
+            let Some(contract) = self.selected_contract.clone() else {
+                return inner_action;
+            };
+            let contract_id = contract.contract.id();
+            if self.pots.contract_id() != Some(contract_id) {
+                inner_action |= self.fetch_pots(contract_id);
+            }
+
+            ui.add_space(10.0);
+            ui.separator();
+            ui.add_space(10.0);
+            match self.pots.clone() {
+                FeePotsState::Loading(_) | FeePotsState::NotLoaded => {
+                    ui.horizontal(|ui| {
+                        ui.spinner();
+                        ui.label("Reading the fee pots...");
+                    });
+                }
+                FeePotsState::Failed(_) => {
+                    if ui.button("Try Again").clicked() {
+                        inner_action |= self.fetch_pots(contract_id);
+                    }
+                }
+                FeePotsState::Loaded {
+                    pots,
+                    seated_moderators,
+                    ..
+                } => {
+                    egui::Grid::new("contract_fee_pots_grid")
+                        .num_columns(4)
+                        .spacing([16.0, 8.0])
+                        .striped(true)
+                        .show(ui, |ui| {
+                            ui.label(RichText::new("Pot").strong());
+                            ui.label(RichText::new("Available").strong());
+                            ui.label(RichText::new("Last claimed").strong());
+                            ui.label("");
+                            ui.end_row();
+                            inner_action |= self.render_pot_row(
+                                ui,
+                                &contract,
+                                ContractFeePot::Owner,
+                                &pots.owner,
+                                &seated_moderators,
+                            );
+                            inner_action |= self.render_pot_row(
+                                ui,
+                                &contract,
+                                ContractFeePot::Moderators,
+                                &pots.moderators,
+                                &seated_moderators,
+                            );
+                        });
+                    ui.add_space(8.0);
+                    if ui.button("Refresh").clicked() {
+                        inner_action |= self.fetch_pots(contract_id);
+                    }
+                }
+            }
+            inner_action
+        });
+        action
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    /// A storage failure must not pass for an empty device: the screen says
+    /// what failed, keeps a retry on screen, and a successful retry settles it.
+    #[test]
+    fn a_storage_failure_is_reported_and_can_be_retried() {
+        use crate::ui::components::message_banner::global_banner_texts;
+
+        let dir = tempfile::tempdir().expect("tempdir");
+        // The test context has no wallet backend, so the contract read fails.
+        let app_context = crate::context::test_support::test_app_context(dir.path());
+        let ctx = app_context.egui_ctx().clone();
+
+        let mut screen = ContractFeePotsScreen::new(&app_context);
+        assert!(
+            global_banner_texts(&ctx)
+                .iter()
+                .any(|text| text.starts_with("Your saved contracts could not be loaded")),
+            "got: {:?}",
+            global_banner_texts(&ctx)
+        );
+        assert!(screen.local_data_failed());
+
+        screen.apply_local_data(Ok(vec![]), Ok(vec![]));
+        assert!(!screen.local_data_failed());
+        assert!(
+            global_banner_texts(&ctx).is_empty(),
+            "got: {:?}",
+            global_banner_texts(&ctx)
+        );
+    }
+
+    #[test]
+    fn the_pots_state_names_the_contract_it_is_about() {
+        let id = Identifier::random();
+        assert_eq!(FeePotsState::NotLoaded.contract_id(), None);
+        assert_eq!(FeePotsState::Loading(id).contract_id(), Some(id));
+        assert_eq!(FeePotsState::Failed(id).contract_id(), Some(id));
+        assert_eq!(
+            FeePotsState::Loaded {
+                contract_id: id,
+                pots: ContractFeePots::default(),
+                seated_moderators: SeatedModerators::NotSeated,
+            }
+            .contract_id(),
+            Some(id)
+        );
+    }
+
+    /// The pots read and a claim carry a dispatch context, so their results
+    /// and errors reach this screen even if another screen covers it.
+    #[test]
+    fn fee_pot_requests_come_back_to_this_screen() {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let app_context = crate::context::test_support::test_app_context(dir.path());
+        let mut screen = ContractFeePotsScreen::new(&app_context);
+        let contract_id = Identifier::random();
+
+        let read = screen.fetch_pots(contract_id);
+        assert!(
+            matches!(
+                &read,
+                AppAction::BackendTaskWithContext {
+                    task: BackendTask::ContractTask(task),
+                    ..
+                } if matches!(**task, ContractTask::FetchContractFeePots(id) if id == contract_id)
+            ),
+            "got {read:?}"
+        );
+
+        let identity = crate::backend_task::identity::key_limits_test_identity();
+        let claim = screen.claim_request(contract_id, ContractFeePot::Owner, &identity);
+        assert!(
+            matches!(
+                &claim,
+                AppAction::BackendTaskWithContext {
+                    task: BackendTask::ContractTask(task),
+                    ..
+                } if matches!(**task, ContractTask::ClaimContractFees { .. })
+            ),
+            "got {claim:?}"
+        );
+    }
+
+    /// A claim paid out whose balance could not be saved re-reads the pots,
+    /// so the emptied pot shows and no retry is invited.
+    #[test]
+    fn a_paid_out_claim_that_was_not_saved_rereads_the_pots() {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let app_context = crate::context::test_support::test_app_context(dir.path());
+        let mut screen = ContractFeePotsScreen::new(&app_context);
+        let contract_id = Identifier::random();
+        screen.pots = FeePotsState::Loaded {
+            contract_id,
+            pots: ContractFeePots::default(),
+            seated_moderators: SeatedModerators::NotSeated,
+        };
+        screen.claim_in_flight = Some(ContractFeePot::Owner);
+        let identity = crate::backend_task::identity::key_limits_test_identity();
+        let AppAction::BackendTaskWithContext { context, .. } =
+            screen.claim_request(contract_id, ContractFeePot::Owner, &identity)
+        else {
+            panic!("the claim goes out with a context");
+        };
+
+        screen.display_backend_task_error(
+            &context,
+            &TaskError::ContractFeesClaimedButBalanceNotSaved {
+                source: Box::new(TaskError::IdentityNotFoundLocally),
+            },
+        );
+
+        assert_eq!(screen.pots, FeePotsState::NotLoaded);
+    }
+
+    fn claimable() -> ClaimGate {
+        ClaimGate {
+            has_recipients: true,
+            identity_selected: true,
+            identity_receives: true,
+            credits: 10,
+            claim_in_flight: false,
+        }
+    }
+
+    #[test]
+    fn a_recipient_can_claim_a_filled_pot() {
+        assert_eq!(claim_blocked_reason(claimable()), None);
+    }
+
+    /// Each refusal Platform would charge for is blocked up front.
+    #[test]
+    fn claims_platform_would_refuse_are_blocked() {
+        for gate in [
+            ClaimGate {
+                has_recipients: false,
+                ..claimable()
+            },
+            ClaimGate {
+                identity_selected: false,
+                identity_receives: false,
+                ..claimable()
+            },
+            ClaimGate {
+                identity_receives: false,
+                ..claimable()
+            },
+            ClaimGate {
+                credits: 0,
+                ..claimable()
+            },
+            ClaimGate {
+                claim_in_flight: true,
+                ..claimable()
+            },
+        ] {
+            assert!(claim_blocked_reason(gate).is_some(), "{gate:?}");
+        }
+    }
+}
diff --git a/src/ui/contracts_documents/contracts_documents_screen.rs b/src/ui/contracts_documents/contracts_documents_screen.rs
index 5550c5a30..e094522be 100644
--- a/src/ui/contracts_documents/contracts_documents_screen.rs
+++ b/src/ui/contracts_documents/contracts_documents_screen.rs
@@ -4,6 +4,7 @@ use crate::backend_task::document::DocumentTask::{self, FetchDocumentsPage}; //
 use crate::backend_task::error::TaskError;
 use crate::backend_task::{BackendTask, BackendTaskContext};
 use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
 use crate::model::qualified_contract::QualifiedContract;
 use crate::ui::components::Component;
 use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
@@ -120,7 +121,7 @@ pub enum DocumentDisplayMode {
 impl DocumentQueryScreen {
     pub fn new(app_context: &Arc<AppContext>) -> Self {
         let dpns_contract = QualifiedContract {
-            contract: Arc::clone(&app_context.dpns_contract).as_ref().clone(),
+            contract: app_context.dpns_contract().as_ref().clone(),
             alias: Some("dpns".to_string()),
         };
 
@@ -614,7 +615,7 @@ impl ScreenLike for DocumentQueryScreen {
 
         // Reset the selected contract and document type
         let dpns_contract = QualifiedContract {
-            contract: Arc::clone(&self.app_context.dpns_contract).as_ref().clone(),
+            contract: self.app_context.dpns_contract().as_ref().clone(),
             alias: Some("dpns".to_string()),
         };
         self.selected_data_contract = dpns_contract.clone();
@@ -727,13 +728,19 @@ impl ScreenLike for DocumentQueryScreen {
             "Group Actions",
             DesiredAppAction::AddScreenType(Box::new(ScreenType::GroupActions)),
         );
+        let fee_pots_button = FeatureGate::ContractFeePots
+            .is_available(&self.app_context)
+            .then_some((
+                "Fee Pots",
+                DesiredAppAction::AddScreenType(Box::new(ScreenType::ContractFeePots)),
+            ));
         let mut action = AppAction::None;
         if self.app_context.network == Network::Mainnet {
             action |= add_top_panel_with_global_nav(
                 ui,
                 &self.app_context,
                 subdued_everyday_spec("Contracts", RootScreenType::RootScreenDocumentQuery),
-                vec![
+                [
                     load_contract_button,
                     register_contract_button,
                     update_contract_button,
@@ -743,7 +750,10 @@ impl ScreenLike for DocumentQueryScreen {
                     transfer_document_button,
                     purchase_document_button,
                     set_document_price_button,
-                ],
+                ]
+                .into_iter()
+                .chain(fee_pots_button)
+                .collect(),
             );
         } else {
             action |= add_top_panel_with_global_nav(
@@ -761,7 +771,10 @@ impl ScreenLike for DocumentQueryScreen {
                     purchase_document_button,
                     set_document_price_button,
                     group_actions_button,
-                ],
+                ]
+                .into_iter()
+                .chain(fee_pots_button)
+                .collect(),
             );
         }
 
diff --git a/src/ui/contracts_documents/document_action_screen.rs b/src/ui/contracts_documents/document_action_screen.rs
index 744c22a91..28ad81a61 100644
--- a/src/ui/contracts_documents/document_action_screen.rs
+++ b/src/ui/contracts_documents/document_action_screen.rs
@@ -4,10 +4,17 @@ use crate::backend_task::FeeResult;
 use crate::backend_task::{BackendTask, document::DocumentTask};
 use crate::context::AppContext;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::fee_estimation::{
+    ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT, DocumentActionFeeQuote,
+    document_action_fee_quote,
+};
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_contract::QualifiedContract;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
 use crate::ui::ScreenLike;
+use crate::ui::components::Component;
+use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
 use crate::ui::components::identity_selector::IdentitySelector;
 use crate::ui::components::left_panel::add_left_panel;
 use crate::ui::components::styled::{island_central_panel, styled_text_edit_singleline};
@@ -15,12 +22,12 @@ use crate::ui::components::top_panel::add_top_panel;
 use crate::ui::components::wallet_unlock_popup::{
     WalletUnlockPopup, WalletUnlockResult, try_open_wallet_no_password, wallet_needs_unlock,
 };
-use crate::ui::components::{BannerHandle, MessageBanner, OptionBannerExt, ResultBannerExt};
+use crate::ui::components::{BannerHandle, MessageBanner, OptionBannerExt};
 use crate::ui::helpers::{
     TransactionType, add_contract_doc_type_chooser_with_filtering, add_key_chooser_with_doc_type,
     show_success_screen_with_info,
 };
-use crate::ui::identity::get_selected_wallet;
+use crate::ui::identity::wallet_for_signing_key;
 use crate::ui::theme::{ComponentStyles, DashColors};
 use base64::Engine;
 use base64::engine::general_purpose::STANDARD;
@@ -33,6 +40,7 @@ use dash_sdk::dpp::data_contract::associated_token::token_configuration_conventi
 use dash_sdk::dpp::data_contract::document_type::accessors::{
     DocumentTypeV0Getters, DocumentTypeV1Getters,
 };
+use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::DocumentActionFeeAgreement;
 use dash_sdk::dpp::data_contract::document_type::methods::DocumentTypeBasicMethods;
 use dash_sdk::dpp::data_contract::document_type::{DocumentPropertyType, DocumentType};
 use dash_sdk::dpp::document::property_names::PRICE;
@@ -45,6 +53,10 @@ use dash_sdk::dpp::tokens::gas_fees_paid_by::GasFeesPaidBy;
 use dash_sdk::dpp::tokens::token_amount_on_contract_token::DocumentActionTokenEffect;
 use dash_sdk::dpp::tokens::token_payment_info::TokenPaymentInfo;
 use dash_sdk::dpp::tokens::token_payment_info::v0::TokenPaymentInfoV0;
+use dash_sdk::dpp::{
+    state_transition::batch_transition::batched_transition::document_transition_action_type::DocumentTransitionActionType,
+    tokens::token_amount_on_contract_token::DocumentActionTokenCost,
+};
 use dash_sdk::drive::query::WhereClause;
 use dash_sdk::platform::{DocumentQuery, Identifier, IdentityPublicKey};
 use dash_sdk::query_types::IndexMap;
@@ -64,6 +76,19 @@ pub enum DocumentActionType {
 }
 
 impl DocumentActionType {
+    /// The document transition this action broadcasts, as action fees and
+    /// token costs are declared per transition type.
+    fn transition_action(&self) -> DocumentTransitionActionType {
+        match self {
+            DocumentActionType::Create => DocumentTransitionActionType::Create,
+            DocumentActionType::Delete => DocumentTransitionActionType::Delete,
+            DocumentActionType::Purchase => DocumentTransitionActionType::Purchase,
+            DocumentActionType::Replace => DocumentTransitionActionType::Replace,
+            DocumentActionType::SetPrice => DocumentTransitionActionType::UpdatePrice,
+            DocumentActionType::Transfer => DocumentTransitionActionType::Transfer,
+        }
+    }
+
     pub fn display_name(&self) -> &'static str {
         match self {
             DocumentActionType::Create => "Create Document",
@@ -131,6 +156,26 @@ pub struct DocumentActionScreen {
 
     // Banner for in-progress operations
     refresh_banner: Option<BannerHandle>,
+
+    /// Whether to pay a document type's optional token cost. Off, the action
+    /// carries no token payment and its gas is paid in credits instead.
+    pay_optional_token_cost: bool,
+    /// The confirmation of a document action fee, open while the user decides.
+    action_fee_confirmation: Option<PendingActionFeeConfirmation>,
+    /// The action fee agreement the next built action carries.
+    agreed_action_fee: Option<DocumentActionFeeAgreement>,
+}
+
+/// Shown when the selected identity holds no key this device can sign the
+/// chosen document action with.
+const NO_SIGNING_KEY_NOTICE: &str = "This identity has no key on this device that can sign this action. Add or load a suitable key from the identity's keys, or select another identity.";
+
+/// An open contract fee confirmation and the action it was opened for: the
+/// action is built, fee agreement included, when the dialog opens, and that
+/// exact action is sent on confirm.
+struct PendingActionFeeConfirmation {
+    dialog: ConfirmationDialog,
+    task: BackendTask,
 }
 
 impl DocumentActionScreen {
@@ -187,6 +232,9 @@ impl DocumentActionScreen {
             fetched_documents: IndexMap::new(),
             completed_fee_result: None,
             refresh_banner: None,
+            pay_optional_token_cost: true,
+            action_fee_confirmation: None,
+            agreed_action_fee: None,
         }
     }
 
@@ -209,6 +257,7 @@ impl DocumentActionScreen {
         self.wallet_unlock_popup = WalletUnlockPopup::new();
         self.wallet_failure = None;
         self.broadcast_status = BroadcastStatus::NotBroadcasted;
+        self.action_fee_confirmation = None;
         self.selected_contract = None;
         self.selected_document_type = None;
         self.contract_search.clear();
@@ -247,13 +296,34 @@ impl DocumentActionScreen {
                 .as_ref()
                 .map(|d| d.name().to_owned());
         if contract_changed || doc_type_changed {
-            self.no_documents_found = false;
-            self.fetched_documents.clear();
+            self.signing_scope_changed();
         }
 
         ui.add_space(10.0);
     }
 
+    /// The contract or document type changed: what was fetched for the old
+    /// one no longer applies, and the key is picked again for the new scope
+    /// (a key bound to the old contract or type cannot sign in the new one).
+    /// The wallet holding the key the action is signed with, for the unlock
+    /// prompt.
+    fn signing_wallet(&self) -> Option<Arc<RwLock<Wallet>>> {
+        let identity = self.selected_identity.as_ref()?;
+        wallet_for_signing_key(identity, self.selected_key.as_ref())
+    }
+
+    fn signing_scope_changed(&mut self) {
+        self.no_documents_found = false;
+        self.fetched_documents.clear();
+        if let Some(identity) = &self.selected_identity {
+            self.selected_key = auto_selected_document_key(
+                identity,
+                self.selected_contract.as_ref(),
+                self.selected_document_type.as_ref(),
+            );
+        }
+    }
+
     fn render_identity_and_key_selection(&mut self, ui: &mut Ui) {
         ui.horizontal(|ui| {
             ui.heading("2. Select an identity:");
@@ -285,29 +355,13 @@ impl DocumentActionScreen {
             self.no_documents_found = false;
             self.fetched_documents.clear();
             if let Some(identity) = &self.selected_identity {
-                // Auto-select a suitable key for document actions
-                // Note: MASTER keys cannot be used for document operations,
-                // only MEDIUM, HIGH, or CRITICAL security levels are allowed
-                use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
-                self.selected_key = identity
-                    .identity
-                    .get_first_public_key_matching(
-                        Purpose::AUTHENTICATION,
-                        [
-                            SecurityLevel::CRITICAL,
-                            SecurityLevel::HIGH,
-                            SecurityLevel::MEDIUM,
-                        ]
-                        .into(),
-                        KeyType::all_key_types().into(),
-                        false,
-                    )
-                    .cloned();
+                self.selected_key = auto_selected_document_key(
+                    identity,
+                    self.selected_contract.as_ref(),
+                    self.selected_document_type.as_ref(),
+                );
 
-                // Update wallet
-                self.wallet = get_selected_wallet(identity, Some(&self.app_context), None)
-                    .or_show_error(self.app_context.egui_ctx())
-                    .unwrap_or(None);
+                self.wallet = self.signing_wallet();
                 self.wallet_open_attempted = false;
             } else {
                 self.selected_key = None;
@@ -327,6 +381,10 @@ impl DocumentActionScreen {
                     &mut self.selected_key,
                     TransactionType::DocumentAction,
                     self.selected_document_type.as_ref(),
+                    signing_scope(
+                        self.selected_contract.as_ref(),
+                        self.selected_document_type.as_ref(),
+                    ),
                 );
             }
         }
@@ -732,6 +790,7 @@ impl DocumentActionScreen {
                         | DocumentPropertyType::U64
                         | DocumentPropertyType::I64
                         | DocumentPropertyType::U32
+                        | DocumentPropertyType::KeyIdWithReference(_)
                         | DocumentPropertyType::I32
                         | DocumentPropertyType::U16
                         | DocumentPropertyType::I16
@@ -804,6 +863,11 @@ impl DocumentActionScreen {
                                     .background_color(DashColors::input_background(dark_mode)),
                             );
                         }
+                        DocumentPropertyType::TypedArray(_) => {
+                            ui.label(
+                                "This field cannot be edited here. Use another document editor.",
+                            );
+                        }
                         DocumentPropertyType::Object(_)
                         | DocumentPropertyType::Array(_)
                         | DocumentPropertyType::VariableTypeArray(_) => {
@@ -881,9 +945,48 @@ impl DocumentActionScreen {
                 ))
                 .color(Color32::DARK_RED),
             );
+            // Protocol version 14: an optional token cost may be left out, the
+            // action then paying its gas in credits with no sponsorship.
+            if token_creation_cost.optional {
+                ui.checkbox(
+                    &mut self.pay_optional_token_cost,
+                    "Pay the token cost",
+                )
+                .on_hover_text(
+                    "Paying the token cost is optional for this action. Without it, you pay the network fee yourself in credits.",
+                );
+            }
+        } else {
+            self.pay_optional_token_cost = true;
         }
     }
 
+    /// The token payment for `cost`, or `None` when there is no cost or the
+    /// user chose not to pay an optional one.
+    fn token_payment_for(&self, cost: Option<DocumentActionTokenCost>) -> Option<TokenPaymentInfo> {
+        cost.filter(|cost| !cost.optional || self.pay_optional_token_cost)
+            .map(|cost| {
+                TokenPaymentInfo::V0(TokenPaymentInfoV0 {
+                    payment_token_contract_id: cost.contract_id,
+                    token_contract_position: cost.token_contract_position,
+                    gas_fees_paid_by: cost.gas_fees_paid_by,
+                    minimum_token_cost: None,
+                    maximum_token_cost: Some(cost.token_amount),
+                })
+            })
+    }
+
+    /// The action fee the selected document type charges for this action at
+    /// the current fee multiplier, `None` when it charges none.
+    fn action_fee_quote(&self) -> Option<DocumentActionFeeQuote> {
+        let doc_type = self.selected_document_type.as_ref()?;
+        document_action_fee_quote(
+            doc_type.as_ref(),
+            self.action_type.transition_action(),
+            self.app_context.fee_multiplier_permille(),
+        )
+    }
+
     fn render_broadcast_button(&mut self, ui: &mut Ui) -> AppAction {
         let mut action = AppAction::None;
 
@@ -898,6 +1001,8 @@ impl DocumentActionScreen {
             DocumentActionType::SetPrice => fee_estimator.estimate_document_set_price(),
         };
 
+        let action_fee = self.action_fee_quote();
+
         ui.add_space(10.0);
         let dark_mode = ui.style().visuals.dark_mode;
         Frame::new()
@@ -917,6 +1022,20 @@ impl DocumentActionScreen {
                             .size(14.0),
                     );
                 });
+                if let Some(quote) = &action_fee {
+                    ui.horizontal(|ui| {
+                        ui.label(
+                            RichText::new("Contract fee:")
+                                .color(DashColors::text_secondary(dark_mode))
+                                .size(14.0),
+                        );
+                        ui.label(
+                            RichText::new(action_fee_summary(quote))
+                                .color(DashColors::text_primary(dark_mode))
+                                .size(14.0),
+                        );
+                    });
+                }
             });
 
         ui.add_space(10.0);
@@ -930,11 +1049,29 @@ impl DocumentActionScreen {
         };
 
         if ComponentStyles::add_primary_button(ui, button_text).clicked() && self.can_broadcast() {
-            let task = self.create_document_action();
-            if task != BackendTask::None {
-                self.broadcast_status = BroadcastStatus::Broadcasting;
-                self.set_fetching_banner(ui.ctx(), "Broadcasting...");
-                action = AppAction::BackendTask(task);
+            match action_fee {
+                // A contract fee is paid only with the user's explicit
+                // agreement to the amount shown.
+                Some(quote) => self.open_action_fee_confirmation(quote),
+                None => {
+                    self.agreed_action_fee = None;
+                    action = self.dispatch_document_action(ui.ctx());
+                }
+            }
+        }
+
+        let fee_response = self
+            .action_fee_confirmation
+            .as_mut()
+            .and_then(|pending| pending.dialog.show(ui).inner.dialog_response);
+        if let Some(response) = fee_response {
+            match response {
+                ConfirmationStatus::Confirmed => {
+                    action = self.confirm_action_fee(ui.ctx());
+                }
+                ConfirmationStatus::Canceled => {
+                    self.action_fee_confirmation = None;
+                }
             }
         }
 
@@ -950,6 +1087,52 @@ impl DocumentActionScreen {
         action
     }
 
+    /// Ask the user to agree to the contract fee `quote` before the action is
+    /// sent.
+    /// The action is built now, carrying the quoted agreement, and the dialog
+    /// blocks the form behind it, so what the user confirms is what is sent.
+    fn open_action_fee_confirmation(&mut self, quote: DocumentActionFeeQuote) {
+        self.agreed_action_fee = Some(quote.agreement);
+        let task = self.create_document_action();
+        self.agreed_action_fee = None;
+        if task == BackendTask::None {
+            return;
+        }
+        self.action_fee_confirmation = Some(PendingActionFeeConfirmation {
+            dialog: ConfirmationDialog::new(
+                "Confirm contract fee".to_string(),
+                action_fee_confirmation_text(&quote),
+            )
+            .blocks_input(true),
+            task,
+        });
+    }
+
+    /// The user agreed to the contract fee: send the action the confirmation
+    /// was opened for.
+    fn confirm_action_fee(&mut self, ctx: &egui::Context) -> AppAction {
+        match self.action_fee_confirmation.take() {
+            Some(pending) => self.dispatch_task(ctx, pending.task),
+            None => AppAction::None,
+        }
+    }
+
+    /// Build and dispatch the document action, carrying the agreed action fee.
+    fn dispatch_document_action(&mut self, ctx: &egui::Context) -> AppAction {
+        let task = self.create_document_action();
+        self.dispatch_task(ctx, task)
+    }
+
+    /// Send `task`, a built document action, showing its progress.
+    fn dispatch_task(&mut self, ctx: &egui::Context, task: BackendTask) -> AppAction {
+        if task == BackendTask::None {
+            return AppAction::None;
+        }
+        self.broadcast_status = BroadcastStatus::Broadcasting;
+        self.set_fetching_banner(ctx, "Broadcasting...");
+        AppAction::BackendTask(task)
+    }
+
     /// Resolve the four selections every document action needs — document
     /// type, contract, identity, and signing key.
     ///
@@ -1005,20 +1188,10 @@ impl DocumentActionScreen {
                 };
 
                 let token_payment_info =
-                    doc_type
-                        .document_creation_token_cost()
-                        .map(|token_creation_cost| {
-                            TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                                payment_token_contract_id: token_creation_cost.contract_id,
-                                token_contract_position: token_creation_cost
-                                    .token_contract_position,
-                                gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                                minimum_token_cost: None,
-                                maximum_token_cost: Some(token_creation_cost.token_amount),
-                            })
-                        });
+                    self.token_payment_for(doc_type.document_creation_token_cost());
 
                 BackendTask::DocumentTask(Box::new(DocumentTask::BroadcastDocument {
+                    action_fee_agreement: self.agreed_action_fee,
                     document: doc,
                     token_payment_info,
                     entropy,
@@ -1048,20 +1221,10 @@ impl DocumentActionScreen {
             return BackendTask::None;
         };
 
-        let token_payment_info =
-            doc_type
-                .document_deletion_token_cost()
-                .map(|token_creation_cost| {
-                    TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                        payment_token_contract_id: token_creation_cost.contract_id,
-                        token_contract_position: token_creation_cost.token_contract_position,
-                        gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                        minimum_token_cost: None,
-                        maximum_token_cost: Some(token_creation_cost.token_amount),
-                    })
-                });
+        let token_payment_info = self.token_payment_for(doc_type.document_deletion_token_cost());
 
         BackendTask::DocumentTask(Box::new(DocumentTask::DeleteDocument {
+            action_fee_agreement: self.agreed_action_fee,
             document_id,
             document_type: doc_type.clone(),
             data_contract: Arc::new(contract.contract.clone()),
@@ -1079,20 +1242,10 @@ impl DocumentActionScreen {
             return BackendTask::None;
         };
 
-        let token_payment_info =
-            doc_type
-                .document_purchase_token_cost()
-                .map(|token_creation_cost| {
-                    TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                        payment_token_contract_id: token_creation_cost.contract_id,
-                        token_contract_position: token_creation_cost.token_contract_position,
-                        gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                        minimum_token_cost: None,
-                        maximum_token_cost: Some(token_creation_cost.token_amount),
-                    })
-                });
+        let token_payment_info = self.token_payment_for(doc_type.document_purchase_token_cost());
 
         BackendTask::DocumentTask(Box::new(DocumentTask::PurchaseDocument {
+            action_fee_agreement: self.agreed_action_fee,
             price: self.fetched_price.unwrap_or(0),
             document_id,
             document_type: doc_type.clone(),
@@ -1113,20 +1266,10 @@ impl DocumentActionScreen {
                     };
 
                     let token_payment_info =
-                        doc_type
-                            .document_replacement_token_cost()
-                            .map(|token_creation_cost| {
-                                TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                                    payment_token_contract_id: token_creation_cost.contract_id,
-                                    token_contract_position: token_creation_cost
-                                        .token_contract_position,
-                                    gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                                    minimum_token_cost: None,
-                                    maximum_token_cost: Some(token_creation_cost.token_amount),
-                                })
-                            });
+                        self.token_payment_for(doc_type.document_replacement_token_cost());
 
                     BackendTask::DocumentTask(Box::new(DocumentTask::ReplaceDocument {
+                        action_fee_agreement: self.agreed_action_fee,
                         document: updated_doc,
                         document_type: doc_type.clone(),
                         data_contract: Arc::new(contract.contract.clone()),
@@ -1151,19 +1294,10 @@ impl DocumentActionScreen {
             };
 
             let token_payment_info =
-                doc_type
-                    .document_replacement_token_cost()
-                    .map(|token_creation_cost| {
-                        TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                            payment_token_contract_id: token_creation_cost.contract_id,
-                            token_contract_position: token_creation_cost.token_contract_position,
-                            gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                            minimum_token_cost: None,
-                            maximum_token_cost: Some(token_creation_cost.token_amount),
-                        })
-                    });
+                self.token_payment_for(doc_type.document_replacement_token_cost());
 
             BackendTask::DocumentTask(Box::new(DocumentTask::ReplaceDocument {
+                action_fee_agreement: self.agreed_action_fee,
                 document: DocumentV0::default().into(),
                 document_type: doc_type.clone(),
                 data_contract: Arc::new(contract.contract.clone()),
@@ -1184,19 +1318,10 @@ impl DocumentActionScreen {
         };
 
         let token_payment_info =
-            doc_type
-                .document_update_price_token_cost()
-                .map(|token_creation_cost| {
-                    TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                        payment_token_contract_id: token_creation_cost.contract_id,
-                        token_contract_position: token_creation_cost.token_contract_position,
-                        gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                        minimum_token_cost: None,
-                        maximum_token_cost: Some(token_creation_cost.token_amount),
-                    })
-                });
+            self.token_payment_for(doc_type.document_update_price_token_cost());
 
         BackendTask::DocumentTask(Box::new(DocumentTask::SetDocumentPrice {
+            action_fee_agreement: self.agreed_action_fee,
             price,
             document_id,
             document_type: doc_type.clone(),
@@ -1217,20 +1342,10 @@ impl DocumentActionScreen {
             return BackendTask::None;
         };
 
-        let token_payment_info =
-            doc_type
-                .document_transfer_token_cost()
-                .map(|token_creation_cost| {
-                    TokenPaymentInfo::V0(TokenPaymentInfoV0 {
-                        payment_token_contract_id: token_creation_cost.contract_id,
-                        token_contract_position: token_creation_cost.token_contract_position,
-                        gas_fees_paid_by: token_creation_cost.gas_fees_paid_by,
-                        minimum_token_cost: None,
-                        maximum_token_cost: Some(token_creation_cost.token_amount),
-                    })
-                });
+        let token_payment_info = self.token_payment_for(doc_type.document_transfer_token_cost());
 
         BackendTask::DocumentTask(Box::new(DocumentTask::TransferDocument {
+            action_fee_agreement: self.agreed_action_fee,
             document_id,
             new_owner_id: recipient_id,
             document_type: doc_type.clone(),
@@ -1255,6 +1370,10 @@ impl DocumentActionScreen {
             .as_ref()
             .ok_or("No identity selected")?;
 
+        if !Self::supports_field_editor(doc_type) {
+            return Err("This document contains fields that cannot be edited here. Use another document editor.".to_string());
+        }
+
         for (prop, schema) in doc_type.properties() {
             let entry = self.field_inputs.get(prop).map(|s| s.trim());
             if schema.required && entry.unwrap_or("").is_empty() {
@@ -1300,7 +1419,7 @@ impl DocumentActionScreen {
                         .map_err(|_| format!("{} must be a signed 64-bit integer", name))?;
                     Value::I64(n)
                 }
-                DocumentPropertyType::U32 => {
+                DocumentPropertyType::U32 | DocumentPropertyType::KeyIdWithReference(_) => {
                     let n = input_str
                         .parse::<u32>()
                         .map_err(|_| format!("{} must be an unsigned 32-bit integer", name))?;
@@ -1372,6 +1491,11 @@ impl DocumentActionScreen {
                         .map_err(|_| format!("{} (Date) expects unix-ms integer", name))?;
                     Value::U64(ts)
                 }
+                DocumentPropertyType::TypedArray(_) => {
+                    return Err(format!(
+                        "Field {name} cannot be edited here. Use another document editor."
+                    ));
+                }
                 DocumentPropertyType::Object(_) => {
                     return Err(format!(
                         "Object field {} must be supplied via JSON textarea",
@@ -1393,6 +1517,11 @@ impl DocumentActionScreen {
         let entropy: [u8; 32] = rng.r#gen();
 
         let owner_id = qi.identity.id();
+        // Before protocol version 14 this entropy-only id is the document's id,
+        // which Platform recomputes from the entropy. From protocol version 14
+        // (`Document::document_id_depends_on_nonce`) the id also commits to the
+        // identity contract nonce, so this one is only a placeholder that building
+        // the create transition replaces. Read the id from the confirmed document.
         let id = Document::generate_document_id_v0(
             &contract.contract.id(),
             &owner_id,
@@ -1411,6 +1540,8 @@ impl DocumentActionScreen {
             properties,
             owner_id,
             creator_id: None,
+            moderated_at: None,
+            moderated_by: None,
             revision,
             created_at: None,
             updated_at: None,
@@ -1434,6 +1565,10 @@ impl DocumentActionScreen {
             .as_ref()
             .ok_or("No document-type selected")?;
 
+        if !Self::supports_field_editor(doc_type) {
+            return Err("This document contains fields that cannot be edited here. Use another document editor.".to_string());
+        }
+
         for (prop, schema) in doc_type.properties() {
             let entry = self.field_inputs.get(prop).map(|s| s.trim());
             if schema.required && entry.unwrap_or("").is_empty() {
@@ -1479,7 +1614,7 @@ impl DocumentActionScreen {
                         .map_err(|_| format!("{} must be a signed 64-bit integer", name))?;
                     Value::I64(n)
                 }
-                DocumentPropertyType::U32 => {
+                DocumentPropertyType::U32 | DocumentPropertyType::KeyIdWithReference(_) => {
                     let n = input_str
                         .parse::<u32>()
                         .map_err(|_| format!("{} must be an unsigned 32-bit integer", name))?;
@@ -1551,6 +1686,11 @@ impl DocumentActionScreen {
                         .map_err(|_| format!("{} (Date) expects unix-ms integer", name))?;
                     Value::U64(ts)
                 }
+                DocumentPropertyType::TypedArray(_) => {
+                    return Err(format!(
+                        "Field {name} cannot be edited here. Use another document editor."
+                    ));
+                }
                 DocumentPropertyType::Object(_) => {
                     return Err(format!(
                         "Object field {} must be supplied via JSON textarea",
@@ -1582,6 +1722,8 @@ impl DocumentActionScreen {
             properties,
             owner_id: original_doc.owner_id(),
             creator_id: original_doc.creator_id(),
+            moderated_at: original_doc.moderated_at(),
+            moderated_by: original_doc.moderated_by(),
             revision: new_revision,
             created_at: None,
             updated_at: None,
@@ -1598,7 +1740,26 @@ impl DocumentActionScreen {
         Ok((updated_doc.into(), entropy))
     }
 
+    fn supports_field_editor(
+        doc_type: &dash_sdk::dpp::data_contract::document_type::DocumentType,
+    ) -> bool {
+        !doc_type
+            .properties()
+            .values()
+            .any(|schema| matches!(schema.property_type, DocumentPropertyType::TypedArray(_)))
+    }
+
     fn can_broadcast(&self) -> bool {
+        if matches!(
+            self.action_type,
+            DocumentActionType::Create | DocumentActionType::Replace
+        ) && self
+            .selected_document_type
+            .as_ref()
+            .is_some_and(|doc_type| !Self::supports_field_editor(doc_type))
+        {
+            return false;
+        }
         match self.action_type {
             DocumentActionType::Create => !self.field_inputs.is_empty(),
             DocumentActionType::Delete => !self.document_id_input.is_empty(),
@@ -1834,7 +1995,15 @@ impl DocumentActionScreen {
                 // Step 2: Identity and Key Selection
                 self.render_identity_and_key_selection(ui);
 
-                if self.selected_identity.is_none() || self.selected_key.is_none() {
+                if self.selected_identity.is_none() {
+                    return action;
+                }
+                if self.selected_key.is_none() {
+                    let dark_mode = ui.style().visuals.dark_mode;
+                    ui.label(
+                        RichText::new(NO_SIGNING_KEY_NOTICE)
+                            .color(DashColors::warning_color(dark_mode)),
+                    );
                     return action;
                 }
 
@@ -1842,11 +2011,8 @@ impl DocumentActionScreen {
                 ui.add_space(10.0);
 
                 // Wallet unlock
-                if let Some(selected_identity) = &self.selected_identity {
-                    let new_wallet =
-                        get_selected_wallet(selected_identity, Some(&self.app_context), None)
-                            .or_show_error(self.app_context.egui_ctx())
-                            .unwrap_or(None);
+                if self.selected_identity.is_some() {
+                    let new_wallet = self.signing_wallet();
                     let wallet_changed = match (&self.wallet, &new_wallet) {
                         (Some(a), Some(b)) => !Arc::ptr_eq(a, b),
                         (None, None) => false,
@@ -1895,3 +2061,529 @@ impl DocumentActionScreen {
             .inner
     }
 }
+
+/// The contract-bounds scope of a document action on `document_type` of
+/// `contract`. Before a contract is chosen nothing is known about the target,
+/// so only keys that can sign anywhere (unbound keys) qualify.
+/// The key to sign a document action with when the user has not picked one:
+/// a live AUTHENTICATION key this device can sign with, at a security level
+/// the document type accepts, within the contract and document type's scope.
+fn auto_selected_document_key(
+    identity: &QualifiedIdentity,
+    contract: Option<&QualifiedContract>,
+    document_type: Option<&DocumentType>,
+) -> Option<IdentityPublicKey> {
+    // The levels the document type accepts (never MASTER), so the preference
+    // for unlimited keys only ever chooses among keys Platform accepts.
+    let levels = crate::ui::helpers::compute_allowed_security_levels(
+        TransactionType::DocumentAction,
+        document_type,
+    );
+    identity
+        .signing_key_now(KeyRequirements::new(
+            dash_sdk::dpp::identity::Purpose::AUTHENTICATION,
+            &levels,
+            signing_scope(contract, document_type),
+        ))
+        .cloned()
+}
+
+fn signing_scope<'a>(
+    contract: Option<&QualifiedContract>,
+    document_type: Option<&'a DocumentType>,
+) -> SigningScope<'a> {
+    match (contract, document_type) {
+        (Some(contract), Some(document_type)) => SigningScope::Document {
+            contract_id: contract.contract.id(),
+            document_type_name: document_type.name().as_str(),
+        },
+        (Some(contract), None) => SigningScope::ContractWide {
+            contract_id: contract.contract.id(),
+        },
+        (None, _) => SigningScope::NonBatch,
+    }
+}
+
+/// The contract fee as a label value: the total, and its split when both
+/// the owner and the moderators receive a part.
+fn action_fee_summary(quote: &DocumentActionFeeQuote) -> String {
+    let total = format_credits_as_dash(quote.total);
+    match (quote.owner, quote.moderators) {
+        (_, 0) => format!("{total} to the contract owner"),
+        (0, _) => format!("{total} to the contract's moderators"),
+        (owner, moderators) => format!(
+            "{total} ({owner} to the contract owner, {moderators} to its moderators)",
+            owner = format_credits_as_dash(owner),
+            moderators = format_credits_as_dash(moderators)
+        ),
+    }
+}
+
+/// The confirmation text for a contract fee, in complete sentences: who
+/// receives what, whether the fee follows network fees (and the most it can
+/// then reach), and that it comes on top of the network fee. The pricing is
+/// read from the agreement itself, so a fee too small to show the tolerance
+/// after rounding is still described as following network fees.
+fn action_fee_confirmation_text(quote: &DocumentActionFeeQuote) -> String {
+    let fee = format_credits_as_dash(quote.total);
+    let recipients = match (quote.owner, quote.moderators) {
+        (_, 0) => format!(
+            "This contract charges a fee of {fee} for this action, paid to the contract owner."
+        ),
+        (0, _) => format!(
+            "This contract charges a fee of {fee} for this action, paid to the contract's moderators."
+        ),
+        (owner, moderators) => format!(
+            "This contract charges a fee of {fee} for this action: {owner} to the contract owner and {moderators} to its moderators.",
+            owner = format_credits_as_dash(owner),
+            moderators = format_credits_as_dash(moderators)
+        ),
+    };
+    let pricing = if quote.agreement.fee_multiplier().is_some() {
+        format!(
+            "The fee follows network fees. If they rise before the action is processed, up to {max} can be charged. If they rise by more than {percent}%, the network refuses the action.",
+            max = format_credits_as_dash(quote.max_total),
+            percent = ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT
+        )
+    } else {
+        "The fee is fixed and does not change with network fees.".to_string()
+    };
+    format!(
+        "{recipients} {pricing} It is charged on top of the network fee. Do you want to continue?"
+    )
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use dash_sdk::dpp::data_contract::document_type::action_fees::agreement::AgreedFeeMultiplier;
+    use dash_sdk::dpp::data_contract::document_type::action_fees::{
+        ActionFeePricing, DocumentActionFee,
+    };
+
+    fn editor_document_type(array: bool) -> DocumentType {
+        use dash_sdk::dpp::data_contract::config::DataContractConfig;
+        use dash_sdk::dpp::platform_value::platform_value;
+        use dash_sdk::dpp::version::PlatformVersion;
+
+        let version = PlatformVersion::get(14).expect("protocol 14");
+        let config = DataContractConfig::default_for_version(version).unwrap();
+        let property = if array {
+            platform_value!({"type": "array", "items": {"type": "string", "maxLength": 20_u32}, "maxItems": 4_u32, "position": 0_u32})
+        } else {
+            platform_value!({"type": "string", "maxLength": 20_u32, "position": 0_u32})
+        };
+        DocumentType::try_from_schema(
+            Identifier::new([1; 32]), 1, config.version(), "entry",
+            platform_value!({"type": "object", "properties": {"value": property}, "additionalProperties": false}),
+            None, &BTreeMap::new(), &config, false, &mut Vec::new(), version,
+        ).unwrap()
+    }
+
+    use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+
+    /// An AUTHENTICATION key at `level`, optionally bound to `bounds`.
+    fn auth_key(
+        id: u32,
+        level: dash_sdk::dpp::identity::SecurityLevel,
+        bounds: Option<
+            dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds,
+        >,
+    ) -> IdentityPublicKey {
+        dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0 {
+            id,
+            purpose: dash_sdk::dpp::identity::Purpose::AUTHENTICATION,
+            security_level: level,
+            contract_bounds: bounds,
+            key_type: dash_sdk::dpp::identity::KeyType::ECDSA_SECP256K1,
+            read_only: false,
+            data: vec![2; 33].into(),
+            disabled_at: None,
+        }
+        .into()
+    }
+
+    /// A user identity holding the private half of each of `keys`.
+    fn identity_holding(keys: &[IdentityPublicKey]) -> QualifiedIdentity {
+        use crate::model::qualified_identity::qualified_identity_public_key::QualifiedIdentityPublicKey;
+        use crate::model::qualified_identity::{IdentityStatus, IdentityType, PrivateKeyTarget};
+        use dash_sdk::dpp::identity::Identity;
+        use dash_sdk::dpp::identity::accessors::IdentitySettersV0;
+        use dash_sdk::dpp::version::PlatformVersion;
+
+        let mut identity =
+            Identity::create_basic_identity(Identifier::new([0xD0; 32]), PlatformVersion::latest())
+                .expect("basic identity");
+        identity.set_public_keys(keys.iter().map(|key| (key.id(), key.clone())).collect());
+        let mut qi = QualifiedIdentity {
+            identity,
+            associated_voter_identity: None,
+            associated_operator_identity: None,
+            associated_owner_key_id: None,
+            identity_type: IdentityType::User,
+            alias: None,
+            private_keys: Default::default(),
+            dpns_names: vec![],
+            associated_wallets: BTreeMap::new(),
+            secret_access: None,
+            wallet_index: None,
+            top_ups: BTreeMap::new(),
+            status: IdentityStatus::Active,
+            network: dash_sdk::dpp::dashcore::Network::Testnet,
+        };
+        for key in keys {
+            qi.private_keys
+                .insert_non_encrypted(
+                    (PrivateKeyTarget::PrivateKeyOnMainIdentity, key.id()),
+                    (
+                        QualifiedIdentityPublicKey {
+                            identity_public_key: key.clone(),
+                            in_wallet_at_derivation_path: None,
+                        },
+                        [key.id() as u8; 32],
+                    ),
+                )
+                .expect("a free slot");
+        }
+        qi
+    }
+
+    /// The DPNS contract, whose document types require a HIGH key.
+    fn dpns() -> QualifiedContract {
+        use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+        use dash_sdk::dpp::version::PlatformVersion;
+        QualifiedContract {
+            contract: load_system_data_contract(
+                SystemDataContract::DPNS,
+                PlatformVersion::latest(),
+            )
+            .expect("the DPNS contract"),
+            alias: None,
+        }
+    }
+
+    fn owned_document_type(contract: &QualifiedContract, name: &str) -> DocumentType {
+        contract
+            .contract
+            .document_type_for_name(name)
+            .expect("document type")
+            .to_owned_document_type()
+    }
+
+    /// Regression: automatic selection admitted every non-master level and
+    /// preferred unlimited keys, so an unlimited MEDIUM key beat a limited key
+    /// at the level the document type requires, and Platform refused it.
+    #[test]
+    fn auto_selection_honours_the_document_types_security_level() {
+        use dash_sdk::dpp::identity::SecurityLevel;
+        let contract = dpns();
+        let domain = owned_document_type(&contract, "domain");
+        let required = domain.security_level_requirement();
+        assert_ne!(
+            required,
+            SecurityLevel::MEDIUM,
+            "the test needs a stricter type"
+        );
+
+        let limited = auth_key(1, required, None).with_limits(Some(5_000), None);
+        let weaker_unlimited = auth_key(2, SecurityLevel::MEDIUM, None);
+        let identity = identity_holding(&[limited, weaker_unlimited]);
+
+        let chosen = auto_selected_document_key(&identity, Some(&contract), Some(&domain));
+        assert_eq!(chosen.map(|key| key.id()), Some(1));
+    }
+
+    /// Regression: the unlock prompt looked for a DPNS signing key, so an
+    /// identity whose only key is bound to the action's contract got no
+    /// wallet to unlock although that key signs the action.
+    #[test]
+    fn the_unlock_wallet_follows_the_key_that_signs() {
+        use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let contract = QualifiedContract {
+            contract: crate::context::test_support::dashpay_contract(),
+            alias: None,
+        };
+        let (identity, wallet) = crate::context::test_support::identity_with_bound_wallet_key(
+            ContractBounds::SingleContract {
+                id: contract.contract.id(),
+            },
+        );
+
+        let mut screen = DocumentActionScreen::new(context, None, DocumentActionType::Create);
+        screen.selected_document_type = Some(owned_document_type(&contract, "contactInfo"));
+        screen.selected_contract = Some(contract);
+        screen.selected_identity = Some(identity);
+        screen.signing_scope_changed();
+        assert_eq!(screen.selected_key.as_ref().map(|key| key.id()), Some(1));
+
+        let resolved = screen.signing_wallet();
+        assert!(resolved.is_some_and(|resolved| Arc::ptr_eq(&resolved, &wallet)));
+    }
+
+    /// Regression: a key picked for one document type survived a switch to a
+    /// type it is not bound to, and the action was signed with it anyway.
+    #[test]
+    fn changing_the_document_type_picks_the_key_again() {
+        use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let contract = dpns();
+        let domain = owned_document_type(&contract, "domain");
+        let preorder = owned_document_type(&contract, "preorder");
+        let domain_only = auth_key(
+            1,
+            domain.security_level_requirement(),
+            Some(ContractBounds::SingleContractDocumentType {
+                id: contract.contract.id(),
+                document_type_name: "domain".to_string(),
+            }),
+        );
+        let identity = identity_holding(&[domain_only]);
+
+        let mut screen = DocumentActionScreen::new(context, None, DocumentActionType::Create);
+        screen.selected_contract = Some(contract.clone());
+        screen.selected_document_type = Some(domain.clone());
+        screen.selected_key = auto_selected_document_key(&identity, Some(&contract), Some(&domain));
+        screen.selected_identity = Some(identity);
+        assert_eq!(screen.selected_key.as_ref().map(|key| key.id()), Some(1));
+
+        screen.selected_document_type = Some(preorder);
+        screen.signing_scope_changed();
+        assert_eq!(
+            screen.selected_key, None,
+            "a key bound to domain cannot sign a preorder"
+        );
+    }
+
+    #[test]
+    fn replacing_an_optional_typed_array_does_not_drop_its_contents() {
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let mut screen = DocumentActionScreen::new(context, None, DocumentActionType::Replace);
+        screen.selected_document_type = Some(editor_document_type(true));
+        screen.original_doc = Some(
+            DocumentV0 {
+                properties: BTreeMap::from([(
+                    "value".to_string(),
+                    Value::Array(vec![Value::Text("keep".into())]),
+                )]),
+                ..Default::default()
+            }
+            .into(),
+        );
+        screen.broadcast_status = BroadcastStatus::Fetched;
+        assert!(!screen.can_broadcast());
+        assert!(screen.try_build_document_from_original().is_err());
+        assert!(matches!(screen.create_replace_task(), BackendTask::None));
+    }
+
+    #[test]
+    fn replacing_document_fields_preserves_moderation_metadata() {
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let mut screen = DocumentActionScreen::new(context, None, DocumentActionType::Replace);
+        screen.selected_document_type = Some(editor_document_type(false));
+        screen.original_doc = Some(
+            DocumentV0 {
+                moderated_at: Some(1234),
+                moderated_by: Some(Identifier::new([7; 32])),
+                ..Default::default()
+            }
+            .into(),
+        );
+        screen.field_inputs.insert("value".into(), "changed".into());
+        let (document, _) = screen.try_build_document_from_original().unwrap();
+        assert_eq!(document.moderated_at(), Some(1234));
+        assert_eq!(document.moderated_by(), Some(Identifier::new([7; 32])));
+        assert_eq!(
+            document.properties().get("value"),
+            Some(&Value::Text("changed".into()))
+        );
+    }
+
+    fn quote(
+        pricing: ActionFeePricing,
+        owner: Credits,
+        moderators: Credits,
+    ) -> DocumentActionFeeQuote {
+        let total = owner + moderators;
+        let max_total = match pricing {
+            ActionFeePricing::FeeMultiplier => {
+                total * (100 + ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT as u64) / 100
+            }
+            ActionFeePricing::Fixed => total,
+        };
+        DocumentActionFeeQuote {
+            agreement: DocumentActionFeeAgreement::for_declared_fee(
+                pricing,
+                DocumentActionFee { owner, moderators },
+                AgreedFeeMultiplier {
+                    known_permille: 1000,
+                    increase_tolerance_percent: ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT,
+                },
+            ),
+            owner,
+            moderators,
+            total,
+            max_total,
+        }
+    }
+
+    /// Regression: with an identity selected but no key that can sign the
+    /// action, the screen stopped below the identity selector with no word
+    /// of why (the key chooser is behind Advanced Options).
+    #[test]
+    fn an_identity_without_a_usable_key_is_told_why_nothing_follows() {
+        use egui_kittest::Harness;
+        use egui_kittest::kittest::Queryable;
+
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let contract = dpns();
+        let domain = owned_document_type(&contract, "domain");
+        let mut screen = DocumentActionScreen::new(context, None, DocumentActionType::Delete);
+        screen.selected_contract = Some(contract);
+        screen.selected_document_type = Some(domain);
+        screen.selected_identity = Some(identity_holding(&[]));
+        assert!(screen.selected_key.is_none());
+
+        let mut harness = Harness::builder().build_ui_state(
+            |ui, screen: &mut DocumentActionScreen| {
+                screen.render_main_content(ui);
+            },
+            screen,
+        );
+        harness.run();
+        assert!(
+            harness.query_by_label(NO_SIGNING_KEY_NOTICE).is_some(),
+            "the missing key is explained"
+        );
+    }
+
+    /// Regression: Confirm rebuilt the action from the live form, so an input
+    /// changed while the fee confirmation was open was signed with the fee
+    /// agreed for the action shown. What is confirmed is what is sent.
+    #[test]
+    fn confirming_a_contract_fee_sends_the_action_it_was_shown_for() {
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let contract = dpns();
+        let domain = owned_document_type(&contract, "domain");
+        let key = auth_key(1, domain.security_level_requirement(), None);
+        let mut screen = DocumentActionScreen::new(context, None, DocumentActionType::Delete);
+        screen.selected_contract = Some(contract);
+        screen.selected_document_type = Some(domain);
+        screen.selected_identity = Some(identity_holding(std::slice::from_ref(&key)));
+        screen.selected_key = Some(key);
+        let shown = Identifier::new([0x11; 32]);
+        screen.document_id_input = shown.to_string(Encoding::Base58);
+
+        let quote = quote(ActionFeePricing::Fixed, 1_000, 0);
+        screen.open_action_fee_confirmation(quote);
+        // The form behind the dialog changes before the user confirms.
+        screen.document_id_input = Identifier::new([0x22; 32]).to_string(Encoding::Base58);
+
+        let sent = screen.confirm_action_fee(&egui::Context::default());
+        let AppAction::BackendTask(BackendTask::DocumentTask(task)) = sent else {
+            panic!("the confirmed action is sent, got {sent:?}");
+        };
+        let DocumentTask::DeleteDocument {
+            document_id,
+            action_fee_agreement,
+            ..
+        } = *task
+        else {
+            panic!("a delete was confirmed");
+        };
+        assert_eq!(document_id, shown);
+        assert_eq!(action_fee_agreement, Some(quote.agreement));
+    }
+
+    /// The user agrees to the most that can be charged, so the confirmation
+    /// names that ceiling and the tolerance behind it, not only today's price.
+    #[test]
+    fn a_multiplier_priced_fee_confirmation_names_the_ceiling_and_the_tolerance() {
+        let quote = quote(ActionFeePricing::FeeMultiplier, 100_000_000_000, 0);
+        let text = action_fee_confirmation_text(&quote);
+        assert!(
+            text.contains(&format!(
+                "up to {}",
+                format_credits_as_dash(quote.max_total)
+            )),
+            "the ceiling must be shown, got: {text}"
+        );
+        assert!(
+            text.contains(&format!(
+                "more than {ACTION_FEE_MULTIPLIER_INCREASE_TOLERANCE_PERCENT}%"
+            )),
+            "the tolerance must be shown, got: {text}"
+        );
+        assert!(text.contains(&format_credits_as_dash(quote.total)));
+    }
+
+    #[test]
+    fn a_fixed_fee_confirmation_promises_no_increase() {
+        let quote = quote(ActionFeePricing::Fixed, 50_000_000_000, 0);
+        let text = action_fee_confirmation_text(&quote);
+        assert!(text.contains("The fee is fixed"), "got: {text}");
+        assert!(
+            !text.contains("up to"),
+            "a fixed fee cannot rise, got: {text}"
+        );
+    }
+
+    /// Rounding can hide the tolerance of a tiny fee (4 credits * 1.2 floors
+    /// to 4): it still follows network fees and must say so.
+    #[test]
+    fn a_tiny_multiplier_priced_fee_is_not_called_fixed() {
+        let mut quote = quote(ActionFeePricing::FeeMultiplier, 4, 0);
+        quote.max_total = quote.total;
+        let text = action_fee_confirmation_text(&quote);
+        assert!(text.contains("follows network fees"), "got: {text}");
+        assert!(!text.contains("fixed"), "got: {text}");
+    }
+
+    #[test]
+    fn a_fee_for_moderators_only_names_them() {
+        let quote = quote(ActionFeePricing::Fixed, 0, 7_000);
+        assert!(action_fee_confirmation_text(&quote).contains("paid to the contract's moderators"));
+        assert!(action_fee_summary(&quote).contains("to the contract's moderators"));
+    }
+
+    #[test]
+    fn a_fee_split_with_moderators_names_both_parts() {
+        let quote = quote(
+            ActionFeePricing::FeeMultiplier,
+            60_000_000_000,
+            40_000_000_000,
+        );
+        let summary = action_fee_summary(&quote);
+        assert!(summary.contains(&format!(
+            "{} to the contract owner",
+            format_credits_as_dash(quote.owner)
+        )));
+        assert!(summary.contains(&format!(
+            "{} to its moderators",
+            format_credits_as_dash(quote.moderators)
+        )));
+    }
+
+    /// Action fees and token costs are declared per transition, so every
+    /// screen action must name the transition it broadcasts.
+    #[test]
+    fn every_action_maps_to_its_document_transition() {
+        use DocumentTransitionActionType as T;
+        for (action, expected) in [
+            (DocumentActionType::Create, T::Create),
+            (DocumentActionType::Delete, T::Delete),
+            (DocumentActionType::Purchase, T::Purchase),
+            (DocumentActionType::Replace, T::Replace),
+            (DocumentActionType::SetPrice, T::UpdatePrice),
+            (DocumentActionType::Transfer, T::Transfer),
+        ] {
+            assert_eq!(action.transition_action(), expected);
+        }
+    }
+}
diff --git a/src/ui/contracts_documents/group_actions_screen.rs b/src/ui/contracts_documents/group_actions_screen.rs
index f8ccf6ee9..58cb3b087 100644
--- a/src/ui/contracts_documents/group_actions_screen.rs
+++ b/src/ui/contracts_documents/group_actions_screen.rs
@@ -217,23 +217,28 @@ impl GroupActionsScreen {
                                 });
                                 row.col(|ui| {
                                     ui.horizontal(|ui| {
-                                        ui.label(self.get_token_event_type(token_event));
+                                        ui.label(Self::get_token_event_type(token_event));
                                         ui.add_space(30.0);
                                     });
                                 });
                                 row.col(|ui| {
                                     ui.horizontal(|ui| {
-                                        ui.label(self.get_token_event_info(token_event));
+                                        ui.label(Self::get_token_event_info(token_event));
                                         ui.add_space(30.0);
                                     });
                                 });
                                 row.col(|ui| {
                                     ui.horizontal(|ui| {
-                                        ui.label(self.get_token_event_note(token_event));
+                                        ui.label(Self::get_token_event_note(token_event));
                                         ui.add_space(30.0);
                                     });
                                 });
                                 row.col(|ui| {
+                                    if !Self::supports_token_event_action(token_event) {
+                                        ui.add_enabled(false, egui::Button::new("Take Action"))
+                                            .on_hover_text("This action cannot be signed here. Use another token client.");
+                                        return;
+                                    }
                                     if ComponentStyles::add_primary_button(
                                         ui,
                                         "Take Action",
@@ -291,7 +296,7 @@ impl GroupActionsScreen {
         action
     }
 
-    fn get_token_event_type(&self, token_event: &TokenEvent) -> &'static str {
+    fn get_token_event_type(token_event: &TokenEvent) -> &'static str {
         match token_event {
             TokenEvent::Mint(..) => "Mint",
             TokenEvent::Burn(..) => "Burn",
@@ -304,10 +309,17 @@ impl GroupActionsScreen {
             TokenEvent::ConfigUpdate(..) => "ConfigUpdate",
             TokenEvent::ChangePriceForDirectPurchase(..) => "ChangePrice",
             TokenEvent::DirectPurchase(..) => "DirectPurchase",
+            TokenEvent::Shield(..) => "Shield",
+            TokenEvent::Unshield(..) => "Unshield",
+            TokenEvent::ShieldedTransfer => "ShieldedTransfer",
+            TokenEvent::MintToPool(..) => "MintToPool",
+            TokenEvent::BurnFromPool(..) => "BurnFromPool",
+            TokenEvent::ClaimToPool(..) => "ClaimToPool",
+            TokenEvent::DirectPurchaseToPool(..) => "DirectPurchaseToPool",
         }
     }
 
-    fn get_token_event_info(&self, token_event: &TokenEvent) -> String {
+    fn get_token_event_info(token_event: &TokenEvent) -> String {
         match token_event {
             TokenEvent::Mint(amount, identifier, _) => format!("{} to {}", amount, identifier),
             TokenEvent::Burn(amount, burn_from, _) => format!("{} from {}", amount, burn_from),
@@ -323,13 +335,25 @@ impl GroupActionsScreen {
             TokenEvent::EmergencyAction(action, _) => format!("{:?}", action),
             TokenEvent::ConfigUpdate(change_item, _) => format!("{:?}", change_item),
             TokenEvent::ChangePriceForDirectPurchase(schedule, _) => format!("{:?}", schedule),
-            TokenEvent::DirectPurchase(amount, credits) => {
+            TokenEvent::DirectPurchase(amount, credits)
+            | TokenEvent::DirectPurchaseToPool(amount, credits) => {
                 format!("{} for {} credits", amount, credits)
             }
+            TokenEvent::Shield(amount) | TokenEvent::ClaimToPool(amount) => {
+                format!("{amount} to the shielded pool")
+            }
+            TokenEvent::Unshield(identifier, amount) => format!("{amount} to {identifier}"),
+            TokenEvent::ShieldedTransfer => "The amount and participants are private.".to_string(),
+            TokenEvent::MintToPool(amount, digest, _) => {
+                format!("{amount} to the shielded pool; action digest {digest}")
+            }
+            TokenEvent::BurnFromPool(amount, digest, _) => {
+                format!("{amount} from the shielded pool; action digest {digest}")
+            }
         }
     }
 
-    fn get_token_event_note(&self, token_event: &TokenEvent) -> String {
+    fn get_token_event_note(token_event: &TokenEvent) -> String {
         match token_event {
             TokenEvent::Mint(_, _, note_opt)
             | TokenEvent::Burn(_, _, note_opt)
@@ -339,16 +363,36 @@ impl GroupActionsScreen {
             | TokenEvent::Claim(_, _, note_opt)
             | TokenEvent::EmergencyAction(_, note_opt)
             | TokenEvent::ConfigUpdate(_, note_opt)
-            | TokenEvent::ChangePriceForDirectPurchase(_, note_opt) => {
+            | TokenEvent::ChangePriceForDirectPurchase(_, note_opt)
+            | TokenEvent::MintToPool(_, _, note_opt)
+            | TokenEvent::BurnFromPool(_, _, note_opt) => {
                 note_opt.clone().unwrap_or_default().to_string()
             }
             TokenEvent::Transfer(_, public_note, _, _, _) => {
                 public_note.clone().unwrap_or_default().to_string()
             }
-            TokenEvent::DirectPurchase(_, _) => String::new(),
+            TokenEvent::DirectPurchase(_, _)
+            | TokenEvent::Shield(_)
+            | TokenEvent::Unshield(_, _)
+            | TokenEvent::ShieldedTransfer
+            | TokenEvent::ClaimToPool(_)
+            | TokenEvent::DirectPurchaseToPool(_, _) => String::new(),
         }
     }
 
+    fn supports_token_event_action(token_event: &TokenEvent) -> bool {
+        !matches!(
+            token_event,
+            TokenEvent::Shield(_)
+                | TokenEvent::Unshield(_, _)
+                | TokenEvent::ShieldedTransfer
+                | TokenEvent::MintToPool(_, _, _)
+                | TokenEvent::BurnFromPool(_, _, _)
+                | TokenEvent::ClaimToPool(_)
+                | TokenEvent::DirectPurchaseToPool(_, _)
+        )
+    }
+
     /// On click of the "Take Action" button
     fn handle_token_event_action(
         &mut self,
@@ -614,3 +658,50 @@ impl ScreenLike for GroupActionsScreen {
         action
     }
 }
+
+#[cfg(test)]
+mod sdk_adapter_tests {
+    use super::*;
+
+    #[test]
+    fn shielded_events_are_displayed_without_offering_transparent_actions() {
+        let identity = Identifier::from([7; 32]);
+        for (event, label, detail, note) in [
+            (TokenEvent::Shield(12), "Shield", "12", ""),
+            (TokenEvent::Unshield(identity, 13), "Unshield", "13", ""),
+            (
+                TokenEvent::ShieldedTransfer,
+                "ShieldedTransfer",
+                "private",
+                "",
+            ),
+            (
+                TokenEvent::MintToPool(14, identity, Some("mint note".into())),
+                "MintToPool",
+                "action digest",
+                "mint note",
+            ),
+            (
+                TokenEvent::BurnFromPool(15, identity, Some("burn note".into())),
+                "BurnFromPool",
+                "action digest",
+                "burn note",
+            ),
+            (TokenEvent::ClaimToPool(16), "ClaimToPool", "16", ""),
+            (
+                TokenEvent::DirectPurchaseToPool(17, 18),
+                "DirectPurchaseToPool",
+                "17 for 18",
+                "",
+            ),
+        ] {
+            assert_eq!(GroupActionsScreen::get_token_event_type(&event), label);
+            assert!(GroupActionsScreen::get_token_event_info(&event).contains(detail));
+            assert_eq!(GroupActionsScreen::get_token_event_note(&event), note);
+            assert!(!GroupActionsScreen::supports_token_event_action(&event));
+        }
+        assert!(GroupActionsScreen::supports_token_event_action(
+            &TokenEvent::Mint(12, identity, None)
+        ));
+    }
+}
diff --git a/src/ui/contracts_documents/mod.rs b/src/ui/contracts_documents/mod.rs
index 47ce18225..9ba44b53e 100644
--- a/src/ui/contracts_documents/mod.rs
+++ b/src/ui/contracts_documents/mod.rs
@@ -1,4 +1,5 @@
 pub mod add_contracts_screen;
+pub mod contract_fee_pots_screen;
 pub mod contracts_documents_screen;
 pub mod document_action_screen;
 pub mod group_actions_screen;
diff --git a/src/ui/contracts_documents/register_contract_screen.rs b/src/ui/contracts_documents/register_contract_screen.rs
index 14c43790d..061ac58d4 100644
--- a/src/ui/contracts_documents/register_contract_screen.rs
+++ b/src/ui/contracts_documents/register_contract_screen.rs
@@ -4,6 +4,7 @@ use crate::backend_task::FeeResult;
 use crate::backend_task::contract::ContractTask;
 use crate::context::AppContext;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
 use crate::ui::components::identity_selector::IdentitySelector;
@@ -15,7 +16,7 @@ use crate::ui::components::wallet_unlock_popup::{
 };
 use crate::ui::components::{BannerHandle, MessageBanner, OptionBannerExt, ResultBannerExt};
 use crate::ui::helpers::{TransactionType, add_key_chooser};
-use crate::ui::identity::get_selected_wallet;
+use crate::ui::identity::wallet_for_signing_key;
 use crate::ui::theme::{ComponentStyles, DashColors};
 use crate::ui::{BackendTaskSuccessResult, MessageType, ScreenLike};
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Setters;
@@ -74,26 +75,21 @@ impl RegisterDataContractScreen {
             })
             .or_else(|| qualified_identities.first().cloned());
 
-        let selected_wallet = if let Some(ref identity) = selected_qualified_identity {
-            get_selected_wallet(identity, Some(app_context), None).unwrap_or(None)
-        } else {
-            None
-        };
-
         // Auto-select a suitable key for contract registration
-        use dash_sdk::dpp::identity::KeyType;
         let selected_key = selected_qualified_identity.as_ref().and_then(|identity| {
             identity
-                .identity
-                .get_first_public_key_matching(
+                .signing_key_now(KeyRequirements::new(
                     Purpose::AUTHENTICATION,
-                    [SecurityLevel::HIGH, SecurityLevel::CRITICAL].into(),
-                    KeyType::all_key_types().into(),
-                    false,
-                )
+                    &[SecurityLevel::HIGH, SecurityLevel::CRITICAL],
+                    SigningScope::NonBatch,
+                ))
                 .cloned()
         });
 
+        let selected_wallet = selected_qualified_identity
+            .as_ref()
+            .and_then(|identity| wallet_for_signing_key(identity, selected_key.as_ref()));
+
         let selected_identity_string = selected_qualified_identity
             .as_ref()
             .map(|qi| {
@@ -463,25 +459,16 @@ impl ScreenLike for RegisterDataContractScreen {
                 if response.changed() {
                     if let Some(identity) = &self.selected_qualified_identity {
                         // Auto-select a suitable key for contract registration
-                        use dash_sdk::dpp::identity::KeyType;
                         self.selected_key = identity
-                            .identity
-                            .get_first_public_key_matching(
+                            .signing_key_now(KeyRequirements::new(
                                 Purpose::AUTHENTICATION,
-                                [SecurityLevel::HIGH, SecurityLevel::CRITICAL].into(),
-                                KeyType::all_key_types().into(),
-                                false,
-                            )
+                                &[SecurityLevel::HIGH, SecurityLevel::CRITICAL],
+                                SigningScope::NonBatch,
+                            ))
                             .cloned();
 
-                        // Update wallet
-                        self.selected_wallet = get_selected_wallet(
-                            identity,
-                            Some(&self.app_context),
-                            None,
-                        )
-                        .or_show_error(self.app_context.egui_ctx())
-                        .unwrap_or(None);
+                        self.selected_wallet =
+                            wallet_for_signing_key(identity, self.selected_key.as_ref());
                         self.wallet_open_attempted = false;
 
                         // Re-parse contract with new owner ID
@@ -503,6 +490,7 @@ impl ScreenLike for RegisterDataContractScreen {
                             identity,
                             &mut self.selected_key,
                             TransactionType::RegisterContract,
+                            SigningScope::NonBatch,
                         );
                     }
                 }
diff --git a/src/ui/contracts_documents/update_contract_screen.rs b/src/ui/contracts_documents/update_contract_screen.rs
index 03da6e2b2..1f7dde2f3 100644
--- a/src/ui/contracts_documents/update_contract_screen.rs
+++ b/src/ui/contracts_documents/update_contract_screen.rs
@@ -4,6 +4,7 @@ use crate::backend_task::FeeResult;
 use crate::backend_task::contract::ContractTask;
 use crate::context::AppContext;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_contract::QualifiedContract;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
@@ -16,7 +17,7 @@ use crate::ui::components::wallet_unlock_popup::{
 };
 use crate::ui::components::{BannerHandle, MessageBanner, OptionBannerExt, ResultBannerExt};
 use crate::ui::helpers::{TransactionType, add_key_chooser};
-use crate::ui::identity::get_selected_wallet;
+use crate::ui::identity::wallet_for_signing_key;
 use crate::ui::theme::{ComponentStyles, DashColors};
 use crate::ui::{BackendTaskSuccessResult, MessageType, ScreenLike};
 use dash_sdk::dpp::data_contract::accessors::v0::{DataContractV0Getters, DataContractV0Setters};
@@ -24,13 +25,12 @@ use dash_sdk::dpp::data_contract::conversion::json::DataContractJsonConversionMe
 use dash_sdk::dpp::data_contract::serialized_version::DataContractInSerializationFormat;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
+use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
 use dash_sdk::dpp::version::TryFromPlatformVersioned;
 use dash_sdk::platform::{DataContract, IdentityPublicKey};
 use eframe::egui::{self, Color32, Frame, Margin, TextEdit};
 use egui::{RichText, ScrollArea, Ui};
-use std::collections::HashSet;
 use std::sync::{Arc, RwLock};
 
 #[derive(PartialEq)]
@@ -83,12 +83,6 @@ impl UpdateDataContractScreen {
             })
             .or_else(|| qualified_identities.first().cloned());
 
-        let selected_wallet = if let Some(ref identity) = selected_qualified_identity {
-            get_selected_wallet(identity, Some(app_context), None).unwrap_or(None)
-        } else {
-            None
-        };
-
         let excluded_aliases = ["dpns", "keyword_search", "token_history", "withdrawals"];
         let contracts = app_context.get_contracts().unwrap_or_else(|error| {
             MessageBanner::set_global(
@@ -109,16 +103,18 @@ impl UpdateDataContractScreen {
 
         let selected_key = selected_qualified_identity.as_ref().and_then(|identity| {
             identity
-                .identity
-                .get_first_public_key_matching(
+                .signing_key_now(KeyRequirements::new(
                     Purpose::AUTHENTICATION,
-                    HashSet::from([SecurityLevel::CRITICAL]),
-                    KeyType::all_key_types().into(),
-                    false,
-                )
+                    &[SecurityLevel::CRITICAL],
+                    SigningScope::NonBatch,
+                ))
                 .cloned()
         });
 
+        let selected_wallet = selected_qualified_identity
+            .as_ref()
+            .and_then(|identity| wallet_for_signing_key(identity, selected_key.as_ref()));
+
         let selected_identity_string = selected_qualified_identity
             .as_ref()
             .map(|qi| qi.identity.id().to_string(Encoding::Base58))
@@ -493,20 +489,15 @@ impl ScreenLike for UpdateDataContractScreen {
                 if let Some(identity) = &self.selected_qualified_identity {
                     // Auto-select a suitable key for contract updates
                     self.selected_key = identity
-                        .identity
-                        .get_first_public_key_matching(
+                        .signing_key_now(KeyRequirements::new(
                             Purpose::AUTHENTICATION,
-                            HashSet::from([SecurityLevel::CRITICAL]),
-                            KeyType::all_key_types().into(),
-                            false,
-                        )
+                            &[SecurityLevel::CRITICAL],
+                            SigningScope::NonBatch,
+                        ))
                         .cloned();
 
-                    // Update wallet
                     self.selected_wallet =
-                        get_selected_wallet(identity, Some(&self.app_context), None)
-                            .or_show_error(self.app_context.egui_ctx())
-                            .unwrap_or(None);
+                        wallet_for_signing_key(identity, self.selected_key.as_ref());
                     self.wallet_open_attempted = false;
 
                     // Re-parse contract with new owner ID
@@ -528,6 +519,7 @@ impl ScreenLike for UpdateDataContractScreen {
                         identity,
                         &mut self.selected_key,
                         TransactionType::UpdateContract,
+                        SigningScope::NonBatch,
                     );
                 }
             }
diff --git a/src/ui/dashpay/add_contact_screen.rs b/src/ui/dashpay/add_contact_screen.rs
index ec75b1a14..986d01b4b 100644
--- a/src/ui/dashpay/add_contact_screen.rs
+++ b/src/ui/dashpay/add_contact_screen.rs
@@ -5,9 +5,9 @@ use crate::backend_task::error::TaskError;
 use crate::backend_task::{BackendTask, BackendTaskSuccessResult};
 use crate::context::AppContext;
 use crate::model::dashpay::validate_account_label;
+use crate::model::identity_key_usability::SigningScope;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
-use crate::ui::components::ResultBannerExt;
 use crate::ui::components::dashpay_subscreen_chooser_panel::add_dashpay_subscreen_chooser_panel;
 use crate::ui::components::identity_selector::IdentitySelector;
 use crate::ui::components::info_popup::InfoPopup;
@@ -19,10 +19,11 @@ use crate::ui::components::wallet_unlock_popup::{
 };
 use crate::ui::dashpay::DashPaySubscreen;
 use crate::ui::helpers::{TransactionType, add_key_chooser};
-use crate::ui::identity::get_selected_wallet;
 use crate::ui::identity::keys::add_key_screen::AddKeyScreen;
+use crate::ui::identity::wallet_for_signing_key;
 use crate::ui::theme::{DashColors, Typography};
 use crate::ui::{MessageType, RootScreenType, Screen, ScreenLike};
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::platform::IdentityPublicKey;
 use egui::{RichText, ScrollArea, TextEdit, Ui};
@@ -308,29 +309,18 @@ impl ScreenLike for AddContactScreen {
 
                 if should_auto_select {
                     if let Some(identity) = &self.selected_identity {
-                        // Auto-select a suitable AUTHENTICATION key for signing contact requests
-                        // Platform requires CRITICAL or HIGH security level for contact request signing
-                        use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
-                        use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
-                        use std::collections::HashSet;
                         self.selected_key = identity
-                            .identity
-                            .get_first_public_key_matching(
-                                Purpose::AUTHENTICATION,
-                                HashSet::from([SecurityLevel::CRITICAL, SecurityLevel::HIGH]),
-                                KeyType::all_key_types().into(),
-                                false,
+                            .document_action_signing_key(
+                                &self.app_context.dashpay_contract(),
+                                "contactRequest",
+                                None,
                             )
                             .cloned();
 
-                        // Update wallet if not already set
-                        if self.selected_wallet.is_none() {
-                            self.selected_wallet =
-                                get_selected_wallet(identity, Some(&self.app_context), None)
-                                    .or_show_error(self.app_context.egui_ctx())
-                                    .unwrap_or(None);
-                            self.wallet_open_attempted = false;
-                        }
+                        // The wallet holding the key that signs the request.
+                        self.selected_wallet =
+                            wallet_for_signing_key(identity, self.selected_key.as_ref());
+                        self.wallet_open_attempted = false;
                     } else {
                         self.selected_key = None;
                         self.selected_wallet = None;
@@ -348,6 +338,10 @@ impl ScreenLike for AddContactScreen {
                             identity,
                             &mut self.selected_key,
                             TransactionType::ContactRequest,
+                            SigningScope::Document {
+                                contract_id: self.app_context.dashpay_contract().id(),
+                                document_type_name: "contactRequest",
+                            },
                         );
                         if !matches!(key_action, AppAction::None) {
                             inner_action = key_action;
diff --git a/src/ui/dashpay/contact_requests.rs b/src/ui/dashpay/contact_requests.rs
index eaeb72e54..f2f80f0bf 100644
--- a/src/ui/dashpay/contact_requests.rs
+++ b/src/ui/dashpay/contact_requests.rs
@@ -7,14 +7,14 @@ use crate::context::AppContext;
 use crate::model::dashpay::{UnreadableContactInfoPolicy, contact_request_recipient};
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
+use crate::ui::components::MessageBanner;
 use crate::ui::components::component_trait::Component;
 use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
 use crate::ui::components::identity_selector::IdentitySelector;
 use crate::ui::components::wallet_unlock_popup::{
     WalletUnlockPopup, WalletUnlockResult, try_open_wallet_no_password, wallet_needs_unlock,
 };
-use crate::ui::components::{MessageBanner, ResultBannerExt};
-use crate::ui::identity::get_selected_wallet;
+use crate::ui::dashpay::dashpay_action_wallet;
 use crate::ui::identity::keys::add_key_screen::AddKeyScreen;
 use crate::ui::theme::{ComponentStyles, DashColors};
 use crate::ui::{MessageType, Screen, ScreenLike, ScreenType};
@@ -116,9 +116,8 @@ impl ContactRequests {
                 .to_string(dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58);
 
             // Get wallet for the selected identity
-            new_self.selected_wallet = get_selected_wallet(&preferred, Some(&app_context), None)
-                .or_show_error(app_context.egui_ctx())
-                .unwrap_or(None);
+            new_self.selected_wallet =
+                dashpay_action_wallet(&preferred, &app_context, "contactRequest");
         }
 
         new_self
@@ -141,9 +140,8 @@ impl ContactRequests {
                     .to_string(dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58);
 
                 // Update wallet for the newly selected identity
-                self.selected_wallet = get_selected_wallet(id, Some(&self.app_context), None)
-                    .or_show_error(self.app_context.egui_ctx())
-                    .unwrap_or(None);
+                self.selected_wallet =
+                    dashpay_action_wallet(id, &self.app_context, "contactRequest");
                 self.wallet_open_attempted = false;
             } else {
                 self.selected_identity_string.clear();
@@ -462,10 +460,11 @@ impl ContactRequests {
 
                             // Update wallet for the newly selected identity
                             if let Some(identity) = &self.selected_identity {
-                                self.selected_wallet =
-                                    get_selected_wallet(identity, Some(&self.app_context), None)
-                                        .or_show_error(self.app_context.egui_ctx())
-                                        .unwrap_or(None);
+                                self.selected_wallet = dashpay_action_wallet(
+                                    identity,
+                                    &self.app_context,
+                                    "contactRequest",
+                                );
                             } else {
                                 self.selected_wallet = None;
                             }
diff --git a/src/ui/dashpay/mod.rs b/src/ui/dashpay/mod.rs
index 88d0b1cbc..db90e868e 100644
--- a/src/ui/dashpay/mod.rs
+++ b/src/ui/dashpay/mod.rs
@@ -24,6 +24,22 @@ use chrono::{LocalResult, TimeZone, Utc};
 use chrono_humanize::HumanTime;
 use dash_sdk::platform::Identifier;
 
+/// The wallet holding the key `identity` signs a `document_type_name` DashPay
+/// document with, for the unlock prompt. `None` when no key qualifies or no
+/// wallet derives it.
+pub(crate) fn dashpay_action_wallet(
+    identity: &crate::model::qualified_identity::QualifiedIdentity,
+    app_context: &AppContext,
+    document_type_name: &str,
+) -> Option<std::sync::Arc<std::sync::RwLock<crate::model::wallet::Wallet>>> {
+    let key = identity.document_action_signing_key(
+        &app_context.dashpay_contract(),
+        document_type_name,
+        None,
+    );
+    crate::ui::identity::wallet_for_signing_key(identity, key)
+}
+
 /// Persist a contact's DET-local private memo (nickname / notes / hidden flag)
 /// to the WalletBackend k/v sidecar — the single save path shared by the
 /// contact list, contact details, and profile-viewer inline editors.
@@ -141,3 +157,26 @@ pub fn render_no_identities_card(ui: &mut Ui, app_context: &Arc<AppContext>) ->
         })
         .inner
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    /// Regression: the unlock prompt looked for a DPNS signing key, so an
+    /// identity whose only key is bound to DashPay got no wallet to unlock.
+    #[test]
+    fn the_unlock_wallet_follows_a_key_bound_to_dashpay() {
+        use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+        use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+        let dir = tempfile::tempdir().expect("tempdir");
+        let app_context = crate::context::test_support::test_app_context(dir.path());
+        let (identity, wallet) = crate::context::test_support::identity_with_bound_wallet_key(
+            ContractBounds::SingleContract {
+                id: app_context.dashpay_contract().id(),
+            },
+        );
+
+        let resolved = dashpay_action_wallet(&identity, &app_context, "contactRequest");
+        assert!(resolved.is_some_and(|resolved| std::sync::Arc::ptr_eq(&resolved, &wallet)));
+    }
+}
diff --git a/src/ui/dashpay/profile_screen.rs b/src/ui/dashpay/profile_screen.rs
index 5b3cff47d..d503327f3 100644
--- a/src/ui/dashpay/profile_screen.rs
+++ b/src/ui/dashpay/profile_screen.rs
@@ -7,6 +7,7 @@ use crate::model::fee_estimation::format_credits_as_dash;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
 use crate::ui::MessageType;
+use crate::ui::components::MessageBanner;
 use crate::ui::components::avatar::Avatar;
 use crate::ui::components::component_trait::Component;
 use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
@@ -15,9 +16,8 @@ use crate::ui::components::info_popup::InfoPopup;
 use crate::ui::components::wallet_unlock_popup::{
     WalletUnlockPopup, WalletUnlockResult, try_open_wallet_no_password, wallet_needs_unlock,
 };
-use crate::ui::components::{MessageBanner, ResultBannerExt};
+use crate::ui::dashpay::dashpay_action_wallet;
 use crate::ui::helpers::{ModalOpeningGuard, clicked_outside_window_after_open};
-use crate::ui::identity::get_selected_wallet;
 use crate::ui::state::{AvatarCache, PendingRequest};
 use crate::ui::theme::{ComponentStyles, DashColors, ResponseExt};
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
@@ -138,9 +138,7 @@ impl ProfileScreen {
                 new_self.selected_identity_string
             );
 
-            new_self.selected_wallet = get_selected_wallet(&preferred, Some(&app_context), None)
-                .or_show_error(app_context.egui_ctx())
-                .unwrap_or(None);
+            new_self.selected_wallet = dashpay_action_wallet(&preferred, &app_context, "profile");
         }
 
         new_self
@@ -404,9 +402,7 @@ impl ProfileScreen {
                         // Update wallet for the newly selected identity
                         if let Some(identity) = &self.selected_identity {
                             self.selected_wallet =
-                                get_selected_wallet(identity, Some(&self.app_context), None)
-                                    .or_show_error(self.app_context.egui_ctx())
-                                    .unwrap_or(None);
+                                dashpay_action_wallet(identity, &self.app_context, "profile");
                         } else {
                             self.selected_wallet = None;
                         }
diff --git a/src/ui/dashpay/qr_code_generator.rs b/src/ui/dashpay/qr_code_generator.rs
index 2f2a22ede..34c24c43e 100644
--- a/src/ui/dashpay/qr_code_generator.rs
+++ b/src/ui/dashpay/qr_code_generator.rs
@@ -4,6 +4,7 @@ use crate::backend_task::{BackendTask, BackendTaskSuccessResult};
 use crate::context::AppContext;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
+use crate::ui::components::MessageBanner;
 use crate::ui::components::dashpay_subscreen_chooser_panel::add_dashpay_subscreen_chooser_panel;
 use crate::ui::components::identity_selector::IdentitySelector;
 use crate::ui::components::info_popup::InfoPopup;
@@ -14,9 +15,8 @@ use crate::ui::components::top_panel::add_top_panel;
 use crate::ui::components::wallet_unlock_popup::{
     WalletUnlockPopup, WalletUnlockResult, try_open_wallet_no_password, wallet_needs_unlock,
 };
-use crate::ui::components::{MessageBanner, ResultBannerExt};
 use crate::ui::dashpay::dashpay_screen::DashPaySubscreen;
-use crate::ui::identity::get_selected_wallet;
+use crate::ui::identity::wallet_for_signing_key;
 use crate::ui::theme::DashColors;
 use crate::ui::{MessageType, RootScreenType, ScreenLike};
 use egui::{RichText, ScrollArea, TextEdit, Ui};
@@ -84,9 +84,8 @@ impl QRCodeGeneratorScreen {
             new_self.selected_identity_string = preferred.identity.id().to_string(Encoding::Base58);
 
             // Get wallet for the selected identity
-            new_self.selected_wallet = get_selected_wallet(&preferred, Some(&app_context), None)
-                .or_show_error(app_context.egui_ctx())
-                .unwrap_or(None);
+            new_self.selected_wallet =
+                wallet_for_signing_key(&preferred, preferred.auto_accept_proof_key());
         }
 
         new_self
@@ -205,13 +204,10 @@ impl QRCodeGeneratorScreen {
                             if response.changed() {
                                 // Update wallet for the newly selected identity
                                 if let Some(identity) = &self.selected_identity {
-                                    self.selected_wallet = get_selected_wallet(
+                                    self.selected_wallet = wallet_for_signing_key(
                                         identity,
-                                        Some(&self.app_context),
-                                        None,
-                                    )
-                                    .or_show_error(self.app_context.egui_ctx())
-                                    .unwrap_or(None);
+                                        identity.auto_accept_proof_key(),
+                                    );
                                 } else {
                                     self.selected_wallet = None;
                                 }
diff --git a/src/ui/dashpay/qr_scanner.rs b/src/ui/dashpay/qr_scanner.rs
index 6730a1e3c..925a592af 100644
--- a/src/ui/dashpay/qr_scanner.rs
+++ b/src/ui/dashpay/qr_scanner.rs
@@ -5,6 +5,7 @@ use crate::backend_task::{BackendTask, BackendTaskSuccessResult};
 use crate::context::AppContext;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::wallet::Wallet;
+use crate::ui::components::MessageBanner;
 use crate::ui::components::dashpay_subscreen_chooser_panel::add_dashpay_subscreen_chooser_panel;
 use crate::ui::components::identity_selector::IdentitySelector;
 use crate::ui::components::left_panel::add_left_panel;
@@ -13,14 +14,12 @@ use crate::ui::components::top_panel::add_top_panel;
 use crate::ui::components::wallet_unlock_popup::{
     WalletUnlockPopup, WalletUnlockResult, try_open_wallet_no_password, wallet_needs_unlock,
 };
-use crate::ui::components::{MessageBanner, ResultBannerExt};
 use crate::ui::dashpay::dashpay_screen::DashPaySubscreen;
-use crate::ui::identity::get_selected_wallet;
+use crate::ui::identity::wallet_for_signing_key;
 use crate::ui::{MessageType, RootScreenType, ScreenLike};
+use dash_sdk::dpp::identity::KeyType;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
 use egui::{RichText, ScrollArea, TextEdit, Ui};
-use std::collections::HashSet;
 use std::sync::{Arc, RwLock};
 
 pub struct QRScannerScreen {
@@ -105,15 +104,9 @@ impl QRScannerScreen {
         if let Some(identity) = &self.selected_identity {
             if let Some(qr_data) = &self.parsed_qr_data {
                 // Get signing key
-                let signing_key = match identity.identity.get_first_public_key_matching(
-                    Purpose::AUTHENTICATION,
-                    HashSet::from([
-                        SecurityLevel::CRITICAL,
-                        SecurityLevel::HIGH,
-                        SecurityLevel::MEDIUM,
-                    ]),
-                    HashSet::from([KeyType::ECDSA_SECP256K1]),
-                    false,
+                let signing_key = match contact_request_signing_key(
+                    identity,
+                    &self.app_context.dashpay_contract(),
                 ) {
                     Some(key) => key,
                     None => {
@@ -209,13 +202,11 @@ impl QRScannerScreen {
                 let new_identity_id = self.selected_identity.as_ref().map(|i| i.identity.id());
                 if prev_identity_id != new_identity_id {
                     if let Some(identity) = &self.selected_identity {
-                        self.selected_wallet = get_selected_wallet(
+                        let key = contact_request_signing_key(
                             identity,
-                            Some(&self.app_context),
-                            None,
-                        )
-                        .or_show_error(self.app_context.egui_ctx())
-                        .unwrap_or(None);
+                            &self.app_context.dashpay_contract(),
+                        );
+                        self.selected_wallet = wallet_for_signing_key(identity, key);
                     } else {
                         self.selected_wallet = None;
                     }
@@ -354,6 +345,18 @@ impl QRScannerScreen {
     }
 }
 
+/// The ECDSA key to sign a contactRequest document with.
+fn contact_request_signing_key<'i>(
+    identity: &'i QualifiedIdentity,
+    dashpay_contract: &dash_sdk::platform::DataContract,
+) -> Option<&'i dash_sdk::platform::IdentityPublicKey> {
+    identity.document_action_signing_key(
+        dashpay_contract,
+        "contactRequest",
+        Some(&[KeyType::ECDSA_SECP256K1]),
+    )
+}
+
 impl ScreenLike for QRScannerScreen {
     fn ui(&mut self, ui: &mut egui::Ui) -> AppAction {
         let ctx = ui.ctx().clone();
@@ -404,3 +407,24 @@ impl ScreenLike for QRScannerScreen {
         self.display_task_result(result);
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::context::test_support::{auth_key, dashpay_contract, identity_holding};
+    use dash_sdk::dpp::identity::SecurityLevel;
+    use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+
+    /// Regression: the contact-request key choice from a scanned code admitted
+    /// MEDIUM keys, which the document type refuses, and preferred unlimited
+    /// keys, so an unlimited MEDIUM key beat a held limited HIGH key and the
+    /// request was refused.
+    #[test]
+    fn a_scanned_contact_request_is_signed_with_a_key_its_document_type_accepts() {
+        let limited_high = auth_key(1, SecurityLevel::HIGH).with_limits(Some(5_000), None);
+        let identity = identity_holding(&[limited_high, auth_key(2, SecurityLevel::MEDIUM)]);
+
+        let chosen = contact_request_signing_key(&identity, &dashpay_contract());
+        assert_eq!(chosen.map(|key| key.id()), Some(1));
+    }
+}
diff --git a/src/ui/helpers.rs b/src/ui/helpers.rs
index 79d32ea63..89229d925 100644
--- a/src/ui/helpers.rs
+++ b/src/ui/helpers.rs
@@ -1,3 +1,5 @@
+use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyCaveat, SigningScope, key_caveats, now_ms};
 use crate::ui::theme::ResponseExt;
 use std::sync::Arc;
 
@@ -149,16 +151,7 @@ pub fn compute_allowed_security_levels(
 ) -> Vec<SecurityLevel> {
     match (transaction_type, document_type) {
         (TransactionType::DocumentAction, Some(doc_type)) => {
-            let required_level = doc_type.security_level_requirement();
-            let allowed_range = SecurityLevel::CRITICAL as u8..=required_level as u8;
-            [
-                SecurityLevel::CRITICAL,
-                SecurityLevel::HIGH,
-                SecurityLevel::MEDIUM,
-            ]
-            .into_iter()
-            .filter(|level| allowed_range.contains(&(*level as u8)))
-            .collect()
+            crate::model::identity_key_usability::document_security_levels(doc_type.as_ref())
         }
         _ => transaction_type.allowed_security_levels(),
     }
@@ -485,7 +478,9 @@ fn render_key_combo(
     allowed_purposes: &[Purpose],
     allowed_security_levels: &[SecurityLevel],
     is_dev_mode: bool,
+    scope: SigningScope<'_>,
 ) {
+    let now = now_ms();
     ComboBox::from_id_salt(combo_id)
         .width(width)
         .selected_text(
@@ -500,7 +495,9 @@ fn render_key_combo(
                 return;
             };
             for key_ref in qi.private_keys.identity_public_keys() {
-                let key = &key_ref.1.identity_public_key;
+                // The stored copy may predate a limits raise: judge, label and
+                // hand on the key as the identity holds it now.
+                let key = qi.live_public_key(&key_ref.1.identity_public_key);
 
                 // Platform rejects signing with a disabled key, so never offer one
                 // — not even in dev mode, where the override only relaxes purpose and
@@ -524,6 +521,17 @@ fn render_key_combo(
                 } else {
                     format_key_label(key)
                 };
+                let caveats = key_caveats(key, scope, now);
+                if !offered_for_manual_choice(&caveats) {
+                    continue;
+                }
+                // A key Platform may refuse stays selectable (the user may know
+                // better, e.g. a contract group that covers this contract), but
+                // its entry says why it may not work.
+                let label = match caveats.first() {
+                    Some(caveat) => format!("{label} ({tag})", tag = key_caveat_tag(caveat)),
+                    None => label,
+                };
 
                 if kui
                     .selectable_label(selected_key.as_ref() == Some(key), label)
@@ -533,6 +541,75 @@ fn render_key_combo(
                 }
             }
         });
+
+    if let (Some(qi), Some(selected)) = (identity, selected_key.as_ref()) {
+        let live = qi.live_public_key(selected);
+        if live != selected {
+            *selected_key = Some(live.clone());
+        }
+    }
+    if let Some(key) = selected_key.as_ref() {
+        render_key_caveats(ui, &key_caveats(key, scope, now));
+    }
+}
+
+/// Whether a key with `caveats` is offered for the user to pick: every key
+/// but one whose bounds tie it to another contract or document type, which
+/// Platform is certain to refuse here. Expired and limited keys stay on
+/// offer with their warning; the user may know better.
+fn offered_for_manual_choice(caveats: &[KeyCaveat]) -> bool {
+    !caveats
+        .iter()
+        .any(|caveat| matches!(caveat, KeyCaveat::OutOfBounds))
+}
+
+/// A one- or two-word tag for a key list entry, naming the most severe caveat.
+fn key_caveat_tag(caveat: &KeyCaveat) -> &'static str {
+    match caveat {
+        KeyCaveat::Disabled => "disabled",
+        KeyCaveat::Expired { .. } => "expired",
+        KeyCaveat::OutOfBounds => "other contract",
+        KeyCaveat::ContractGroupBound { .. } => "contract group",
+        KeyCaveat::Budgeted { .. } => "spending limit",
+        KeyCaveat::Expiring { .. } => "expires",
+    }
+}
+
+/// The user-facing explanation of a key caveat: what it means and what to do.
+pub(crate) fn key_caveat_message(caveat: &KeyCaveat) -> String {
+    match caveat {
+        KeyCaveat::Disabled => "This key is disabled, so the network will reject anything signed with it. Choose another key.".to_string(),
+        KeyCaveat::Expired { expired_at } => format!(
+            "This key expired on {date}, so the network will reject anything signed with it. Choose another key.",
+            date = crate::model::datetime::local_date_time_from_unix_millis(*expired_at)
+        ),
+        KeyCaveat::OutOfBounds => "This key can only sign for a different contract or document type, so the network will reject this action. Choose another key.".to_string(),
+        KeyCaveat::ContractGroupBound { group_id } => format!(
+            "This key can only sign for the contracts in contract group {group_id}. If this contract is not in that group, the network rejects the action. Choose another key if you are not sure.",
+            group_id = group_id.to_string(Encoding::Base58)
+        ),
+        KeyCaveat::Budgeted { total_budget } => format!(
+            "This key has a lifetime spending limit of {amount}. Once the limit is used up, the network rejects actions signed with it. Its details page shows how much is left.",
+            amount = format_credits_as_dash(*total_budget)
+        ),
+        KeyCaveat::Expiring { expires_at } => format!(
+            "This key stops working on {date}.",
+            date = crate::model::datetime::local_date_time_from_unix_millis(*expires_at)
+        ),
+    }
+}
+
+/// Renders the caveats of the selected signing key under a key chooser.
+fn render_key_caveats(ui: &mut Ui, caveats: &[KeyCaveat]) {
+    let dark_mode = ui.style().visuals.dark_mode;
+    for caveat in caveats {
+        let color = if caveat.blocks_signing() {
+            DashColors::error_color(dark_mode)
+        } else {
+            DashColors::warning_color(dark_mode)
+        };
+        ui.label(egui::RichText::new(key_caveat_message(caveat)).color(color));
+    }
 }
 
 /// Renders a centered title + description block (used above success-screen buttons).
@@ -560,12 +637,15 @@ fn render_info_section(ui: &mut Ui, title: &str, description: &str) {
     );
 }
 
+/// `scope` is what the chosen key will sign, for the contract-bounds warning
+/// under the chooser.
 pub fn add_key_chooser(
     ui: &mut Ui,
     app_context: &Arc<AppContext>,
     identity: &QualifiedIdentity,
     selected_key: &mut Option<IdentityPublicKey>,
     transaction_type: TransactionType,
+    scope: SigningScope<'_>,
 ) -> AppAction {
     add_key_chooser_with_doc_type(
         ui,
@@ -574,6 +654,7 @@ pub fn add_key_chooser(
         selected_key,
         transaction_type,
         None,
+        scope,
     )
 }
 
@@ -586,6 +667,7 @@ pub fn add_key_chooser_with_doc_type(
     selected_key: &mut Option<IdentityPublicKey>,
     transaction_type: TransactionType,
     document_type: Option<&DocumentType>,
+    scope: SigningScope<'_>,
 ) -> AppAction {
     let is_dev_mode = app_context.user_role().at_least(UserRole::Developer);
     let mut action = AppAction::None;
@@ -619,6 +701,7 @@ pub fn add_key_chooser_with_doc_type(
                 &allowed_purposes,
                 &allowed_security_levels,
                 is_dev_mode,
+                scope,
             );
         });
     }
@@ -634,6 +717,7 @@ pub fn add_identity_key_chooser<'a, T>(
     selected_identity: &mut Option<QualifiedIdentity>,
     selected_key: &mut Option<IdentityPublicKey>,
     transaction_type: TransactionType,
+    scope: SigningScope<'_>,
 ) -> AppAction
 where
     T: Iterator<Item = &'a QualifiedIdentity>,
@@ -646,10 +730,12 @@ where
         selected_key,
         transaction_type,
         None,
+        scope,
     )
 }
 
 /// Identity key chooser that filters keys based on transaction type, document type and dev mode
+#[allow(clippy::too_many_arguments)]
 pub fn add_identity_key_chooser_with_doc_type<'a, T>(
     ui: &mut Ui,
     app_context: &Arc<AppContext>,
@@ -658,6 +744,7 @@ pub fn add_identity_key_chooser_with_doc_type<'a, T>(
     selected_key: &mut Option<IdentityPublicKey>,
     transaction_type: TransactionType,
     document_type: Option<&DocumentType>,
+    scope: SigningScope<'_>,
 ) -> AppAction
 where
     T: Iterator<Item = &'a QualifiedIdentity>,
@@ -731,6 +818,7 @@ where
                         &allowed_purposes,
                         &allowed_security_levels,
                         is_dev_mode,
+                        scope,
                     );
                 }
             });
@@ -1106,6 +1194,33 @@ pub fn show_group_token_success_screen_with_fee(
 
 #[cfg(test)]
 mod tests {
+    /// Regression: a key bound to another contract or document type was
+    /// offered, though its bounds prove Platform refuses it here. Expired and
+    /// limited keys stay on offer (IDN-024), with their warning.
+    #[test]
+    fn the_manual_chooser_leaves_out_keys_bound_elsewhere() {
+        use super::{KeyCaveat, offered_for_manual_choice};
+        assert!(!offered_for_manual_choice(&[KeyCaveat::OutOfBounds]));
+        assert!(!offered_for_manual_choice(&[
+            KeyCaveat::Expired { expired_at: 1 },
+            KeyCaveat::OutOfBounds,
+        ]));
+        for kept in [
+            KeyCaveat::Expired { expired_at: 1 },
+            KeyCaveat::Budgeted { total_budget: 5 },
+            KeyCaveat::Expiring { expires_at: 9 },
+            KeyCaveat::ContractGroupBound {
+                group_id: dash_sdk::platform::Identifier::new([3; 32]),
+            },
+        ] {
+            assert!(
+                offered_for_manual_choice(std::slice::from_ref(&kept)),
+                "{kept:?}"
+            );
+        }
+        assert!(offered_for_manual_choice(&[]));
+    }
+
     use super::*;
 
     fn outside_press() -> egui::RawInput {
diff --git a/src/ui/identity/add_new_identity_screen/mod.rs b/src/ui/identity/add_new_identity_screen/mod.rs
index 4d2e6cecb..2b6c6f194 100644
--- a/src/ui/identity/add_new_identity_screen/mod.rs
+++ b/src/ui/identity/add_new_identity_screen/mod.rs
@@ -221,7 +221,7 @@ impl AddNewIdentityScreen {
     /// Default number of keys (master + additional) the chooser warms and reads
     /// from the auth-pubkey cache.
     fn default_key_count(&self) -> u32 {
-        let dashpay_contract_id = self.app_context.dashpay_contract.id();
+        let dashpay_contract_id = self.app_context.dashpay_contract().id();
         // master (index 0) + the default additional keys.
         default_identity_key_specs(dashpay_contract_id).len() as u32 + 1
     }
@@ -255,7 +255,7 @@ impl AddNewIdentityScreen {
 
         let network = self.app_context.network;
         let identity_index = self.identity_id_number;
-        let dashpay_contract_id = self.app_context.dashpay_contract.id();
+        let dashpay_contract_id = self.app_context.dashpay_contract().id();
         let default_keys = default_identity_key_specs(dashpay_contract_id);
 
         let Ok(backend) = self.app_context.wallet_backend() else {
diff --git a/src/ui/identity/funding_common.rs b/src/ui/identity/funding_common.rs
index 30250ff74..946af984a 100644
--- a/src/ui/identity/funding_common.rs
+++ b/src/ui/identity/funding_common.rs
@@ -373,6 +373,7 @@ pub fn asset_lock_status_label(status: &AssetLockStatus) -> &'static str {
         AssetLockStatus::InstantSendLocked => "Confirmed and ready to use.",
         AssetLockStatus::ChainLocked => "Confirmed and ready to use.",
         AssetLockStatus::Consumed => "Already used to fund an identity.",
+        AssetLockStatus::DrainCompleted => "Already used to transfer the wallet funds.",
         // Core-side finality is proven, but whether Platform already spent this
         // lock is unknown, so it must claim neither "ready" nor "already used".
         AssetLockStatus::RecoveredFromChain => {
@@ -679,16 +680,16 @@ mod tests {
     }
 
     use dash_sdk::dpp::dashcore::PublicKey;
-    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
+    use dash_sdk::dpp::secp256k1::SecretKey;
 
     /// A distinct testnet p2pkh address keyed off `n` (derived from a valid
     /// secret key so the pubkey is a real curve point).
     fn addr(n: u8) -> Address {
         let mut sk_bytes = [1u8; 32];
         sk_bytes[31] = n.max(1);
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&sk_bytes).expect("valid secret key");
-        let pubkey = PublicKey::new(sk.public_key(&secp));
+
+        let sk = SecretKey::from_secret_bytes(sk_bytes).expect("valid secret key");
+        let pubkey = PublicKey::new(sk.public_key());
         Address::p2pkh(&pubkey, Network::Testnet)
     }
 
diff --git a/src/ui/identity/keys/add_key_screen.rs b/src/ui/identity/keys/add_key_screen.rs
index 18819f00b..e220732b5 100644
--- a/src/ui/identity/keys/add_key_screen.rs
+++ b/src/ui/identity/keys/add_key_screen.rs
@@ -3,10 +3,20 @@ use crate::backend_task::error::TaskError;
 use crate::backend_task::identity::IdentityTask;
 use crate::backend_task::{BackendTask, BackendTaskContext, BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
+use crate::model::amount::Amount;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_limits::{
+    KeyLimitsError, contract_bounds_allowed, limits_allowed, new_key_limits,
+    parse_key_validity_days,
+};
+use crate::model::identity_key_usability::now_ms;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::qualified_identity::qualified_identity_public_key::QualifiedIdentityPublicKey;
 use crate::model::wallet::Wallet;
+use crate::ui::components::amount_input::AmountInput;
+use crate::ui::components::component_trait::{Component, ComponentResponse};
 use crate::ui::components::left_panel::add_left_panel;
 use crate::ui::components::password_input::PasswordInput;
 use crate::ui::components::styled::{StyledButton, island_central_panel};
@@ -22,6 +32,8 @@ use crate::ui::theme::{DashColors, ResponseExt};
 use crate::ui::{MessageType, ScreenLike};
 use bip39::rand::{SeedableRng, rngs::StdRng};
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+use dash_sdk::dpp::fee::Credits;
+use dash_sdk::dpp::identity::IdentityPublicKey;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::hash::IdentityPublicKeyHashMethodsV0;
 use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
@@ -31,7 +43,6 @@ use dash_sdk::dpp::platform_value::string_encoding::Encoding;
 use dash_sdk::dpp::prelude::Identifier;
 use eframe::egui::{self, Frame, Margin};
 use egui::{Color32, RichText, Ui};
-use std::collections::HashSet;
 use std::sync::{Arc, RwLock};
 
 #[derive(PartialEq)]
@@ -130,17 +141,25 @@ pub struct AddKeyScreen {
     // Fee result from completed operation
     completed_fee_result: Option<FeeResult>,
     refresh_banner: Option<BannerHandle>,
+    /// Give the key a spending limit (protocol version 14 key limits).
+    enable_budget: bool,
+    budget_input: Option<AmountInput>,
+    budget: Option<Amount>,
+    /// Give the key an expiry, this many days from now.
+    enable_expiry: bool,
+    validity_days_input: String,
+    /// Why the number of days is not valid, shown under the field.
+    validity_days_error: Option<String>,
 }
 
 impl AddKeyScreen {
     pub fn new(identity: QualifiedIdentity, app_context: &Arc<AppContext>) -> Self {
         let identity_clone = identity.clone();
-        let selected_key = identity_clone.identity.get_first_public_key_matching(
+        let selected_key = identity_clone.signing_key_now(KeyRequirements::new(
             Purpose::AUTHENTICATION,
-            HashSet::from([SecurityLevel::MASTER]),
-            KeyType::all_key_types().into(),
-            false,
-        );
+            &[SecurityLevel::MASTER],
+            SigningScope::NonBatch,
+        ));
         let selected_wallet = get_selected_wallet(&identity, None, selected_key)
             .or_show_error(app_context.egui_ctx())
             .unwrap_or(None);
@@ -171,6 +190,12 @@ impl AddKeyScreen {
             enable_contract_bounds: false,
             completed_fee_result: None,
             refresh_banner: None,
+            enable_budget: false,
+            budget_input: None,
+            budget: None,
+            enable_expiry: false,
+            validity_days_input: String::new(),
+            validity_days_error: None,
         }
     }
 
@@ -181,19 +206,18 @@ impl AddKeyScreen {
         app_context: &Arc<AppContext>,
     ) -> Self {
         let identity_clone = identity.clone();
-        let selected_key = identity_clone.identity.get_first_public_key_matching(
+        let selected_key = identity_clone.signing_key_now(KeyRequirements::new(
             Purpose::AUTHENTICATION,
-            HashSet::from([SecurityLevel::MASTER]),
-            KeyType::all_key_types().into(),
-            false,
-        );
+            &[SecurityLevel::MASTER],
+            SigningScope::NonBatch,
+        ));
         let selected_wallet = get_selected_wallet(&identity, None, selected_key)
             .or_show_error(app_context.egui_ctx())
             .unwrap_or(None);
         let derivation = DerivedKeyChooser::new(app_context, &identity, KeyType::ECDSA_SECP256K1);
 
         let dashpay_contract_id = app_context
-            .dashpay_contract
+            .dashpay_contract()
             .id()
             .to_string(Encoding::Base58);
 
@@ -222,6 +246,12 @@ impl AddKeyScreen {
             enable_contract_bounds: true,
             completed_fee_result: None,
             refresh_banner: None,
+            enable_budget: false,
+            budget_input: None,
+            budget: None,
+            enable_expiry: false,
+            validity_days_input: String::new(),
+            validity_days_error: None,
         }
     }
 
@@ -232,19 +262,18 @@ impl AddKeyScreen {
         app_context: &Arc<AppContext>,
     ) -> Self {
         let identity_clone = identity.clone();
-        let selected_key = identity_clone.identity.get_first_public_key_matching(
+        let selected_key = identity_clone.signing_key_now(KeyRequirements::new(
             Purpose::AUTHENTICATION,
-            HashSet::from([SecurityLevel::MASTER]),
-            KeyType::all_key_types().into(),
-            false,
-        );
+            &[SecurityLevel::MASTER],
+            SigningScope::NonBatch,
+        ));
         let selected_wallet = get_selected_wallet(&identity, None, selected_key)
             .or_show_error(app_context.egui_ctx())
             .unwrap_or(None);
         let derivation = DerivedKeyChooser::new(app_context, &identity, KeyType::ECDSA_SECP256K1);
 
         let dashpay_contract_id = app_context
-            .dashpay_contract
+            .dashpay_contract()
             .id()
             .to_string(Encoding::Base58);
 
@@ -273,6 +302,12 @@ impl AddKeyScreen {
             enable_contract_bounds: true,
             completed_fee_result: None,
             refresh_banner: None,
+            enable_budget: false,
+            budget_input: None,
+            budget: None,
+            enable_expiry: false,
+            validity_days_input: String::new(),
+            validity_days_error: None,
         }
     }
 
@@ -306,6 +341,29 @@ impl AddKeyScreen {
             None
         };
 
+        // A mistyped number of days is a note under its field, not an error
+        // for the whole screen.
+        if self.limits_offered()
+            && self.enable_expiry
+            && let Err(error) = parse_key_validity_days(&self.validity_days_input)
+        {
+            self.validity_days_error = Some(error.to_string());
+            return app_action;
+        }
+
+        let limits = match self.requested_limits() {
+            Ok(limits) => limits,
+            Err(error) => {
+                self.add_key_status = AddKeyStatus::Error;
+                MessageBanner::set_global(
+                    self.app_context.egui_ctx(),
+                    error.to_string(),
+                    MessageType::Error,
+                );
+                return app_action;
+            }
+        };
+
         if self.derivation.derived() {
             let Some(index) = self.derivation.submit() else {
                 return app_action;
@@ -324,7 +382,8 @@ impl AddKeyScreen {
                 IdentityTask::AddDerivedKeyToIdentity {
                     identity: self.identity.clone(),
                     key: QualifiedIdentityPublicKey::from(
-                        dash_sdk::platform::IdentityPublicKey::from(new_key),
+                        dash_sdk::platform::IdentityPublicKey::from(new_key)
+                            .with_limits(limits.0, limits.1),
                     ),
                     index,
                     expected_key_id: self.derivation.expected_key_id(),
@@ -377,8 +436,13 @@ impl AddKeyScreen {
                     } else if validation_result
                         .expect("invariant: Err handled in the preceding branch")
                     {
+                        let identity_public_key = match limits {
+                            (None, None) => IdentityPublicKey::from(new_key),
+                            (total_budget, expires_at) => IdentityPublicKey::from(new_key)
+                                .with_limits(total_budget, expires_at),
+                        };
                         let new_qualified_key = QualifiedIdentityPublicKey {
-                            identity_public_key: new_key.into(),
+                            identity_public_key,
                             in_wallet_at_derivation_path: None,
                         };
                         self.submitted_private_key
@@ -420,6 +484,104 @@ impl AddKeyScreen {
         app_action
     }
 
+    fn limits_offered(&self) -> bool {
+        limits_allowed(self.purpose, self.security_level)
+    }
+
+    fn requested_limits(&self) -> Result<(Option<Credits>, Option<u64>), KeyLimitsError> {
+        if !self.limits_offered() {
+            return Ok((None, None));
+        }
+        let total_budget = if self.enable_budget {
+            Some(self.budget.as_ref().map(Amount::value).unwrap_or(0))
+        } else {
+            None
+        };
+        let validity_days = if self.enable_expiry {
+            Some(parse_key_validity_days(&self.validity_days_input)?)
+        } else {
+            None
+        };
+        new_key_limits(
+            self.purpose,
+            self.security_level,
+            total_budget,
+            validity_days,
+            now_ms(),
+        )
+    }
+
+    fn render_limits_rows(&mut self, ui: &mut Ui) {
+        if !self.limits_offered() {
+            return;
+        }
+        let available = FeatureGate::IdentityKeyLimits.is_available(&self.app_context);
+        let unavailable_hint =
+            "Key limits need a network that supports them. Connect to such a network to use them.";
+
+        ui.label("Spending Limit:");
+        ui.horizontal(|ui| {
+            let checkbox = ui.add_enabled(
+                available,
+                egui::Checkbox::new(&mut self.enable_budget, ""),
+            );
+            if available {
+                checkbox.on_hover_text(
+                    "The most this key can ever spend in total. Once used up, the key can no longer sign.",
+                );
+            } else {
+                checkbox.on_disabled_hover_text(unavailable_hint);
+            }
+            if available && self.enable_budget {
+                let input = self.budget_input.get_or_insert_with(|| {
+                    AmountInput::new(Amount::new_dash(0.0)).with_hint_text("0.1")
+                });
+                let response = input.show(ui);
+                response.inner.update(&mut self.budget);
+            }
+        });
+        ui.end_row();
+
+        ui.label("Expires After (days):");
+        ui.horizontal(|ui| {
+            let checkbox =
+                ui.add_enabled(available, egui::Checkbox::new(&mut self.enable_expiry, ""));
+            if available {
+                checkbox.on_hover_text("After this many days the key can no longer sign.");
+            } else {
+                checkbox.on_disabled_hover_text(unavailable_hint);
+            }
+            if available && self.enable_expiry {
+                let response = ui.add(
+                    egui::TextEdit::singleline(&mut self.validity_days_input)
+                        .hint_text("30")
+                        .desired_width(80.0),
+                );
+                if response.changed() {
+                    self.validity_days_error = None;
+                }
+                if response.lost_focus() {
+                    self.validity_days_error = parse_key_validity_days(&self.validity_days_input)
+                        .err()
+                        .map(|error| error.to_string());
+                }
+            }
+        });
+        ui.end_row();
+        if let Some(error) = &self.validity_days_error
+            && self.enable_expiry
+        {
+            ui.label("");
+            ui.colored_label(DashColors::VALIDATION_WARNING, error);
+            ui.end_row();
+        }
+
+        if !available {
+            self.enable_budget = false;
+            self.enable_expiry = false;
+        }
+    }
+
     fn show_key_source(&mut self, ui: &mut Ui) {
         ui.label("Key source:");
         let possible = self.derivation.is_possible();
@@ -542,19 +704,14 @@ impl AddKeyScreen {
         }
     }
 
-    /// Dispatches `task` as this screen's add, bound to a fresh dispatch
-    /// context that alone settles it.
     fn dispatch_add(&mut self, task: BackendTask) -> AppAction {
         self.add_dispatch.dispatch(task)
     }
 
-    /// Whether `context` is this screen's in-flight add; takes it, so each
-    /// dispatch settles the add once.
     fn take_own_add(&mut self, context: &BackendTaskContext) -> bool {
         self.add_dispatch.settle(context).is_some()
     }
 
-    /// Why the Add Key button is disabled, or `None` when it is enabled.
     fn add_blocked_reason(&self) -> Option<&'static str> {
         if self.add_key_status == AddKeyStatus::WaitingForResult {
             return Some("The key is being added. Wait for it to finish.");
@@ -586,14 +743,11 @@ impl AddKeyScreen {
         }
     }
 
-    /// Reload the identity from local storage and recompute the chooser.
     fn reload_identity(&mut self) {
         self.load_identity();
         self.derivation.reload(&self.app_context, &self.identity);
     }
 
-    /// Reload the identity from local storage; keeps the current copy when it
-    /// is not stored here.
     fn load_identity(&mut self) {
         match self
             .app_context
@@ -916,6 +1070,8 @@ impl ScreenLike for AddKeyScreen {
                 }
             }
 
+            let bound_authentication_supported =
+                FeatureGate::ContractBoundAuthenticationKeys.is_available(&self.app_context);
             egui::Grid::new("add_key_grid")
                 .num_columns(2)
                 .spacing([10.0, 10.0])
@@ -928,7 +1084,15 @@ impl ScreenLike for AddKeyScreen {
                         .selected_text(format!("{purpose:?}", purpose = self.purpose))
                         .show_ui(ui, |ui| {
                             if self.enable_contract_bounds {
-                                // When contract bounds are enabled, only allow ENCRYPTION and DECRYPTION
+                                // A bound key is an ENCRYPTION or DECRYPTION key, or,
+                                // where the network admits it, an AUTHENTICATION key.
+                                if bound_authentication_supported {
+                                    ui.selectable_value(
+                                        &mut self.purpose,
+                                        Purpose::AUTHENTICATION,
+                                        "AUTHENTICATION",
+                                    );
+                                }
                                 ui.selectable_value(
                                     &mut self.purpose,
                                     Purpose::ENCRYPTION,
@@ -998,8 +1162,10 @@ impl ScreenLike for AddKeyScreen {
                                 security_level = self.security_level
                             ))
                             .show_ui(ui, |ui| {
-                                if self.enable_contract_bounds {
-                                    // When contract bounds are enabled, only allow MEDIUM
+                                if self.enable_contract_bounds
+                                    && self.purpose != Purpose::AUTHENTICATION
+                                {
+                                    // A bound ENCRYPTION or DECRYPTION key is MEDIUM
                                     ui.selectable_value(
                                         &mut self.security_level,
                                         SecurityLevel::MEDIUM,
@@ -1092,6 +1258,7 @@ impl ScreenLike for AddKeyScreen {
                     }
                     ui.end_row();
 
+                    self.render_limits_rows(ui);
                     self.show_key_source(ui);
 
                     // Contract Bounds Toggle
@@ -1099,8 +1266,16 @@ impl ScreenLike for AddKeyScreen {
                     let prev_contract_bounds = self.enable_contract_bounds;
                     ui.checkbox(&mut self.enable_contract_bounds, "");
 
-                    // If contract bounds was just enabled, set required values
-                    if self.enable_contract_bounds && !prev_contract_bounds {
+                    // If contract bounds was just enabled, keep the key only if it
+                    // may be bound; otherwise switch to a bound ENCRYPTION key.
+                    if self.enable_contract_bounds
+                        && !prev_contract_bounds
+                        && !contract_bounds_allowed(
+                            self.purpose,
+                            self.security_level,
+                            bound_authentication_supported,
+                        )
+                    {
                         self.purpose = Purpose::ENCRYPTION;
                         self.security_level = SecurityLevel::MEDIUM;
                     }
@@ -1382,7 +1557,7 @@ mod derived_key_tests {
                 contract_bounds: None,
                 read_only: false,
                 disabled_at: None,
-                data: dash_sdk::dpp::dashcore::secp256k1::PublicKey::from_slice(&[
+                data: dash_sdk::dpp::secp256k1::PublicKey::from_slice(&[
                     0x02, 0x79, 0xBE, 0x66, 0x7E, 0xF9, 0xDC, 0xBB, 0xAC, 0x55, 0xA0, 0x62, 0x95,
                     0xCE, 0x87, 0x0B, 0x07, 0x02, 0x9B, 0xFC, 0xDB, 0x2D, 0xCE, 0x28, 0xD9, 0x59,
                     0xF2, 0x81, 0x5B, 0x16, 0xF8, 0x17, 0x98,
@@ -1674,9 +1849,9 @@ mod derived_key_tests {
     /// follow the fresh record.
     #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
     async fn derived_key_id_change_refreshes_and_reselects_the_matching_slot() {
-        use dash_sdk::dpp::dashcore::secp256k1::{PublicKey, Secp256k1, SecretKey};
         use dash_sdk::dpp::identity::accessors::IdentitySettersV0;
         use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeySettersV0;
+        use dash_sdk::dpp::secp256k1::{PublicKey, SecretKey};
 
         let (staged, mut identity) = staged_screen_parts(true).await;
         identity.identity.set_id(staged.id);
@@ -1707,9 +1882,9 @@ mod derived_key_tests {
         let mut refreshed = identity.clone();
         let mut foreign = identity.identity.public_keys()[&0].clone();
         foreign.set_id(1);
-        let secret = SecretKey::from_slice(&[9; 32]).unwrap();
+        let secret = SecretKey::from_secret_bytes([9; 32]).unwrap();
         foreign.set_data(
-            PublicKey::from_secret_key(&Secp256k1::new(), &secret)
+            PublicKey::from_secret_key(&secret)
                 .serialize()
                 .to_vec()
                 .into(),
@@ -1990,6 +2165,56 @@ mod derived_key_tests {
 mod tests {
     use super::*;
 
+    /// Regression: a mistyped number of days surfaced as a global error banner
+    /// that put the whole screen into its error state, instead of a note
+    /// under the field like the app's other form fields.
+    #[test]
+    fn a_mistyped_expiry_is_reported_under_its_field() {
+        use crate::model::qualified_identity::{IdentityStatus, IdentityType};
+        use dash_sdk::dpp::identity::Identity;
+        use dash_sdk::dpp::version::PlatformVersion;
+
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        context.set_platform_protocol_version(14);
+        let identity = QualifiedIdentity {
+            identity: Identity::create_basic_identity(
+                dash_sdk::platform::Identifier::new([0xA1; 32]),
+                PlatformVersion::latest(),
+            )
+            .expect("basic identity"),
+            associated_voter_identity: None,
+            associated_operator_identity: None,
+            associated_owner_key_id: None,
+            identity_type: IdentityType::User,
+            alias: None,
+            private_keys: Default::default(),
+            dpns_names: vec![],
+            associated_wallets: Default::default(),
+            secret_access: None,
+            wallet_index: None,
+            top_ups: Default::default(),
+            status: IdentityStatus::Active,
+            network: dash_sdk::dpp::dashcore::Network::Testnet,
+        };
+        let mut screen = AddKeyScreen::new(identity, &context);
+        screen.purpose = Purpose::AUTHENTICATION;
+        screen.security_level = SecurityLevel::HIGH;
+        screen.enable_expiry = true;
+        screen.validity_days_input = "thirty".to_string();
+
+        let action = screen.validate_and_add_key();
+        assert!(matches!(action, AppAction::None));
+        assert!(
+            !matches!(screen.add_key_status, AddKeyStatus::Error),
+            "a typo must not put the screen into its error state"
+        );
+        assert_eq!(
+            screen.validity_days_error.as_deref(),
+            Some(KeyLimitsError::DaysNotANumber.to_string().as_str())
+        );
+    }
+
     /// SEC-104: both "on the network, not saved here" outcomes switch the
     /// screen to keeping the private key on hand; the derived-key ones switch
     /// it to the no-copy state; ordinary failures do neither.
diff --git a/src/ui/identity/keys/key_info_screen.rs b/src/ui/identity/keys/key_info_screen.rs
index 87c66fb2a..5e708a388 100644
--- a/src/ui/identity/keys/key_info_screen.rs
+++ b/src/ui/identity/keys/key_info_screen.rs
@@ -4,8 +4,17 @@ use crate::backend_task::identity::IdentityTask;
 use crate::backend_task::wallet::WalletTask;
 use crate::backend_task::{BackendTask, BackendTaskContext, BackendTaskSuccessResult};
 use crate::context::AppContext;
+use crate::context::feature_gate::FeatureGate;
+use crate::model::amount::Amount;
+use crate::model::datetime::local_date_time_from_unix_millis;
+use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_limits::{
+    KeyLimitsError, KeyLimitsRaise, key_limits_update_signer, parse_key_validity_days,
+};
 use crate::model::identity_key_protection::validate_protection_password;
+use crate::model::identity_key_usability::now_ms;
 use crate::model::legacy_recovery::RecoveryItem;
+use crate::model::qualified_identity::encrypted_key_storage::same_key;
 use crate::model::qualified_identity::encrypted_key_storage::{
     PrivateKeyData, WalletDerivationPath,
 };
@@ -15,10 +24,12 @@ use crate::model::secret::Secret;
 use crate::model::wallet::Wallet;
 use crate::model::wallet::passphrase::PassphraseError;
 use crate::ui::components::MessageBanner;
-use crate::ui::components::component_trait::Component;
+use crate::ui::components::amount_input::AmountInput;
+use crate::ui::components::component_trait::{Component, ComponentResponse};
 use crate::ui::components::info_popup::InfoPopup;
 use crate::ui::components::left_panel::add_left_panel;
 use crate::ui::components::legacy_recovery_section::host_offer;
+use crate::ui::components::message_banner::{BannerHandle, OptionBannerExt};
 use crate::ui::components::password_input::PasswordInput;
 use crate::ui::components::styled::{ConfirmationDialog, ConfirmationStatus, island_central_panel};
 use crate::ui::components::top_panel::add_top_panel;
@@ -34,17 +45,19 @@ use crate::wallet_backend::secret_seam::SecretScheme;
 use dash_sdk::dashcore_rpc::dashcore::PrivateKey as RPCPrivateKey;
 use dash_sdk::dpp::dashcore::address::Payload;
 use dash_sdk::dpp::dashcore::hashes::Hash;
-use dash_sdk::dpp::dashcore::secp256k1::{Message, Secp256k1, SecretKey};
-use dash_sdk::dpp::dashcore::sign_message::{MessageSignature, signed_msg_hash};
 use dash_sdk::dpp::dashcore::{Address, PrivateKey, PubkeyHash, ScriptHash};
-use dash_sdk::dpp::identity::KeyType;
+use dash_sdk::dpp::fee::Credits;
 use dash_sdk::dpp::identity::KeyType::BIP13_SCRIPT_HASH;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::hash::IdentityPublicKeyHashMethodsV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
 use dash_sdk::dpp::identity::identity_public_key::contract_bounds::ContractBounds;
+use dash_sdk::dpp::identity::signer::Signer;
+use dash_sdk::dpp::identity::{KeyID, KeyType};
 use dash_sdk::dpp::key_wallet::bip32::DerivationPath;
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
+use dash_sdk::dpp::secp256k1::SecretKey;
 use dash_sdk::platform::IdentityPublicKey;
 use eframe::egui::{self};
 use egui::{Color32, RichText, ScrollArea};
@@ -117,9 +130,43 @@ pub struct KeyInfoScreen {
     pending_recovery_restore: Option<Vec<RecoveryItem>>,
     /// The screen this key was opened from, for the breadcrumb back to it.
     parent: Option<&'static str>,
+    /// What is left of this key's budget, for a key that has one.
+    remaining_budget: RemainingBudget,
+    /// The amount to add to the key's spending limit (Raise Limits form).
+    raise_budget_input: Option<AmountInput>,
+    raise_budget: Option<Amount>,
+    /// The number of days to extend the key's expiry by (Raise Limits form).
+    raise_days_input: String,
+    /// Why the Raise Limits form cannot be sent, shown under it.
+    raise_form_error: Option<String>,
+    /// A limits raise is in flight; the form is disabled until it settles.
+    raise_in_flight: bool,
+    /// The progress banner of the raise in flight, cleared when it settles.
+    raise_banner: Option<BannerHandle>,
+    /// The confirmation of a quoted raise, open while the user decides.
+    raise_confirmation: Option<ConfirmationDialog>,
+    /// The raise the open confirmation shows; the one dispatched on confirm.
+    quoted_raise: Option<KeyLimitsRaise>,
+    /// A confirmed raise waiting for dispatch.
+    pending_raise: Option<KeyLimitsRaise>,
     masternode_origin: bool,
 }
 
+/// What the screen knows about the remaining budget of a budgeted key. Only
+/// Platform tracks it: the key carries the lifetime total, never what is left.
+#[derive(Clone, Copy, Debug, Default, PartialEq, Eq)]
+enum RemainingBudget {
+    /// Not asked for yet (or asked again after a refresh).
+    #[default]
+    NotRequested,
+    /// The read is in flight.
+    Loading,
+    /// Platform's answer: `None` when it tracks no budget for the key.
+    Known(Option<Credits>),
+    /// The read failed; the total is still shown.
+    Unavailable,
+}
+
 /// At-rest protection posture of an identity's vault-stored keys.
 #[derive(Clone, Copy, PartialEq, Eq)]
 enum IdentityProtectionStatus {
@@ -180,6 +227,7 @@ impl ScreenLike for KeyInfoScreen {
         self.reload_identity();
         self.protection_status = None;
         self.recovery.refresh_on_arrival();
+        self.remaining_budget = RemainingBudget::NotRequested;
     }
 
     fn display_task_result(&mut self, backend_task_success_result: BackendTaskSuccessResult) {
@@ -232,6 +280,36 @@ impl ScreenLike for KeyInfoScreen {
                     MessageType::Success,
                 );
             }
+            BackendTaskSuccessResult::IdentityKeyRemainingBudgets {
+                identity_id,
+                ref budgets,
+            } if identity_id == self.identity.identity.id() => {
+                // The answer holds an entry for every key it was asked about:
+                // no entry means it is about other keys, not this one.
+                if let Some(budget) = budgets.get(&self.key.id()) {
+                    self.remaining_budget = RemainingBudget::Known(*budget);
+                }
+            }
+            BackendTaskSuccessResult::IdentityKeyLimitsRaised {
+                identity_id,
+                ref key,
+            } if identity_id == self.identity.identity.id() && key.id() == self.key.id() => {
+                self.raise_in_flight = false;
+                self.raise_banner.take_and_clear();
+                self.raise_budget_input = None;
+                self.raise_budget = None;
+                self.raise_days_input.clear();
+                self.raise_form_error = None;
+                // The backend stored the raised key; show it and read what is
+                // left of the new budget.
+                self.reload_identity();
+                self.remaining_budget = RemainingBudget::NotRequested;
+                MessageBanner::set_global(
+                    self.app_context.egui_ctx(),
+                    "The key's limits were raised.",
+                    MessageType::Success,
+                );
+            }
             BackendTaskSuccessResult::IdentityKeysUnprotected { .. } => {
                 self.protection_in_flight = false;
                 self.protection_status = None; // re-probe the vault on next render
@@ -270,6 +348,17 @@ impl ScreenLike for KeyInfoScreen {
 
     fn display_backend_task_error(&mut self, context: &BackendTaskContext, _error: &TaskError) {
         self.recovery.absorb_error(context);
+        if context.key_remaining_budgets_identity() == Some(self.identity.identity.id()) {
+            self.remaining_budget = RemainingBudget::Unavailable;
+        }
+        if context.raise_key_limits_target() == Some((self.identity.identity.id(), self.key.id())) {
+            self.raise_in_flight = false;
+            self.raise_banner.take_and_clear();
+            // A refused raise may have stored the key as Platform holds it:
+            // show that, so the next quote starts from it.
+            self.reload_identity();
+            self.remaining_budget = RemainingBudget::NotRequested;
+        }
     }
 
     fn ui(&mut self, ui: &mut egui::Ui) -> AppAction {
@@ -380,6 +469,8 @@ impl ScreenLike for KeyInfoScreen {
                         }
                         ui.end_row();
 
+                        self.render_key_limits_rows(ui, text_primary);
+
                         if let Some((_, Some(wallet_derivation_path))) =
                             self.private_key_data.as_ref()
                         {
@@ -441,6 +532,8 @@ impl ScreenLike for KeyInfoScreen {
                         ui.end_row();
                     });
 
+                self.render_raise_limits(ui, text_primary);
+
                 ui.add_space(10.0);
                 ui.separator();
                 ui.add_space(10.0);
@@ -543,9 +636,9 @@ impl ScreenLike for KeyInfoScreen {
                                 .num_columns(2)
                                 .spacing([10.0, 10.0])
                                 .show(ui, |ui| {
-                                    if let Ok(secret_key) = SecretKey::from_slice(clear) {
-                                        let private_key =
-                                            PrivateKey::new(secret_key, self.app_context.network);
+                                    if let Ok(private_key) =
+                                        PrivateKey::from_byte_array(clear, self.app_context.network)
+                                    {
                                         ui.label(
                                             RichText::new("Private Key (WIF):")
                                                 .strong()
@@ -600,8 +693,8 @@ impl ScreenLike for KeyInfoScreen {
                                 && self.view_private_key_even_if_encrypted_or_in_wallet
                                 && self.selected_wallet.is_some()
                             {
-                                if let Some(private_key) = self.decrypted_private_key {
-                                    Self::render_decrypted_key_grid(ui, &private_key);
+                                if let Some(private_key) = &self.decrypted_private_key {
+                                    Self::render_decrypted_key_grid(ui, private_key);
                                 } else {
                                     Self::queue_key_display(
                                         &mut self.pending_key_display_request,
@@ -622,8 +715,8 @@ impl ScreenLike for KeyInfoScreen {
                                     self.view_private_key_even_if_encrypted_or_in_wallet = true;
                                     self.view_wallet_unlock = true;
                                 }
-                                if let Some(private_key) = self.decrypted_private_key {
-                                    Self::render_decrypted_key_grid(ui, &private_key);
+                                if let Some(private_key) = &self.decrypted_private_key {
+                                    Self::render_decrypted_key_grid(ui, private_key);
                                 } else {
                                     Self::queue_key_display(
                                         &mut self.pending_key_display_request,
@@ -661,8 +754,8 @@ impl ScreenLike for KeyInfoScreen {
                                 .color(text_primary),
                             );
                             ui.add_space(10.0);
-                            if let Some(private_key) = self.decrypted_private_key {
-                                Self::render_decrypted_key_grid(ui, &private_key);
+                            if let Some(private_key) = &self.decrypted_private_key {
+                                Self::render_decrypted_key_grid(ui, private_key);
                             } else if ui.button("View Private Key").clicked() {
                                 self.pending_identity_key_display = true;
                                 self.key_display_requested = true;
@@ -846,6 +939,21 @@ impl ScreenLike for KeyInfoScreen {
             ));
         }
 
+        self.queued_requests(action)
+    }
+}
+
+impl KeyInfoScreen {
+    /// Add the requests this screen sends on its own (budget read, queued
+    /// raise, legacy recovery) to `action`, the frame's action so far.
+    fn queued_requests(&mut self, mut action: AppAction) -> AppAction {
+        if let Some(raise) = self.pending_raise.take() {
+            action |= self.owned_request(BackendTask::IdentityTask(IdentityTask::RaiseKeyLimits {
+                identity: Box::new(self.identity.clone()),
+                raise,
+            }));
+        }
+
         // Legacy recovery: the passive check goes out once per opened screen,
         // and a restore only after the user pressed Restore — so the two can
         // never contend for `action`, which keeps only its most recent value.
@@ -858,11 +966,36 @@ impl ScreenLike for KeyInfoScreen {
             action |= AppAction::BackendTaskWithContext { task, context };
         }
 
+        // A budgeted key: ask Platform what is left of the budget, once per
+        // opened (or refreshed) screen. An action carries one request, so the
+        // read waits for a frame nothing else claimed, and counts as sent only
+        // once it actually goes out.
+        if self.remaining_budget == RemainingBudget::NotRequested
+            && self.limits_key().total_budget().is_some()
+        {
+            if matches!(action, AppAction::None) {
+                self.remaining_budget = RemainingBudget::Loading;
+                action = self.owned_request(BackendTask::IdentityTask(
+                    IdentityTask::FetchKeyRemainingBudgets {
+                        identity_id: self.identity.identity.id(),
+                        key_ids: vec![self.key.id()],
+                    },
+                ));
+            } else {
+                self.app_context.egui_ctx().request_repaint();
+            }
+        }
+
         action
     }
-}
 
-impl KeyInfoScreen {
+    /// Dispatch `task` with a context, so its result comes back to this
+    /// screen even if another screen covers it before the task finishes.
+    fn owned_request(&self, task: BackendTask) -> AppAction {
+        let context = BackendTaskContext::for_dispatch_on(&task, self.app_context.network());
+        AppAction::BackendTaskWithContext { task, context }
+    }
+
     pub fn new(
         identity: QualifiedIdentity,
         key: IdentityPublicKey,
@@ -916,10 +1049,257 @@ impl KeyInfoScreen {
             recovery,
             pending_recovery_restore: None,
             parent: None,
+            remaining_budget: RemainingBudget::default(),
+            raise_budget_input: None,
+            raise_budget: None,
+            raise_days_input: String::new(),
+            raise_form_error: None,
+            raise_in_flight: false,
+            raise_banner: None,
+            raise_confirmation: None,
+            quoted_raise: None,
+            pending_raise: None,
             masternode_origin: false,
         }
     }
 
+    /// The key as the identity currently holds it, for its usage limits: the
+    /// budget and expiry move with `IdentityKeyLimitsUpdate`, so the snapshot
+    /// this screen was opened with may be stale. Falls back to the snapshot
+    /// when the identity no longer holds the same key.
+    fn limits_key(&self) -> &IdentityPublicKey {
+        self.identity
+            .identity
+            .public_keys()
+            .get(&self.key.id())
+            .filter(|live| same_key(&self.key, live))
+            .unwrap_or(&self.key)
+    }
+
+    /// The spending limit and expiry rows of the key details grid. A key
+    /// without limits shows neither.
+    fn render_key_limits_rows(&self, ui: &mut egui::Ui, text_primary: Color32) {
+        let key = self.limits_key();
+        let dark_mode = ui.style().visuals.dark_mode;
+
+        if let Some(total_budget) = key.total_budget() {
+            ui.label(
+                RichText::new("Spending Limit:")
+                    .strong()
+                    .color(text_primary),
+            );
+            let text = match self.remaining_budget {
+                RemainingBudget::Known(Some(0)) => format!(
+                    "{total} in total. The limit is used up, so the network rejects actions signed with this key.",
+                    total = format_credits_as_dash(total_budget)
+                ),
+                RemainingBudget::Known(Some(remaining)) => format!(
+                    "{remaining} left of {total}.",
+                    remaining = format_credits_as_dash(remaining),
+                    total = format_credits_as_dash(total_budget)
+                ),
+                RemainingBudget::NotRequested | RemainingBudget::Loading => format!(
+                    "{total} in total. Checking how much is left.",
+                    total = format_credits_as_dash(total_budget)
+                ),
+                RemainingBudget::Known(None) | RemainingBudget::Unavailable => format!(
+                    "{total} in total. How much is left could not be read. Refresh to try again.",
+                    total = format_credits_as_dash(total_budget)
+                ),
+            };
+            let color = if self.remaining_budget == RemainingBudget::Known(Some(0)) {
+                DashColors::error_color(dark_mode)
+            } else {
+                text_primary
+            };
+            ui.label(RichText::new(text).color(color));
+            ui.end_row();
+        }
+
+        if let Some(expires_at) = key.expires_at() {
+            ui.label(RichText::new("Expires:").strong().color(text_primary));
+            let date = local_date_time_from_unix_millis(expires_at);
+            if key.is_expired_at(now_ms()) {
+                ui.label(
+                    RichText::new(format!(
+                        "Expired on {date}. The network rejects actions signed with this key."
+                    ))
+                    .color(DashColors::error_color(dark_mode)),
+                );
+            } else {
+                ui.label(RichText::new(date).color(text_primary));
+            }
+            ui.end_row();
+        }
+    }
+
+    /// The Raise Limits section for a key with a spending limit or an expiry:
+    /// add to the limit and/or extend the expiry. Shown only when the network
+    /// supports key limits and this device holds a key allowed to sign the
+    /// change; otherwise it says which of the two is missing.
+    fn render_raise_limits(&mut self, ui: &mut egui::Ui, text_primary: Color32) {
+        let key = self.limits_key().clone();
+        if !key.has_limits() {
+            return;
+        }
+        let dark_mode = ui.style().visuals.dark_mode;
+
+        ui.add_space(10.0);
+        ui.separator();
+        ui.add_space(10.0);
+        ui.heading(RichText::new("Raise Limits").color(text_primary));
+        ui.add_space(6.0);
+
+        if !FeatureGate::IdentityKeyLimits.is_available(&self.app_context) {
+            ui.label(
+                RichText::new(
+                    "Raising key limits needs a network that supports them. Connect to such a network to raise this key's limits.",
+                )
+                .color(DashColors::text_secondary(dark_mode)),
+            );
+            return;
+        }
+        if key.disabled_at().is_some() {
+            ui.label(
+                RichText::new("This key is disabled, so its limits cannot be raised.")
+                    .color(DashColors::text_secondary(dark_mode)),
+            );
+            return;
+        }
+        let signer_id =
+            key_limits_update_signer(self.identity.identity.public_keys().values(), |candidate| {
+                self.identity.can_sign_with(candidate)
+            })
+            .map(|signer| signer.id());
+        let Some(signer_id) = signer_id else {
+            ui.label(
+                RichText::new(
+                    "Raising key limits needs this identity's master key, or a critical key without limits, on this device. Import one of them to raise this key's limits.",
+                )
+                .color(DashColors::text_secondary(dark_mode)),
+            );
+            return;
+        };
+
+        egui::Grid::new("raise_key_limits_grid")
+            .num_columns(2)
+            .spacing([10.0, 10.0])
+            .show(ui, |ui| {
+                if key.total_budget().is_some() {
+                    ui.label(
+                        RichText::new("Add to Spending Limit:")
+                            .strong()
+                            .color(text_primary),
+                    );
+                    let input = self.raise_budget_input.get_or_insert_with(|| {
+                        AmountInput::new(Amount::new_dash(0.0)).with_hint_text("0.1")
+                    });
+                    let response = input.show(ui);
+                    response.inner.update(&mut self.raise_budget);
+                    ui.end_row();
+                }
+                if key.expires_at().is_some() {
+                    ui.label(
+                        RichText::new("Extend Expiry by (days):")
+                            .strong()
+                            .color(text_primary),
+                    );
+                    let response = ui
+                        .add(
+                            egui::TextEdit::singleline(&mut self.raise_days_input)
+                                .hint_text("30")
+                                .desired_width(80.0),
+                        )
+                        .on_hover_text(
+                            "Counted from the current expiry, or from today if the key has already expired.",
+                        );
+                    if response.changed() {
+                        self.raise_form_error = None;
+                    }
+                    if response.lost_focus() && !self.raise_days_input.trim().is_empty() {
+                        self.raise_form_error = parse_key_validity_days(&self.raise_days_input)
+                            .err()
+                            .map(|error| error.to_string());
+                    }
+                    ui.end_row();
+                }
+            });
+
+        if let Some(error) = &self.raise_form_error {
+            ui.colored_label(DashColors::VALIDATION_WARNING, error);
+        }
+
+        ui.add_space(6.0);
+        let clicked = ui
+            .add_enabled(!self.raise_in_flight, egui::Button::new("Raise Limits"))
+            .clicked();
+        if clicked {
+            match self.quoted_raise(&key, signer_id) {
+                Ok(raise) => {
+                    self.raise_form_error = None;
+                    self.raise_confirmation = Some(ConfirmationDialog::new(
+                        "Raise key limits".to_string(),
+                        raise_confirmation_text(&raise),
+                    ));
+                    self.quoted_raise = Some(raise);
+                }
+                Err(error) => self.raise_form_error = Some(error.to_string()),
+            }
+        }
+
+        let response = self
+            .raise_confirmation
+            .as_mut()
+            .and_then(|dialog| dialog.show(ui).inner.dialog_response);
+        match response {
+            Some(ConfirmationStatus::Confirmed) => {
+                self.raise_confirmation = None;
+                if let Some(raise) = self.quoted_raise.take() {
+                    self.start_raise(raise);
+                }
+            }
+            Some(ConfirmationStatus::Canceled) => {
+                self.raise_confirmation = None;
+                self.quoted_raise = None;
+            }
+            None => {}
+        }
+    }
+
+    /// Queue the confirmed `raise` for dispatch and say it is under way.
+    fn start_raise(&mut self, raise: KeyLimitsRaise) {
+        self.raise_in_flight = true;
+        self.pending_raise = Some(raise);
+        self.raise_banner.take_and_clear();
+        let handle = MessageBanner::set_global(
+            self.app_context.egui_ctx(),
+            "Raising the key's limits. Please wait.",
+            MessageType::Info,
+        );
+        handle.with_elapsed();
+        self.raise_banner = Some(handle);
+    }
+
+    /// The Raise Limits form as a quoted raise of `key`, signed by
+    /// `signer_id`, checked so a raise Platform would refuse never leaves
+    /// the screen.
+    fn quoted_raise(
+        &self,
+        key: &IdentityPublicKey,
+        signer_id: KeyID,
+    ) -> Result<KeyLimitsRaise, KeyLimitsError> {
+        let add_budget = self
+            .raise_budget
+            .as_ref()
+            .map(Amount::value)
+            .filter(|credits| *credits > 0);
+        let extend_days = match self.raise_days_input.trim() {
+            "" => None,
+            days => Some(parse_key_validity_days(days)?),
+        };
+        KeyLimitsRaise::quote(key, add_budget, extend_days, signer_id, now_ms())
+    }
+
     /// The store this key is *published* under, for naming it.
     ///
     /// Deliberately the structural answer rather than [`Self::filed_at`]'s: a key's
@@ -1109,7 +1489,7 @@ impl KeyInfoScreen {
                 return;
             }
             Err(_) => match PrivateKey::from_wif(self.private_key_input.text()) {
-                Ok(key) => key.inner.secret_bytes(),
+                Ok(key) => *key.inner.to_bytes(),
                 Err(_) => {
                     MessageBanner::set_global(
                         self.app_context.egui_ctx(),
@@ -1294,13 +1674,9 @@ impl KeyInfoScreen {
     /// are compressed by convention, so a verifier can recover the signer's
     /// public key and address from the signature alone.
     fn sign_ecdsa_local(private_key_bytes: &[u8; 32], message: &str) -> String {
-        let secp = Secp256k1::new();
-        let message_hash = signed_msg_hash(message);
-        let digest = Message::from_digest(*message_hash.as_byte_array());
-        let secret_key = SecretKey::from_byte_array(private_key_bytes)
+        let secret_key = SecretKey::from_secret_bytes(*private_key_bytes)
             .expect("clear private key is a valid 32-byte secret");
-        let recoverable = secp.sign_ecdsa_recoverable(&digest, &secret_key);
-        MessageSignature::new(recoverable, true).to_base64()
+        crate::backend_task::wallet::dash_signed_message(message, &secret_key, true)
     }
 
     /// Render the WIF + hex of an already-derived private key. The key is
@@ -1325,7 +1701,7 @@ impl KeyInfoScreen {
                         .strong()
                         .color(ui.visuals().text_color()),
                 );
-                let private_key_hex = Secret::new(hex::encode(private_key.inner.secret_bytes()));
+                let private_key_hex = Secret::new(hex::encode(private_key.inner.to_bytes()));
                 ui.label(
                     RichText::new(private_key_hex.expose_secret()).color(ui.visuals().text_color()),
                 );
@@ -1763,9 +2139,56 @@ fn validate_identity_password_form(password: String, confirmation: &str) -> Resu
     Ok(password)
 }
 
+/// The confirmation of a limits raise, in complete sentences: the resulting
+/// absolute limits and the key that signs the change.
+fn raise_confirmation_text(raise: &KeyLimitsRaise) -> String {
+    let mut sentences = vec![format!(
+        "You are about to raise the limits of key {key_id}.",
+        key_id = raise.key_id
+    )];
+    if let (Some(from), Some(to)) = (raise.seen_total_budget, raise.total_budget) {
+        sentences.push(format!(
+            "Its total spending limit goes from {from} to {to}.",
+            from = format_credits_as_dash(from),
+            to = format_credits_as_dash(to)
+        ));
+    }
+    if let (Some(from), Some(to)) = (raise.seen_expires_at, raise.expires_at) {
+        sentences.push(format!(
+            "Its expiry moves from {from} to {to}.",
+            from = local_date_time_from_unix_millis(from),
+            to = local_date_time_from_unix_millis(to)
+        ));
+    }
+    sentences.push(format!(
+        "The change is signed with key {signer_id}, and a network fee applies. Do you want to continue?",
+        signer_id = raise.signing_key_id
+    ));
+    sentences.join(" ")
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
+
+    /// The confirmation names the resulting absolute limits and the signer,
+    /// so the user consents to exactly what is signed.
+    #[test]
+    fn a_raise_confirmation_shows_the_resulting_limits_and_the_signer() {
+        let raise = KeyLimitsRaise {
+            key_id: 4,
+            seen_total_budget: Some(100_000_000_000),
+            seen_expires_at: None,
+            total_budget: Some(250_000_000_000),
+            expires_at: None,
+            signing_key_id: 0,
+        };
+        let text = raise_confirmation_text(&raise);
+        assert!(text.contains("key 4"), "{text}");
+        assert!(text.contains("goes from 1 DASH to 2.5 DASH"), "{text}");
+        assert!(text.contains("signed with key 0"), "{text}");
+        assert!(!text.contains("expiry"), "no expiry change, got: {text}");
+    }
     use crate::app::TaskResult;
     use crate::app_dir::ensure_env_file;
     use crate::context::connection_status::ConnectionStatus;
@@ -2284,10 +2707,11 @@ mod tests {
     /// passes and the placement check is what decides the outcome.
     fn keypair(id: KeyID, purpose: Purpose) -> (IdentityPublicKey, [u8; 32]) {
         let secret_bytes = [0x2A; 32];
-        let secp = Secp256k1::new();
-        let secret = SecretKey::from_byte_array(&secret_bytes).expect("a valid secret key");
-        let data = PrivateKey::new(secret, Network::Testnet)
-            .public_key(&secp)
+
+        let secret = SecretKey::from_secret_bytes(secret_bytes).expect("a valid secret key");
+        let data = PrivateKey::from_byte_array(secret.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .public_key()
             .to_bytes();
         (
             IdentityPublicKey::V0(IdentityPublicKeyV0 {
@@ -2610,6 +3034,176 @@ mod tests {
             .await;
     }
 
+    /// Whether `action` asks Platform for the remaining budget of a key, with
+    /// a dispatch context so the result comes back to this screen.
+    fn requests_budget(action: &AppAction) -> bool {
+        matches!(
+            action,
+            AppAction::BackendTaskWithContext {
+                task: BackendTask::IdentityTask(IdentityTask::FetchKeyRemainingBudgets { .. }),
+                ..
+            }
+        )
+    }
+
+    /// The Raise Limits progress banner stays while the raise is in flight and
+    /// goes once it settles, whether it succeeded or failed.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn the_raise_progress_banner_goes_when_the_raise_settles() {
+        use crate::ui::components::message_banner::global_banner_texts;
+        const PROGRESS: &str = "Raising the key's limits. Please wait.";
+
+        let (app_context, _dir) = offline_ctx().await;
+        let ctx = app_context.egui_ctx().clone();
+        let budgeted = public_key(1, Purpose::AUTHENTICATION).with_limits(Some(5_000), None);
+        let identity = identity_with(0xB8, &[(budgeted.clone(), [0x13; 32])]);
+        let identity_id = identity.identity.id();
+        let mut screen = KeyInfoScreen::new(identity, budgeted.clone(), None, &app_context);
+        let raise = KeyLimitsRaise {
+            key_id: budgeted.id(),
+            seen_total_budget: Some(5_000),
+            seen_expires_at: None,
+            total_budget: Some(10_000),
+            expires_at: None,
+            signing_key_id: 0,
+        };
+        let shows_progress = || global_banner_texts(&ctx).iter().any(|t| t == PROGRESS);
+
+        // Settled by success.
+        screen.start_raise(raise);
+        assert!(shows_progress());
+        screen.display_task_result(BackendTaskSuccessResult::IdentityKeyLimitsRaised {
+            identity_id,
+            key: budgeted.clone(),
+        });
+        assert!(!shows_progress(), "got {:?}", global_banner_texts(&ctx));
+
+        // Settled by an error.
+        screen.start_raise(raise);
+        let AppAction::BackendTaskWithContext { context, .. } =
+            screen.queued_requests(AppAction::None)
+        else {
+            panic!("the raise goes out with a context");
+        };
+        screen.display_backend_task_error(&context, &TaskError::NoKeyLimitsSigningKey);
+        assert!(!shows_progress(), "got {:?}", global_banner_texts(&ctx));
+
+        app_context
+            .wallet_backend()
+            .expect("backend")
+            .shutdown()
+            .await;
+    }
+
+    /// The budget read and a limits raise carry a dispatch context, so their
+    /// results reach Key Info even if another screen covers it meanwhile.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn key_limit_requests_come_back_to_this_screen() {
+        let (app_context, _dir) = offline_ctx().await;
+
+        let budgeted = public_key(1, Purpose::AUTHENTICATION).with_limits(Some(5_000), None);
+        let identity = identity_with(0xB7, &[(budgeted.clone(), [0x12; 32])]);
+        let mut screen = KeyInfoScreen::new(identity, budgeted.clone(), None, &app_context);
+
+        let read = screen.queued_requests(AppAction::None);
+        assert!(requests_budget(&read), "got {read:?}");
+
+        screen.pending_raise = Some(KeyLimitsRaise {
+            key_id: budgeted.id(),
+            seen_total_budget: Some(5_000),
+            seen_expires_at: None,
+            total_budget: Some(10_000),
+            expires_at: None,
+            signing_key_id: 0,
+        });
+        let raise = screen.queued_requests(AppAction::None);
+        assert!(
+            matches!(
+                raise,
+                AppAction::BackendTaskWithContext {
+                    task: BackendTask::IdentityTask(IdentityTask::RaiseKeyLimits { .. }),
+                    ..
+                }
+            ),
+            "got {raise:?}"
+        );
+
+        app_context
+            .wallet_backend()
+            .expect("backend")
+            .shutdown()
+            .await;
+    }
+
+    /// Regression: on an install with the previous version's identities, the
+    /// legacy recovery check went out in the same frame as the budget read and
+    /// replaced it (an action keeps only its last task). The budget then stayed
+    /// "loading" for good, since it was marked as requested.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn the_budget_read_is_sent_even_when_the_recovery_check_goes_out() {
+        let (app_context, _dir) = offline_ctx().await;
+
+        let budgeted = public_key(1, Purpose::AUTHENTICATION).with_limits(Some(5_000), None);
+        let identity = identity_with(0xB6, &[(budgeted.clone(), [0x11; 32])]);
+        let identity_id = identity.identity.id();
+        let mut screen = KeyInfoScreen::new(identity, budgeted, None, &app_context);
+        // Arm the recovery check, as on an install with legacy identities.
+        screen
+            .recovery
+            .offered(identity_id, RecoveryPlan::default());
+        screen.recovery.completed();
+
+        let first = screen.queued_requests(AppAction::None);
+        assert!(
+            matches!(first, AppAction::BackendTaskWithContext { .. }),
+            "the recovery check goes out on the first frame"
+        );
+        let second = screen.queued_requests(AppAction::None);
+        assert!(
+            requests_budget(&first) || requests_budget(&second),
+            "the budget read must go out once the recovery check took the first frame"
+        );
+        assert_eq!(screen.remaining_budget, RemainingBudget::Loading);
+
+        app_context
+            .wallet_backend()
+            .expect("backend")
+            .shutdown()
+            .await;
+    }
+
+    /// Regression: a budget answer that does not include the key on screen
+    /// (a late answer for another key of the same identity) replaced its
+    /// budget with "none tracked". Only an answer naming the key counts.
+    #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+    async fn a_budget_answer_for_another_key_leaves_this_one_alone() {
+        let (app_context, _dir) = offline_ctx().await;
+
+        let budgeted = public_key(1, Purpose::AUTHENTICATION).with_limits(Some(5_000), None);
+        let identity = identity_with(0xB7, &[(budgeted.clone(), [0x11; 32])]);
+        let identity_id = identity.identity.id();
+        let mut screen = KeyInfoScreen::new(identity, budgeted, None, &app_context);
+        screen.remaining_budget = RemainingBudget::Loading;
+
+        screen.display_task_result(BackendTaskSuccessResult::IdentityKeyRemainingBudgets {
+            identity_id,
+            budgets: BTreeMap::from([(7, Some(10))]),
+        });
+        assert_eq!(screen.remaining_budget, RemainingBudget::Loading);
+
+        screen.display_task_result(BackendTaskSuccessResult::IdentityKeyRemainingBudgets {
+            identity_id,
+            budgets: BTreeMap::from([(1, Some(3_000))]),
+        });
+        assert_eq!(screen.remaining_budget, RemainingBudget::Known(Some(3_000)));
+
+        app_context
+            .wallet_backend()
+            .expect("backend")
+            .shutdown()
+            .await;
+    }
+
     /// Regression: every failing backend task routed to the visible screen used
     /// to end the restore, so an unrelated failure re-enabled the Restore button
     /// while the original task still held the identity — pressing it again only
diff --git a/src/ui/identity/keys/keys_screen.rs b/src/ui/identity/keys/keys_screen.rs
index d67764fed..a4c70bfd1 100644
--- a/src/ui/identity/keys/keys_screen.rs
+++ b/src/ui/identity/keys/keys_screen.rs
@@ -10,6 +10,7 @@ use crate::app::AppAction;
 use crate::backend_task::error::TaskError;
 use crate::backend_task::{BackendTaskContext, BackendTaskSuccessResult};
 use crate::context::AppContext;
+use crate::model::identity_key_usability::now_ms;
 use crate::model::legacy_recovery::RecoveryItem;
 use crate::model::qualified_identity::encrypted_key_storage::same_key;
 use crate::model::qualified_identity::key_placement::KeyPlacement;
@@ -27,6 +28,7 @@ use crate::ui::theme::{ComponentStyles, DashColors, ResponseExt};
 use crate::ui::{MessageType, RootScreenType, Screen, ScreenLike};
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v1::IdentityPublicKeyGettersV1;
 use dash_sdk::platform::IdentityPublicKey;
 use eframe::egui::{self, RichText, ScrollArea};
 use std::sync::Arc;
@@ -275,6 +277,7 @@ impl KeysScreen {
                 ));
             }
             ui.label(RichText::new(held_text).color(DashColors::text_secondary(dark_mode)));
+            Self::render_limits_marker(ui, key, dark_mode);
         });
         if expert {
             Self::render_expert_detail(ui, key, dark_mode);
@@ -282,6 +285,21 @@ impl KeysScreen {
         action
     }
 
+    /// A short marker for a key with usage limits (protocol version 14): an
+    /// expired key can no longer sign; a limited one has a spending limit or an
+    /// expiry date, detailed on its page. A key without limits shows nothing.
+    fn render_limits_marker(ui: &mut egui::Ui, key: &IdentityPublicKey, dark_mode: bool) {
+        if key.is_expired_at(now_ms()) {
+            ui.label(RichText::new("Expired").color(DashColors::error_color(dark_mode)))
+                .on_hover_text("This key has expired, so it can no longer sign.");
+        } else if key.has_limits() {
+            ui.label(RichText::new("Limited").color(DashColors::warning_color(dark_mode)))
+                .on_hover_text(
+                    "This key has a spending limit or an expiry date. Open it to see the details.",
+                );
+        }
+    }
+
     /// The on-chain specifics of one key, for the Expert view. Everyday view
     /// gets the role word and held state, which is what it can act on.
     fn render_expert_detail(ui: &mut egui::Ui, key: &IdentityPublicKey, dark_mode: bool) {
diff --git a/src/ui/identity/mod.rs b/src/ui/identity/mod.rs
index c31274ebb..4ca2c50d7 100644
--- a/src/ui/identity/mod.rs
+++ b/src/ui/identity/mod.rs
@@ -18,6 +18,7 @@
 //! `src/ui/components/left_panel.rs`, and the `RootScreenIdentityHub` entry in
 //! the `main_screens` map in `src/app.rs::AppState::new`.
 
+use crate::model::identity_key_usability::SigningScope;
 use std::sync::{Arc, RwLock};
 
 use dash_sdk::{
@@ -165,6 +166,17 @@ pub fn removed_identities_banner(
     }
 }
 
+/// The wallet that derives `key`, the key the caller signs with, for the
+/// unlock prompt. `None` when no key is chosen or no wallet derives it.
+pub fn wallet_for_signing_key(
+    qualified_identity: &QualifiedIdentity,
+    key: Option<&IdentityPublicKey>,
+) -> Option<Arc<RwLock<Wallet>>> {
+    get_selected_wallet(qualified_identity, None, Some(key?))
+        .ok()
+        .flatten()
+}
+
 /// Retrieves the appropriate wallet (if any) associated with the given identity.
 ///
 /// # Description
@@ -204,7 +216,7 @@ pub fn get_selected_wallet(
 ) -> Result<Option<Arc<RwLock<Wallet>>>, String> {
     // If `app_context` is provided, use the DPNS-based approach.
     let public_key = if let Some(context) = app_context {
-        let dpns_contract = &context.dpns_contract;
+        let dpns_contract = &context.dpns_contract();
 
         // Attempt to fetch the `preorder` document type from the DPNS contract.
         let preorder_document_type = dpns_contract
@@ -213,7 +225,12 @@ pub fn get_selected_wallet(
 
         // Attempt to retrieve the public key from the identity.
         qualified_identity
-            .document_signing_key(&preorder_document_type)
+            .document_signing_key(
+                SigningScope::ContractWide {
+                    contract_id: dpns_contract.id(),
+                },
+                &preorder_document_type,
+            )
             .ok_or_else(|| {
                 "Identity doesn't have an authentication key for signing document transitions"
                     .to_string()
diff --git a/src/ui/identity/register_dpns_name_screen.rs b/src/ui/identity/register_dpns_name_screen.rs
index fe2015201..e142d3b50 100644
--- a/src/ui/identity/register_dpns_name_screen.rs
+++ b/src/ui/identity/register_dpns_name_screen.rs
@@ -16,6 +16,7 @@ use crate::model::dpns_usernames::{
     registration_key_status,
 };
 use crate::model::fee_estimation::{contest_fee_credits, format_credits_as_dash};
+use crate::model::identity_key_usability::SigningScope;
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
@@ -197,7 +198,7 @@ impl RegisterDpnsNameScreen {
         let Some(identity) = &self.selected_qualified_identity else {
             return;
         };
-        let required = dpns_signing_requirement(&self.app_context.dpns_contract);
+        let required = dpns_signing_requirement(&self.app_context.dpns_contract());
         let wallets = self.app_context.wallet_context();
         let arrived = missing_registration_wallets(identity, required)
             .any(|seed_hash| wallets.contains_hd(seed_hash));
@@ -590,13 +591,20 @@ impl RegisterDpnsNameScreen {
                 .show(ui, |ui| {
                     let document_type = self
                         .app_context
-                        .dpns_contract
+                        .dpns_contract()
                         .document_type_cloned_for_name("domain")
                         .ok();
                     if self.selected_key.is_none() {
                         self.selected_key = document_type
                             .as_ref()
-                            .and_then(|doc_type| identity.document_signing_key(&doc_type.as_ref()))
+                            .and_then(|doc_type| {
+                                identity.document_signing_key(
+                                    SigningScope::ContractWide {
+                                        contract_id: self.app_context.dpns_contract().id(),
+                                    },
+                                    &doc_type.as_ref(),
+                                )
+                            })
                             .cloned();
                     }
                     action |= add_key_chooser_with_doc_type(
@@ -606,6 +614,9 @@ impl RegisterDpnsNameScreen {
                         &mut self.selected_key,
                         TransactionType::DocumentAction,
                         document_type.as_ref(),
+                        SigningScope::ContractWide {
+                            contract_id: self.app_context.dpns_contract().id(),
+                        },
                     );
                 });
         }
@@ -913,7 +924,7 @@ impl ScreenLike for RegisterDpnsNameScreen {
                     // and Keys screen; this page only says what helps.
                     let key_status = registration_key_status(
                         identity,
-                        dpns_signing_requirement(&self.app_context.dpns_contract),
+                        dpns_signing_requirement(&self.app_context.dpns_contract()),
                     );
                     let updated_install = key_status.key_is_unusable_here()
                         && self.app_context.has_legacy_identities();
diff --git a/src/ui/identity/transfer_screen.rs b/src/ui/identity/transfer_screen.rs
index a5c281518..1ad7363bd 100644
--- a/src/ui/identity/transfer_screen.rs
+++ b/src/ui/identity/transfer_screen.rs
@@ -4,6 +4,7 @@ use crate::backend_task::{BackendTask, BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
 use crate::model::amount::Amount;
 use crate::model::fee_estimation::{format_credits_as_dash, max_spendable_credits};
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
@@ -24,7 +25,7 @@ use dash_sdk::dpp::address_funds::PlatformAddress;
 use dash_sdk::dpp::fee::Credits;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
+use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
 use dash_sdk::platform::{Identifier, IdentityPublicKey};
 use eframe::egui::{self, Frame, Margin, Ui};
@@ -92,13 +93,12 @@ impl TransferScreen {
             .unwrap_or_default();
 
         let max_amount = identity.identity.balance();
-        let identity_clone = identity.identity.clone();
-        let selected_key = identity_clone.get_first_public_key_matching(
+        let identity_clone = identity.clone();
+        let selected_key = identity_clone.signing_key_now(KeyRequirements::new(
             Purpose::TRANSFER,
-            SecurityLevel::full_range().into(),
-            KeyType::all_key_types().into(),
-            false,
-        );
+            &SecurityLevel::full_range(),
+            SigningScope::NonBatch,
+        ));
         let selected_wallet =
             get_selected_wallet(&identity, None, selected_key).unwrap_or_else(|e| {
                 MessageBanner::set_global(app_context.egui_ctx(), &e, MessageType::Error)
@@ -139,6 +139,7 @@ impl TransferScreen {
             &self.identity,
             &mut self.selected_key,
             TransactionType::Transfer,
+            SigningScope::NonBatch,
         )
     }
 
@@ -603,12 +604,11 @@ impl ScreenLike for TransferScreen {
 
             let key_for_info = key_info_when_available(
                 has_keys,
-                self.identity.identity.get_first_public_key_matching(
+                self.identity.matching_key_now(KeyRequirements::new(
                     Purpose::TRANSFER,
-                    SecurityLevel::full_range().into(),
-                    KeyType::all_key_types().into(),
-                    false,
-                ),
+                    &SecurityLevel::full_range(),
+                    SigningScope::NonBatch,
+                )),
             );
 
             if !has_keys {
diff --git a/src/ui/identity/usernames_card.rs b/src/ui/identity/usernames_card.rs
index 9c3c2d5d6..5e163557d 100644
--- a/src/ui/identity/usernames_card.rs
+++ b/src/ui/identity/usernames_card.rs
@@ -403,7 +403,7 @@ impl UsernamesCard {
         app_context: &Arc<AppContext>,
         identity: &QualifiedIdentity,
     ) -> Option<KeyHint> {
-        let required = dpns_signing_requirement(&app_context.dpns_contract);
+        let required = dpns_signing_requirement(&app_context.dpns_contract());
         let status = registration_key_status(identity, required);
         let identity_id = identity.identity.id();
         let key_missing = status.key_is_unusable_here();
diff --git a/src/ui/identity/withdraw_screen.rs b/src/ui/identity/withdraw_screen.rs
index 259b38b16..cb6b44524 100644
--- a/src/ui/identity/withdraw_screen.rs
+++ b/src/ui/identity/withdraw_screen.rs
@@ -4,6 +4,7 @@ use crate::backend_task::{BackendTask, BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
 use crate::model::amount::Amount;
 use crate::model::fee_estimation::{format_credits_as_dash, max_spendable_credits};
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_identity::{IdentityType, QualifiedIdentity};
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
@@ -24,7 +25,7 @@ use dash_sdk::dashcore_rpc::dashcore::{Address, Network};
 use dash_sdk::dpp::fee::Credits;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
+use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
 use dash_sdk::platform::IdentityPublicKey;
 use eframe::egui::{self, Frame, Margin, Ui};
@@ -111,6 +112,7 @@ impl WithdrawalScreen {
             &self.identity,
             &mut self.selected_key,
             TransactionType::Withdraw,
+            SigningScope::NonBatch,
         )
     }
 
@@ -435,18 +437,16 @@ impl ScreenLike for WithdrawalScreen {
                     ui.add_space(10.0);
                 }
 
-                let owner_key = self.identity.identity.get_first_public_key_matching(
+                let owner_key = self.identity.matching_key_now(KeyRequirements::new(
                     Purpose::OWNER,
-                    SecurityLevel::full_range().into(),
-                    KeyType::all_key_types().into(),
-                    false,
-                );
-                let transfer_key = self.identity.identity.get_first_public_key_matching(
+                    &SecurityLevel::full_range(),
+                    SigningScope::NonBatch,
+                ));
+                let transfer_key = self.identity.matching_key_now(KeyRequirements::new(
                     Purpose::TRANSFER,
-                    SecurityLevel::full_range().into(),
-                    KeyType::all_key_types().into(),
-                    false,
-                );
+                    &SecurityLevel::full_range(),
+                    SigningScope::NonBatch,
+                ));
 
                 if let Some(owner_key) = owner_key {
                     if ui.button("Check Owner Key").clicked() {
diff --git a/src/ui/mod.rs b/src/ui/mod.rs
index 85b213b0e..bf63362a1 100644
--- a/src/ui/mod.rs
+++ b/src/ui/mod.rs
@@ -44,6 +44,7 @@ use crate::ui::wallets::send_screen::{IdentitySendMode, SendFlow, WalletSendScre
 use crate::ui::wallets::single_key_send_screen::SingleKeyWalletSendScreen;
 use crate::ui::wallets::wallets_screen::WalletsBalancesScreen;
 use contracts_documents::add_contracts_screen::AddContractsScreen;
+use contracts_documents::contract_fee_pots_screen::ContractFeePotsScreen;
 use contracts_documents::group_actions_screen::GroupActionsScreen;
 use contracts_documents::register_contract_screen::RegisterDataContractScreen;
 use contracts_documents::update_contract_screen::UpdateDataContractScreen;
@@ -248,6 +249,7 @@ pub enum ScreenType {
     PurchaseDocument,
     SetDocumentPrice,
     GroupActions,
+    ContractFeePots,
 
     // Token Screens
     TokenBalances,
@@ -478,6 +480,9 @@ impl ScreenType {
             ScreenType::GroupActions => {
                 Screen::GroupActionsScreen(GroupActionsScreen::new(app_context))
             }
+            ScreenType::ContractFeePots => {
+                Screen::ContractFeePotsScreen(ContractFeePotsScreen::new(app_context))
+            }
             // Token Screens
             ScreenType::TokenBalances => Screen::TokensScreen(Box::new(TokensScreen::new(
                 app_context,
@@ -613,6 +618,7 @@ pub enum Screen {
     UpdateDataContractScreen(UpdateDataContractScreen),
     DocumentActionScreen(DocumentActionScreen),
     GroupActionsScreen(GroupActionsScreen),
+    ContractFeePotsScreen(ContractFeePotsScreen),
     WithdrawalScreen(WithdrawalScreen),
     TopUpIdentityScreen(TopUpIdentityScreen),
     TransferScreen(TransferScreen),
@@ -802,6 +808,7 @@ impl Screen {
             UpdateDataContractScreen,
             DocumentActionScreen,
             GroupActionsScreen,
+            ContractFeePotsScreen,
             AddContractsScreen,
             ProofVisualizerScreen,
             DocumentVisualizerScreen,
@@ -1009,6 +1016,7 @@ impl Screen {
                 DocumentActionType::SetPrice => ScreenType::SetDocumentPrice,
             },
             Screen::GroupActionsScreen(_) => ScreenType::GroupActions,
+            Screen::ContractFeePotsScreen(_) => ScreenType::ContractFeePots,
             Screen::AddNewWalletScreen(_) => ScreenType::AddNewWallet,
             Screen::WalletsBalancesScreen(_) => ScreenType::WalletsBalances,
             Screen::ImportMnemonicScreen(_) => ScreenType::ImportMnemonic,
@@ -1150,6 +1158,7 @@ macro_rules! delegate_to_screen {
             Screen::UpdateDataContractScreen($screen) => $call,
             Screen::DocumentActionScreen($screen) => $call,
             Screen::GroupActionsScreen($screen) => $call,
+            Screen::ContractFeePotsScreen($screen) => $call,
             Screen::WithdrawalScreen($screen) => $call,
             Screen::TopUpIdentityScreen($screen) => $call,
             Screen::TransferScreen($screen) => $call,
diff --git a/src/ui/state/account_summary.rs b/src/ui/state/account_summary.rs
index 6f004b36e..a38b29c59 100644
--- a/src/ui/state/account_summary.rs
+++ b/src/ui/state/account_summary.rs
@@ -365,14 +365,12 @@ mod tests {
     /// valid address to stand in for a funded-but-unindexed chain address.
     fn addr_from_byte(b: u8) -> Address {
         use dash_sdk::dpp::dashcore::PublicKey;
-        use dash_sdk::dpp::dashcore::secp256k1::{
-            PublicKey as SecpPublicKey, Secp256k1, SecretKey,
-        };
-        let secp = Secp256k1::new();
+        use dash_sdk::dpp::secp256k1::{PublicKey as SecpPublicKey, SecretKey};
+
         let mut sk_bytes = [0u8; 32];
         sk_bytes[0] = if b == 0 { 1 } else { b };
-        let sk = SecretKey::from_slice(&sk_bytes).expect("valid secret key");
-        let pubkey = PublicKey::from_slice(&SecpPublicKey::from_secret_key(&secp, &sk).serialize())
+        let sk = SecretKey::from_secret_bytes(sk_bytes).expect("valid secret key");
+        let pubkey = PublicKey::from_slice(&SecpPublicKey::from_secret_key(&sk).serialize())
             .expect("valid pubkey");
         Address::p2pkh(&pubkey, Network::Testnet)
     }
diff --git a/src/ui/tokens/claim_tokens_screen.rs b/src/ui/tokens/claim_tokens_screen.rs
index eb4e9f239..0c04b56fa 100644
--- a/src/ui/tokens/claim_tokens_screen.rs
+++ b/src/ui/tokens/claim_tokens_screen.rs
@@ -1,5 +1,8 @@
 use crate::backend_task::{BackendTaskSuccessResult, FeeResult};
+use crate::model::datetime::local_date_time_from_unix_millis;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
+use crate::model::token::once_per_identity_amount;
 use crate::model::user_role::UserRole;
 use crate::ui::components::Component;
 use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
@@ -11,19 +14,7 @@ use std::collections::HashSet;
 use std::sync::{Arc, RwLock};
 use std::time::Duration;
 
-use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
-use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
-use dash_sdk::dpp::data_contract::associated_token::token_distribution_key::TokenDistributionType;
-use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::accessors::v0::TokenDistributionRulesV0Getters;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_function::DistributionFunction;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_recipient::TokenDistributionRecipient;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::methods::v0::TokenPerpetualDistributionV0Accessors;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::reward_distribution_type::RewardDistributionType;
-use dash_sdk::dpp::data_contract::TokenConfiguration;
-use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
-use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
-use eframe::egui::{self, Color32, Frame, Margin, Ui};
-use egui::RichText;
+use super::tokens_screen::{IdentityTokenBasicInfo, IdentityTokenIdentifier};
 use crate::app::{AppAction, BackendTasksExecutionMode};
 use crate::backend_task::BackendTask;
 use crate::backend_task::tokens::TokenTask;
@@ -31,15 +22,31 @@ use crate::context::AppContext;
 use crate::model::qualified_contract::QualifiedContract;
 use crate::model::qualified_identity::{IdentityType, QualifiedIdentity};
 use crate::model::wallet::Wallet;
-use crate::ui::theme::{ComponentStyles, DashColors, ResponseExt};
-use crate::ui::{MessageType, Screen, ScreenLike};
-use crate::ui::components::{BannerHandle, MessageBanner, OptionBannerExt};
 use crate::ui::components::top_panel::add_top_panel;
-use crate::ui::components::wallet_unlock_popup::{wallet_needs_unlock, try_open_wallet_no_password, WalletUnlockPopup, WalletUnlockResult};
+use crate::ui::components::wallet_unlock_popup::{
+    WalletUnlockPopup, WalletUnlockResult, try_open_wallet_no_password, wallet_needs_unlock,
+};
+use crate::ui::components::{BannerHandle, MessageBanner, OptionBannerExt};
 use crate::ui::identity::get_selected_wallet;
 use crate::ui::identity::keys::add_key_screen::AddKeyScreen;
 use crate::ui::identity::keys::key_info_screen::KeyInfoScreen;
-use super::tokens_screen::IdentityTokenBasicInfo;
+use crate::ui::theme::{ComponentStyles, DashColors, ResponseExt};
+use crate::ui::{MessageType, Screen, ScreenLike};
+use dash_sdk::dpp::data_contract::TokenConfiguration;
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_key::TokenDistributionType;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::accessors::v0::TokenDistributionRulesV0Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::{
+    distribution_function::DistributionFunction,
+    distribution_recipient::TokenDistributionRecipient,
+    methods::v0::TokenPerpetualDistributionV0Accessors,
+    reward_distribution_type::RewardDistributionType,
+};
+use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
+use dash_sdk::dpp::identity::{KeyType, Purpose, SecurityLevel};
+use eframe::egui::{self, Color32, Frame, Margin, Ui};
+use egui::RichText;
 
 /// States for the claim flow
 #[derive(PartialEq)]
@@ -62,12 +69,24 @@ pub struct ClaimTokensScreen {
     status: ClaimTokensStatus,
     refresh_banner: Option<BannerHandle>,
     pub app_context: Arc<AppContext>,
-    confirmation_dialog: Option<ConfirmationDialog>,
+    /// The open claim confirmation and the claim it was opened for.
+    confirmation_dialog: Option<PendingClaim>,
     selected_wallet: Option<Arc<RwLock<Wallet>>>,
     wallet_open_attempted: bool,
     wallet_unlock_popup: WalletUnlockPopup,
     // Fee result from completed operation
     completed_fee_result: Option<FeeResult>,
+    /// When the selected identity took its once-per-identity claim of this
+    /// token, as far as this device knows (a local hint; Platform has no query
+    /// for it).
+    once_per_identity_claimed_at: Option<u64>,
+}
+
+/// An open claim confirmation and the claim it names: the claim is built when
+/// the dialog opens, and that exact claim is sent on confirm.
+struct PendingClaim {
+    dialog: ConfirmationDialog,
+    action: Box<AppAction>,
 }
 
 impl ClaimTokensScreen {
@@ -84,21 +103,22 @@ impl ClaimTokensScreen {
             .find(|id| id.identity.id() == identity_token_basic_info.identity_id);
 
         let (selected_key, selected_wallet) = if let Some(ref id) = identity {
-            let identity_inner = &id.identity;
-            let key = identity_inner
-                .get_first_public_key_matching(
+            let key = id
+                .signing_key_now(KeyRequirements::new(
                     Purpose::AUTHENTICATION,
-                    HashSet::from([SecurityLevel::CRITICAL]),
-                    KeyType::all_key_types().into(),
-                    false,
-                )
+                    &[SecurityLevel::CRITICAL],
+                    SigningScope::ContractWide {
+                        contract_id: identity_token_basic_info.contract_id,
+                    },
+                ))
                 .or_else(|| {
-                    identity_inner.get_first_public_key_matching(
+                    id.signing_key_now(KeyRequirements::new(
                         Purpose::TRANSFER,
-                        HashSet::from([SecurityLevel::CRITICAL]),
-                        KeyType::all_key_types().into(),
-                        false,
-                    )
+                        &[SecurityLevel::CRITICAL],
+                        SigningScope::ContractWide {
+                            contract_id: identity_token_basic_info.contract_id,
+                        },
+                    ))
                 })
                 .cloned();
 
@@ -108,21 +128,31 @@ impl ClaimTokensScreen {
             (None, None)
         };
 
-        let distribution_type = match (
-            token_configuration
-                .distribution_rules()
-                .perpetual_distribution()
-                .is_some(),
-            token_configuration
-                .distribution_rules()
-                .pre_programmed_distribution()
-                .is_some(),
-        ) {
-            (true, true) => None,
-            (true, false) => Some(TokenDistributionType::Perpetual),
-            (false, true) => Some(TokenDistributionType::PreProgrammed),
-            (false, false) => None,
+        // Pre-select the distribution when the token has exactly one.
+        let rules = token_configuration.distribution_rules();
+        let offered: Vec<TokenDistributionType> = [
+            (
+                rules.perpetual_distribution().is_some(),
+                TokenDistributionType::Perpetual,
+            ),
+            (
+                rules.pre_programmed_distribution().is_some(),
+                TokenDistributionType::PreProgrammed,
+            ),
+            (
+                once_per_identity_amount(&token_configuration).is_some(),
+                TokenDistributionType::OncePerIdentity,
+            ),
+        ]
+        .into_iter()
+        .filter_map(|(present, kind)| present.then_some(kind))
+        .collect();
+        let distribution_type = match offered.as_slice() {
+            [only] => Some(*only),
+            _ => None,
         };
+        let once_per_identity_claimed_at =
+            load_once_per_identity_claim(app_context, &identity_token_basic_info);
 
         Self {
             identity,
@@ -141,6 +171,7 @@ impl ClaimTokensScreen {
             wallet_open_attempted: false,
             wallet_unlock_popup: WalletUnlockPopup::new(),
             completed_fee_result: None,
+            once_per_identity_claimed_at,
         }
     }
 
@@ -166,6 +197,7 @@ impl ClaimTokensScreen {
             .distribution_rules()
             .pre_programmed_distribution()
             .is_some();
+        let show_once_per_identity = once_per_identity_amount(&self.token_configuration).is_some();
         ui.horizontal(|ui| {
             ui.label("Select Distribution Type:");
             egui::ComboBox::from_id_salt("claim_distribution_type_selector")
@@ -176,7 +208,7 @@ impl ClaimTokensScreen {
                     None => "Select a type".to_string(),
                 })
                 .show_ui(ui, |ui| {
-                    if !show_perpetual && !show_pre_programmed {
+                    if !show_perpetual && !show_pre_programmed && !show_once_per_identity {
                         ui.label("No distributions to potentially claim for this token");
                     }
                     if show_perpetual {
@@ -193,11 +225,71 @@ impl ClaimTokensScreen {
                             "PreProgrammed",
                         );
                     }
+                    if show_once_per_identity {
+                        ui.selectable_value(
+                            &mut self.distribution_type,
+                            Some(TokenDistributionType::OncePerIdentity),
+                            "Once per identity",
+                        );
+                    }
                 });
         });
     }
 
-    fn show_confirmation_popup(&mut self, ui: &mut Ui) -> AppAction {
+    /// What a once-per-identity claim pays, and whether this identity already
+    /// took it.
+    fn render_once_per_identity_info(&mut self, ui: &mut Ui) -> AppAction {
+        let Some(amount) = once_per_identity_amount(&self.token_configuration) else {
+            return AppAction::None;
+        };
+        let mut action = AppAction::None;
+        ui.heading("Once-per-identity distribution");
+        ui.add_space(5.0);
+        ui.label(format!(
+            "Every identity can claim {amount} base tokens from this distribution, once."
+        ));
+        // Advisory only: the hint may be wrong (e.g. recorded on a claim the
+        // network later dropped), so it warns but never blocks a claim.
+        if let Some(claimed_at_ms) = self.once_per_identity_claimed_at {
+            let dark_mode = ui.style().visuals.dark_mode;
+            ui.label(
+                RichText::new(format!(
+                    "This identity may have already claimed its share on {date}. You can still claim; the network refuses a second claim.",
+                    date = local_date_time_from_unix_millis(claimed_at_ms)
+                ))
+                .color(DashColors::warning_color(dark_mode)),
+            );
+            if ui.button("Dismiss").clicked() {
+                action = self.dismiss_claim_note();
+            }
+        }
+        ui.add_space(10.0);
+        action
+    }
+
+    /// The pair this screen's once-per-identity note is about.
+    fn claim_note_pair(&self) -> IdentityTokenIdentifier {
+        IdentityTokenIdentifier {
+            identity_id: self.identity_token_basic_info.identity_id,
+            token_id: self.identity_token_basic_info.token_id,
+        }
+    }
+
+    /// Forget the once-per-identity note. A backend task saves the dismissal;
+    /// the note goes away when it reports success.
+    fn dismiss_claim_note(&mut self) -> AppAction {
+        AppAction::BackendTask(BackendTask::TokenTask(Box::new(
+            TokenTask::ClearOncePerIdentityClaimHint(self.claim_note_pair()),
+        )))
+    }
+
+    /// Ask the user to confirm the claim of the selected distribution. The
+    /// claim is built now and the dialog blocks the form behind it, so what
+    /// the user confirms is what is sent.
+    fn open_claim_confirmation(&mut self) {
+        let Some(distribution_type) = self.distribution_type else {
+            return;
+        };
         let Some(identity) = self.identity.clone() else {
             MessageBanner::set_global(
                 self.app_context.egui_ctx(),
@@ -205,61 +297,51 @@ impl ClaimTokensScreen {
                 MessageType::Error,
             );
             self.status = ClaimTokensStatus::Error;
-            return AppAction::None;
+            return;
         };
-        let distribution_type = self
-            .distribution_type
-            .unwrap_or(TokenDistributionType::Perpetual);
-
-        let dialog = self.confirmation_dialog.get_or_insert_with(|| {
-            ConfirmationDialog::new(
+        let Some(signing_key) = self.selected_key.clone() else {
+            MessageBanner::set_global(
+                self.app_context.egui_ctx(),
+                "No signing key selected",
+                MessageType::Error,
+            );
+            self.status = ClaimTokensStatus::Error;
+            return;
+        };
+        let action = AppAction::BackendTasks(
+            vec![
+                BackendTask::TokenTask(Box::new(TokenTask::ClaimTokens {
+                    data_contract: Arc::new(self.token_contract.contract.clone()),
+                    token_position: self.identity_token_basic_info.token_position,
+                    actor_identity: identity,
+                    distribution_type,
+                    signing_key,
+                    public_note: self.public_note.clone(),
+                })),
+                BackendTask::TokenTask(Box::new(TokenTask::QueryMyTokenBalances)),
+            ],
+            BackendTasksExecutionMode::Sequential,
+        );
+        self.confirmation_dialog = Some(PendingClaim {
+            dialog: ConfirmationDialog::new(
                 "Confirm Claim".to_string(),
-                "Are you sure you want to claim tokens for this contract?".to_string(),
+                claim_confirmation_text(
+                    distribution_type,
+                    &self.identity_token_basic_info.token_alias,
+                    once_per_identity_amount(&self.token_configuration),
+                ),
             )
+            .blocks_input(true),
+            action: Box::new(action),
         });
+    }
 
-        match dialog.show(ui).inner.dialog_response {
-            Some(ConfirmationStatus::Confirmed) => {
-                self.confirmation_dialog = None;
-
-                let signing_key = match self.selected_key.clone() {
-                    Some(key) => key,
-                    None => {
-                        MessageBanner::set_global(
-                            self.app_context.egui_ctx(),
-                            "No signing key selected",
-                            MessageType::Error,
-                        );
-                        self.status = ClaimTokensStatus::Error;
-                        return AppAction::None;
-                    }
-                };
-
-                self.status = ClaimTokensStatus::WaitingForResult;
-                self.refresh_banner.take_and_clear();
-                let handle = MessageBanner::set_global(
-                    self.app_context.egui_ctx(),
-                    "Claiming tokens...",
-                    MessageType::Info,
-                );
-                handle.with_elapsed();
-                self.refresh_banner = Some(handle);
-
-                AppAction::BackendTasks(
-                    vec![
-                        BackendTask::TokenTask(Box::new(TokenTask::ClaimTokens {
-                            data_contract: Arc::new(self.token_contract.contract.clone()),
-                            token_position: self.identity_token_basic_info.token_position,
-                            actor_identity: identity,
-                            distribution_type,
-                            signing_key,
-                            public_note: self.public_note.clone(),
-                        })),
-                        BackendTask::TokenTask(Box::new(TokenTask::QueryMyTokenBalances)),
-                    ],
-                    BackendTasksExecutionMode::Sequential,
-                )
-            }
+    fn show_confirmation_popup(&mut self, ui: &mut Ui) -> AppAction {
+        let Some(pending) = self.confirmation_dialog.as_mut() else {
+            return AppAction::None;
+        };
+        match pending.dialog.show(ui).inner.dialog_response {
+            Some(ConfirmationStatus::Confirmed) => self.confirm_claim(),
             Some(ConfirmationStatus::Canceled) => {
                 self.confirmation_dialog = None;
                 AppAction::None
@@ -268,6 +350,23 @@ impl ClaimTokensScreen {
         }
     }
 
+    /// The user confirmed: send the claim the confirmation was opened for.
+    fn confirm_claim(&mut self) -> AppAction {
+        let Some(pending) = self.confirmation_dialog.take() else {
+            return AppAction::None;
+        };
+        self.status = ClaimTokensStatus::WaitingForResult;
+        self.refresh_banner.take_and_clear();
+        let handle = MessageBanner::set_global(
+            self.app_context.egui_ctx(),
+            "Claiming tokens...",
+            MessageType::Info,
+        );
+        handle.with_elapsed();
+        self.refresh_banner = Some(handle);
+        *pending.action
+    }
+
     fn show_success_screen(&self, ui: &mut Ui) -> AppAction {
         crate::ui::helpers::show_success_screen_with_info(
             ui,
@@ -289,9 +388,22 @@ impl ScreenLike for ClaimTokensScreen {
 
     fn display_task_result(&mut self, backend_task_success_result: BackendTaskSuccessResult) {
         self.refresh_banner.take_and_clear();
-        if let BackendTaskSuccessResult::ClaimedTokens(fee_result) = backend_task_success_result {
-            self.completed_fee_result = Some(fee_result);
-            self.status = ClaimTokensStatus::Complete;
+        match backend_task_success_result {
+            BackendTaskSuccessResult::ClaimedTokens(fee_result) => {
+                self.completed_fee_result = Some(fee_result);
+                self.status = ClaimTokensStatus::Complete;
+                // A successful once-per-identity claim records its hint.
+                self.once_per_identity_claimed_at = load_once_per_identity_claim(
+                    &self.app_context,
+                    &self.identity_token_basic_info,
+                );
+            }
+            BackendTaskSuccessResult::OncePerIdentityClaimHintCleared(pair)
+                if pair == self.claim_note_pair() =>
+            {
+                self.once_per_identity_claimed_at = None;
+            }
+            _ => {}
         }
     }
 
@@ -304,6 +416,8 @@ impl ScreenLike for ClaimTokensScreen {
         {
             self.identity = Some(updated);
         }
+        self.once_per_identity_claimed_at =
+            load_once_per_identity_claim(&self.app_context, &self.identity_token_basic_info);
     }
 
     fn ui(&mut self, ui: &mut egui::Ui) -> AppAction {
@@ -447,6 +561,9 @@ impl ScreenLike for ClaimTokensScreen {
                         identity,
                         &mut self.selected_key,
                         TransactionType::TokenClaim,
+                        SigningScope::ContractWide {
+                            contract_id: self.identity_token_basic_info.contract_id,
+                        },
                     );
                     ui.add_space(10.0);
                 }
@@ -564,6 +681,10 @@ impl ScreenLike for ClaimTokensScreen {
                     ui.add_space(10.0);
                 }
 
+                if self.distribution_type == Some(TokenDistributionType::OncePerIdentity) {
+                    action |= self.render_once_per_identity_info(ui);
+                }
+
                 // Fee estimation display
                 let fee_estimator = self.app_context.fee_estimator();
                 let estimated_fee = fee_estimator.estimate_document_batch(1); // Token operations are document batch transitions
@@ -600,10 +721,7 @@ impl ScreenLike for ClaimTokensScreen {
                         self.status = ClaimTokensStatus::Error;
                         return;
                     } else if self.confirmation_dialog.is_none() {
-                        self.confirmation_dialog = Some(ConfirmationDialog::new(
-                            "Confirm Claim".to_string(),
-                            "Are you sure you want to claim tokens for this contract?".to_string(),
-                        ));
+                        self.open_claim_confirmation();
                     }
                 }
 
@@ -632,3 +750,205 @@ impl ScreenLike for ClaimTokensScreen {
         action
     }
 }
+
+/// The claim confirmation text: which distribution of `token` is claimed and,
+/// for the once-per-identity distribution, how much.
+fn claim_confirmation_text(
+    distribution_type: TokenDistributionType,
+    token: &str,
+    once_per_identity_amount: Option<dash_sdk::dpp::balances::credits::TokenAmount>,
+) -> String {
+    match (distribution_type, once_per_identity_amount) {
+        (TokenDistributionType::Perpetual, _) => format!(
+            "You are about to claim the {token} rewards this identity has earned from the perpetual distribution."
+        ),
+        (TokenDistributionType::PreProgrammed, _) => format!(
+            "You are about to claim the {token} this identity is due from the pre-programmed distribution."
+        ),
+        (TokenDistributionType::OncePerIdentity, Some(amount)) => format!(
+            "You are about to claim this identity's one-time share of {amount} base {token} tokens from the once-per-identity distribution. Each identity can claim it only once."
+        ),
+        (TokenDistributionType::OncePerIdentity, None) => format!(
+            "You are about to claim this identity's one-time share of {token} from the once-per-identity distribution. Each identity can claim it only once."
+        ),
+    }
+}
+
+/// The once-per-identity claim hint for the screen's identity and token. A
+/// read failure only hides the hint (Platform still refuses a second claim),
+/// so it is logged and treated as unknown.
+fn load_once_per_identity_claim(
+    app_context: &AppContext,
+    info: &IdentityTokenBasicInfo,
+) -> Option<u64> {
+    app_context
+        .once_per_identity_claimed_at(&info.token_id, &info.identity_id)
+        .unwrap_or_else(|error| {
+            tracing::warn!(?error, "Could not read the once-per-identity claim hint");
+            None
+        })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::model::qualified_identity::IdentityStatus;
+    use crate::ui::tokens::tokens_screen::IdentityTokenBasicInfo;
+    use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+    use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::TokenDistributionRules;
+    use dash_sdk::dpp::identity::Identity;
+    use dash_sdk::dpp::identity::identity_public_key::v0::IdentityPublicKeyV0;
+    use dash_sdk::dpp::system_data_contracts::{SystemDataContract, load_system_data_contract};
+    use dash_sdk::dpp::version::PlatformVersion;
+    use dash_sdk::platform::{Identifier, IdentityPublicKey};
+
+    /// A token offering only a once-per-identity distribution of `amount`.
+    fn once_per_identity_token(amount: u64) -> TokenConfiguration {
+        let mut config = TokenConfigurationV0::default_most_restrictive();
+        let TokenDistributionRules::V0(rules) = config.distribution_rules.clone() else {
+            panic!("the default rules are version 0");
+        };
+        config.distribution_rules =
+            crate::model::token::distribution_rules_with_once_per_identity(rules, Some(amount));
+        config.into()
+    }
+
+    fn screen_for(config: TokenConfiguration) -> (ClaimTokensScreen, tempfile::TempDir) {
+        let dir = tempfile::tempdir().unwrap();
+        let context = crate::context::test_support::test_app_context(dir.path());
+        let contract = QualifiedContract {
+            contract: load_system_data_contract(
+                SystemDataContract::DPNS,
+                PlatformVersion::latest(),
+            )
+            .expect("a contract"),
+            alias: None,
+        };
+        let info = IdentityTokenBasicInfo {
+            token_id: Identifier::new([0x70; 32]),
+            token_alias: "Gold".to_string(),
+            identity_id: Identifier::new([0x71; 32]),
+            contract_id: contract.contract.id(),
+            token_position: 0,
+        };
+        let mut screen = ClaimTokensScreen::new(info, contract, config, &context);
+        screen.identity = Some(QualifiedIdentity {
+            identity: Identity::create_basic_identity(
+                Identifier::new([0x71; 32]),
+                PlatformVersion::latest(),
+            )
+            .expect("basic identity"),
+            associated_voter_identity: None,
+            associated_operator_identity: None,
+            associated_owner_key_id: None,
+            identity_type: IdentityType::User,
+            alias: None,
+            private_keys: Default::default(),
+            dpns_names: vec![],
+            associated_wallets: Default::default(),
+            secret_access: None,
+            wallet_index: None,
+            top_ups: Default::default(),
+            status: IdentityStatus::Active,
+            network: dash_sdk::dpp::dashcore::Network::Testnet,
+        });
+        screen.selected_key = Some(IdentityPublicKey::V0(IdentityPublicKeyV0 {
+            id: 1,
+            purpose: Purpose::AUTHENTICATION,
+            security_level: SecurityLevel::CRITICAL,
+            contract_bounds: None,
+            key_type: KeyType::ECDSA_SECP256K1,
+            read_only: false,
+            data: vec![2; 33].into(),
+            disabled_at: None,
+        }));
+        (screen, dir)
+    }
+
+    /// Regression: the confirmation asked only whether to "claim tokens for
+    /// this contract", so the user could not see which distribution, or for a
+    /// one-time claim how much, they were about to spend their claim on.
+    #[test]
+    fn the_claim_confirmation_names_the_distribution_and_the_amount() {
+        let text =
+            claim_confirmation_text(TokenDistributionType::OncePerIdentity, "Gold", Some(25));
+        assert!(text.contains("Gold"), "{text}");
+        assert!(text.contains("once-per-identity"), "{text}");
+        assert!(text.contains("25"), "{text}");
+        for (kind, name) in [
+            (TokenDistributionType::Perpetual, "perpetual"),
+            (TokenDistributionType::PreProgrammed, "pre-programmed"),
+        ] {
+            let text = claim_confirmation_text(kind, "Gold", None);
+            assert!(text.contains(name), "{text}");
+            assert!(text.contains("Gold"), "{text}");
+        }
+    }
+
+    /// Regression: Confirm read the distribution at confirm time, so one
+    /// changed while the dialog was open was claimed instead of the one shown.
+    #[test]
+    fn confirming_claims_the_distribution_the_confirmation_named() {
+        let (mut screen, _dir) = screen_for(once_per_identity_token(25));
+        assert_eq!(
+            screen.distribution_type,
+            Some(TokenDistributionType::OncePerIdentity)
+        );
+        screen.open_claim_confirmation();
+        screen.distribution_type = Some(TokenDistributionType::Perpetual);
+
+        let AppAction::BackendTasks(tasks, _) = screen.confirm_claim() else {
+            panic!("the confirmed claim is sent");
+        };
+        let Some(BackendTask::TokenTask(task)) = tasks.first() else {
+            panic!("the claim comes first");
+        };
+        let TokenTask::ClaimTokens {
+            distribution_type, ..
+        } = task.as_ref()
+        else {
+            panic!("a claim was confirmed");
+        };
+        assert_eq!(*distribution_type, TokenDistributionType::OncePerIdentity);
+    }
+
+    /// Dismissing the claim note is saved by a backend task, not from the
+    /// click; the note goes away once that task reports success for this
+    /// identity and token.
+    #[test]
+    fn dismissing_the_claim_note_is_saved_by_a_backend_task() {
+        let (mut screen, _dir) = screen_for(once_per_identity_token(25));
+        screen.once_per_identity_claimed_at = Some(1_758_140_722_000);
+        let pair = IdentityTokenIdentifier {
+            identity_id: screen.identity_token_basic_info.identity_id,
+            token_id: screen.identity_token_basic_info.token_id,
+        };
+
+        let AppAction::BackendTask(BackendTask::TokenTask(task)) = screen.dismiss_claim_note()
+        else {
+            panic!("the dismissal is a backend task");
+        };
+        assert!(matches!(
+            task.as_ref(),
+            TokenTask::ClearOncePerIdentityClaimHint(sent) if *sent == pair
+        ));
+        assert!(
+            screen.once_per_identity_claimed_at.is_some(),
+            "the note stays until the dismissal is saved"
+        );
+
+        let other = IdentityTokenIdentifier {
+            identity_id: Identifier::new([0x99; 32]),
+            ..pair
+        };
+        screen.display_task_result(BackendTaskSuccessResult::OncePerIdentityClaimHintCleared(
+            other,
+        ));
+        assert!(screen.once_per_identity_claimed_at.is_some());
+
+        screen.display_task_result(BackendTaskSuccessResult::OncePerIdentityClaimHintCleared(
+            pair,
+        ));
+        assert_eq!(screen.once_per_identity_claimed_at, None);
+    }
+}
diff --git a/src/ui/tokens/direct_token_purchase_screen.rs b/src/ui/tokens/direct_token_purchase_screen.rs
index ecd1724ec..5089da9f8 100644
--- a/src/ui/tokens/direct_token_purchase_screen.rs
+++ b/src/ui/tokens/direct_token_purchase_screen.rs
@@ -1,3 +1,5 @@
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use std::collections::HashSet;
 use std::sync::{Arc, RwLock};
 
@@ -82,13 +84,13 @@ impl PurchaseTokenScreen {
     pub fn new(identity_token_info: IdentityTokenInfo, app_context: &Arc<AppContext>) -> Self {
         let possible_key = identity_token_info
             .identity
-            .identity
-            .get_first_public_key_matching(
+            .signing_key_now(KeyRequirements::new(
                 Purpose::AUTHENTICATION,
-                HashSet::from([SecurityLevel::CRITICAL]),
-                KeyType::all_key_types().into(),
-                false,
-            )
+                &[SecurityLevel::CRITICAL],
+                SigningScope::ContractWide {
+                    contract_id: identity_token_info.data_contract.contract.id(),
+                },
+            ))
             .cloned();
 
         // Attempt to get an unlocked wallet reference
@@ -533,6 +535,9 @@ impl ScreenLike for PurchaseTokenScreen {
                         &self.identity_token_info.identity,
                         &mut self.selected_key,
                         TransactionType::TokenAction,
+                        SigningScope::ContractWide {
+                            contract_id: self.identity_token_info.data_contract.contract.id(),
+                        },
                     );
                     ui.add_space(10.0);
                     ui.separator();
diff --git a/src/ui/tokens/set_token_price_screen.rs b/src/ui/tokens/set_token_price_screen.rs
index 373a89941..365faf6eb 100644
--- a/src/ui/tokens/set_token_price_screen.rs
+++ b/src/ui/tokens/set_token_price_screen.rs
@@ -5,6 +5,7 @@ use crate::backend_task::{BackendTask, BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
 use crate::model::amount::{Amount, DASH_DECIMAL_PLACES};
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
 use crate::ui::components::ComponentResponse;
@@ -171,13 +172,13 @@ impl SetTokenPriceScreen {
     pub fn new(identity_token_info: IdentityTokenInfo, app_context: &Arc<AppContext>) -> Self {
         let possible_key: Option<&IdentityPublicKey> = identity_token_info
             .identity
-            .identity
-            .get_first_public_key_matching(
+            .signing_key_now(KeyRequirements::new(
                 Purpose::AUTHENTICATION,
-                HashSet::from([SecurityLevel::CRITICAL]),
-                KeyType::all_key_types().into(),
-                false,
-            );
+                &[SecurityLevel::CRITICAL],
+                SigningScope::ContractWide {
+                    contract_id: identity_token_info.data_contract.contract.id(),
+                },
+            ));
 
         let set_error_banner = |msg: &str| super::set_error_banner(app_context, msg);
 
@@ -1011,6 +1012,9 @@ impl ScreenLike for SetTokenPriceScreen {
                         &self.identity_token_info.identity,
                         &mut self.selected_key,
                         TransactionType::TokenAction,
+                        SigningScope::ContractWide {
+                            contract_id: self.identity_token_info.data_contract.contract.id(),
+                        },
                     );
                     ui.add_space(10.0);
                     ui.separator();
diff --git a/src/ui/tokens/token_action_screen.rs b/src/ui/tokens/token_action_screen.rs
index 9c771dc9a..9cec1f51c 100644
--- a/src/ui/tokens/token_action_screen.rs
+++ b/src/ui/tokens/token_action_screen.rs
@@ -11,6 +11,7 @@ use crate::app::AppAction;
 use crate::backend_task::{BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
 use crate::ui::components::component_trait::Component;
@@ -33,6 +34,7 @@ use crate::ui::theme::{ComponentStyles, DashColors, ResponseExt};
 use crate::ui::tokens::validate_signing_key;
 use crate::ui::{MessageType, Screen, ScreenLike};
 use dash_sdk::dpp::data_contract::GroupContractPosition;
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration::TokenConfiguration;
 use dash_sdk::dpp::data_contract::change_control_rules::authorized_action_takers::AuthorizedActionTakers;
 use dash_sdk::dpp::data_contract::group::Group;
@@ -174,13 +176,13 @@ impl<A: TokenAction> TokenActionScreen<A> {
     pub fn new(identity_token_info: IdentityTokenInfo, app_context: &Arc<AppContext>) -> Self {
         let possible_key = identity_token_info
             .identity
-            .identity
-            .get_first_public_key_matching(
+            .signing_key_now(KeyRequirements::new(
                 Purpose::AUTHENTICATION,
-                HashSet::from([SecurityLevel::CRITICAL]),
-                KeyType::all_key_types().into(),
-                false,
-            )
+                &[SecurityLevel::CRITICAL],
+                SigningScope::ContractWide {
+                    contract_id: identity_token_info.data_contract.contract.id(),
+                },
+            ))
             .cloned();
 
         let takers = A::authorized_takers(&identity_token_info.token_config);
@@ -533,6 +535,9 @@ impl<A: TokenAction> ScreenLike for TokenActionScreen<A> {
                     &self.common.identity_token_info.identity,
                     &mut self.common.selected_key,
                     TransactionType::TokenAction,
+                    SigningScope::ContractWide {
+                        contract_id: self.common.identity_token_info.data_contract.contract.id(),
+                    },
                 );
                 ui.add_space(10.0);
                 ui.separator();
diff --git a/src/ui/tokens/tokens_screen/distributions.rs b/src/ui/tokens/tokens_screen/distributions.rs
index 6a0563031..4092af2e6 100644
--- a/src/ui/tokens/tokens_screen/distributions.rs
+++ b/src/ui/tokens/tokens_screen/distributions.rs
@@ -1,3 +1,5 @@
+use crate::context::feature_gate::FeatureGate;
+use crate::model::token::parse_once_per_identity_amount;
 use crate::ui::theme::DashColors;
 use crate::ui::tokens::tokens_screen::{
     DistributionEntry, DistributionFunctionUI, IntervalTimeUnit,
@@ -1078,7 +1080,56 @@ Emits tokens in fixed amounts for specific intervals.
                     }
                 });
             }
+
+            ui.separator();
+
+            // ONCE-PER-IDENTITY DISTRIBUTION (protocol version 14)
+            self.render_once_per_identity_distribution(ui);
             });
         }
     }
 }
+
+impl TokensScreen {
+    /// The once-per-identity distribution option: a fixed amount every
+    /// identity may claim exactly once. Offered only where the connected
+    /// network accepts it; the registration fee grows when it is on.
+    fn render_once_per_identity_distribution(&mut self, ui: &mut egui::Ui) {
+        let available =
+            FeatureGate::TokenOncePerIdentityDistribution.is_available(&self.app_context);
+        if !available {
+            self.enable_once_per_identity_distribution = false;
+        }
+        ui.add_enabled_ui(available, |ui| {
+            ui.checkbox(
+                &mut self.enable_once_per_identity_distribution,
+                "Enable Once-per-identity Distribution",
+            )
+            .on_hover_text("Every identity can claim a fixed amount of this token, exactly once.")
+            .on_disabled_hover_text(
+                "The connected network does not accept once-per-identity distributions yet.",
+            );
+        });
+
+        if self.enable_once_per_identity_distribution {
+            ui.add_space(2.0);
+            ui.horizontal(|ui| {
+                ui.label("Amount each identity can claim (base tokens):");
+                let response = ui.text_edit_singleline(&mut self.once_per_identity_amount_input);
+                if response.changed() {
+                    sanitize_u64(&mut self.once_per_identity_amount_input);
+                    self.once_per_identity_amount_error = None;
+                }
+                if response.lost_focus() && !self.once_per_identity_amount_input.trim().is_empty() {
+                    self.once_per_identity_amount_error =
+                        parse_once_per_identity_amount(&self.once_per_identity_amount_input)
+                            .err()
+                            .map(|error| error.to_string());
+                }
+            });
+            if let Some(error) = &self.once_per_identity_amount_error {
+                ui.colored_label(DashColors::VALIDATION_WARNING, error);
+            }
+        }
+    }
+}
diff --git a/src/ui/tokens/tokens_screen/mod.rs b/src/ui/tokens/tokens_screen/mod.rs
index 1beb76bcf..35270f43a 100644
--- a/src/ui/tokens/tokens_screen/mod.rs
+++ b/src/ui/tokens/tokens_screen/mod.rs
@@ -18,27 +18,38 @@ use tracing::error;
 
 use serde_json;
 
+use crate::app::BackendTasksExecutionMode;
+use crate::backend_task::contract::ContractTask;
+use crate::backend_task::error::TaskError;
+use crate::backend_task::tokens::TokenTask;
+use crate::backend_task::{BackendTask, BackendTaskContext};
+use crate::ui::theme::{DashColors, ResponseExt};
 use chrono::{DateTime, Duration, Utc};
-use dash_sdk::dpp::balances::credits::{TokenAmount};
+use dash_sdk::dpp::balances::credits::TokenAmount;
+use dash_sdk::dpp::data_contract::GroupContractPosition;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
-use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::{TokenConfigurationPresetFeatures, TokenConfigurationV0};
-use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::v0::TokenDistributionRulesV0;
+use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::{
+    TokenConfigurationPresetFeatures, TokenConfigurationV0,
+};
 use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::TokenDistributionRules;
+use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::v0::TokenDistributionRulesV0;
 use dash_sdk::dpp::data_contract::associated_token::token_keeps_history_rules::TokenKeepsHistoryRules;
 use dash_sdk::dpp::data_contract::associated_token::token_keeps_history_rules::v0::TokenKeepsHistoryRulesV0;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_function::DistributionFunction;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_function::evaluate_interval::IntervalEvaluationExplanation;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::distribution_recipient::TokenDistributionRecipient;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::reward_distribution_type::RewardDistributionType;
-use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::v0::TokenPerpetualDistributionV0;
 use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::TokenPerpetualDistribution;
-use dash_sdk::dpp::data_contract::associated_token::token_pre_programmed_distribution::v0::TokenPreProgrammedDistributionV0;
+use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::v0::TokenPerpetualDistributionV0;
+use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::{
+    distribution_function::{
+        DistributionFunction, evaluate_interval::IntervalEvaluationExplanation,
+    },
+    distribution_recipient::TokenDistributionRecipient,
+    reward_distribution_type::RewardDistributionType,
+};
 use dash_sdk::dpp::data_contract::associated_token::token_pre_programmed_distribution::TokenPreProgrammedDistribution;
+use dash_sdk::dpp::data_contract::associated_token::token_pre_programmed_distribution::v0::TokenPreProgrammedDistributionV0;
+use dash_sdk::dpp::data_contract::change_control_rules::ChangeControlRules;
 use dash_sdk::dpp::data_contract::change_control_rules::authorized_action_takers::AuthorizedActionTakers;
 use dash_sdk::dpp::data_contract::change_control_rules::v0::ChangeControlRulesV0;
-use dash_sdk::dpp::data_contract::change_control_rules::ChangeControlRules;
 use dash_sdk::dpp::data_contract::group::Group;
-use dash_sdk::dpp::data_contract::GroupContractPosition;
 use dash_sdk::dpp::fee::Credits;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
@@ -47,15 +58,9 @@ use dash_sdk::platform::proto::get_documents_request::get_documents_request_v0::
 use dash_sdk::platform::{Identifier, IdentityPublicKey};
 use dash_sdk::query_types::IndexMap;
 use eframe::egui::{self, Color32, Ui};
-use crate::ui::theme::{DashColors, ResponseExt};
 use egui::{Checkbox, ColorImage, ComboBox, Response, RichText, TextEdit, TextureHandle};
 use enum_iterator::Sequence;
 use image::ImageReader;
-use crate::app::BackendTasksExecutionMode;
-use crate::backend_task::contract::ContractTask;
-use crate::backend_task::error::TaskError;
-use crate::backend_task::tokens::TokenTask;
-use crate::backend_task::{BackendTask, BackendTaskContext};
 
 use crate::app::{AppAction, DesiredAppAction};
 use crate::context::AppContext;
@@ -1007,6 +1012,7 @@ pub struct TokenBuildArgs {
     pub document_schemas: Option<BTreeMap<String, serde_json::Value>>,
     pub marketplace_rules: ChangeControlRules,
     pub change_direct_purchase_pricing_rules: ChangeControlRules,
+    pub transferable: bool,
 }
 
 impl TokenBuildArgs {
@@ -1038,6 +1044,7 @@ impl TokenBuildArgs {
             groups: self.groups,
             document_schemas: self.document_schemas,
             marketplace_rules: self.marketplace_rules,
+            transferable: self.transferable,
         }
     }
 }
@@ -1148,6 +1155,9 @@ pub struct TokensScreen {
     max_supply_amount: Option<Amount>,
     max_supply_input: Option<AmountInput>,
     start_as_paused_input: bool,
+    /// Whether holders may send the token to other identities. Turning it off
+    /// needs a network that accepts version 1 token configurations.
+    transferable_input: bool,
     main_control_group_input: String,
     show_token_creator_confirmation_popup: bool,
     token_creator_confirmation_dialog: Option<ConfirmationDialog>,
@@ -1194,6 +1204,13 @@ pub struct TokensScreen {
     pub enable_pre_programmed_distribution: bool,
     pub pre_programmed_distributions: Vec<DistributionEntry>,
 
+    // Once-per-identity distribution (protocol version 14)
+    pub enable_once_per_identity_distribution: bool,
+    /// The amount, in base token units, every identity may claim once.
+    pub once_per_identity_amount_input: String,
+    /// Why the once-per-identity amount is not valid, shown under the field.
+    once_per_identity_amount_error: Option<String>,
+
     // New Tokens Destination Identity
     pub new_tokens_destination_identity_should_default_to_contract_owner: bool,
     pub new_tokens_destination_other_identity_enabled: bool,
@@ -1513,6 +1530,7 @@ impl TokensScreen {
             max_supply_amount: None,
             max_supply_input: None,
             start_as_paused_input: false,
+            transferable_input: true,
             show_advanced_keeps_history: false,
             token_advanced_keeps_history: TokenKeepsHistoryRulesV0::default_for_keeping_all_history(
                 true,
@@ -1620,6 +1638,9 @@ impl TokensScreen {
 
             // Pre-programmed distribution
             enable_pre_programmed_distribution: false,
+            enable_once_per_identity_distribution: false,
+            once_per_identity_amount_input: String::new(),
+            once_per_identity_amount_error: None,
             // Possibly let them paste in a JSON schedule, or some minimal UI for (timestamp -> {id -> amount}).
             // For an example, we'll keep it simple:
             pre_programmed_distributions: Vec::new(),
@@ -1874,9 +1895,12 @@ impl TokensScreen {
     }
 
     fn estimate_registration_cost(&self) -> Credits {
+        // Every term from one fee table: the one of the version the network
+        // confirmed, not the SDK's starting seed (they differ while a network
+        // moves to a new protocol version).
         let registration_fees = &self
             .app_context
-            .platform_version()
+            .connected_platform_version()
             .fee_version
             .data_contract_registration;
         let mut fee = registration_fees.base_contract_registration_fee;
@@ -1887,6 +1911,9 @@ impl TokensScreen {
         if self.enable_pre_programmed_distribution {
             fee += registration_fees.token_uses_pre_programmed_distribution_fee;
         }
+        if self.enable_once_per_identity_distribution {
+            fee += registration_fees.token_uses_once_per_identity_distribution_fee;
+        }
         let contract_keywords = if self.contract_keywords_input.trim().is_empty() {
             Vec::new()
         } else {
@@ -2304,6 +2331,7 @@ impl TokensScreen {
         self.max_supply_input = None;
         self.max_supply_amount = None;
         self.start_as_paused_input = false;
+        self.transferable_input = true;
         self.should_capitalize_input = true;
         self.token_advanced_keeps_history =
             TokenKeepsHistoryRulesV0::default_for_keeping_all_history(true);
@@ -2387,6 +2415,9 @@ impl TokensScreen {
         self.perpetual_distribution_rules = ChangeControlRulesUI::default();
         self.enable_pre_programmed_distribution = false;
         self.pre_programmed_distributions = Vec::new();
+        self.enable_once_per_identity_distribution = false;
+        self.once_per_identity_amount_input = String::new();
+        self.once_per_identity_amount_error = None;
         self.new_tokens_destination_other_identity_enabled = false;
         self.new_tokens_destination_identity_rules = ChangeControlRulesUI::default();
         self.new_tokens_destination_other_identity = "".to_string();
@@ -3102,11 +3133,13 @@ mod tests {
 
     use super::*;
     use dash_sdk::dpp::dashcore::Network;
-    use dash_sdk::dpp::data_contract::associated_token::token_configuration_convention::TokenConfigurationConvention;
-    use dash_sdk::dpp::data_contract::associated_token::token_configuration_localization::accessors::v0::TokenConfigurationLocalizationV0Getters;
-    use dash_sdk::dpp::data_contract::associated_token::token_keeps_history_rules::TokenKeepsHistoryRules;
-    use dash_sdk::dpp::data_contract::group::accessors::v0::GroupV0Getters;
     use dash_sdk::dpp::data_contract::TokenConfiguration;
+    use dash_sdk::dpp::data_contract::associated_token::{
+        token_configuration_convention::TokenConfigurationConvention,
+        token_configuration_localization::accessors::v0::TokenConfigurationLocalizationV0Getters,
+        token_keeps_history_rules::TokenKeepsHistoryRules,
+    };
+    use dash_sdk::dpp::data_contract::group::accessors::v0::GroupV0Getters;
     use dash_sdk::dpp::identifier::Identifier;
     use dash_sdk::platform::{DataContract, Identity};
 
@@ -3444,7 +3477,9 @@ mod tests {
         let (token_pos, token_config) = contract_v1.tokens.iter().next().unwrap();
         assert_eq!({ *token_pos }, 0, "Should be at position 0 by default");
 
-        let TokenConfiguration::V0(token_v0) = token_config;
+        let TokenConfiguration::V0(token_v0) = token_config else {
+            panic!("the existing token builder must retain V0 configuration");
+        };
         let TokenConfigurationConvention::V0(conv_v0) = &token_v0.conventions;
 
         assert_eq!(conv_v0.decimals, 8, "Decimals from UI not matched");
@@ -3647,7 +3682,9 @@ mod tests {
             .expect("Should build successfully");
         let contract_v1 = data_contract.as_v1().expect("Expected DataContract::V1");
 
-        let TokenConfiguration::V0(ref token_v0) = contract_v1.tokens[&0u16];
+        let TokenConfiguration::V0(ref token_v0) = contract_v1.tokens[&0u16] else {
+            panic!("the existing token builder must retain V0 configuration");
+        };
         let TokenDistributionRules::V0(dist_rules_v0) = &token_v0.distribution_rules else {
             panic!("rules without a once-per-identity distribution stay V0");
         };
@@ -3670,6 +3707,238 @@ mod tests {
         }
     }
 
+    #[test]
+    #[expect(
+        clippy::disallowed_methods,
+        reason = "test fixture setup/teardown outside any production deletion path"
+    )]
+    fn once_per_identity_distribution_builds_version_1_rules_only_on_protocol_14() {
+        let db_file_path = "test_db_once_per_identity_distribution";
+        let _ = std::fs::remove_file(db_file_path); // Clean up from previous runs
+        let db = Arc::new(Database::new(db_file_path).unwrap());
+        // Force legacy wallet-family schema for tests — `initialize`
+        // gates these out for truly-fresh installs post-T-DEV-01.
+        db.create_tables(true).unwrap();
+        db.set_default_version().unwrap();
+
+        ensure_test_env();
+        // The upstream SQLite persister that backs `app_kv` is not safe
+        // to re-open concurrently from multiple tests on the same file,
+        // so each test gets its own scratch directory. Production opens
+        // a single persister per process via `AppContext::open_app_kv`.
+        let kv_tmp = tempfile::tempdir().expect("kv tmpdir");
+        let app_kv = AppContext::open_app_kv(kv_tmp.path()).expect("open app k/v");
+        let secret_store = AppContext::open_secret_store(kv_tmp.path()).expect("open secret store");
+        let data_dir = crate::app_dir::app_user_data_dir_path().unwrap();
+        let app_context = AppContext::new(
+            data_dir,
+            Network::Regtest,
+            db,
+            Default::default(),
+            Default::default(),
+            egui::Context::default(),
+            app_kv,
+            secret_store,
+            crate::model::user_role::UserRoleCell::default(),
+        )
+        .expect("Expected to create AppContext");
+        let mut token_creator_ui = TokensScreen::new(&app_context, TokensSubscreen::TokenCreator);
+
+        // Identity selection
+        let test_identity_id = Identifier::from_string(
+            "BCMnPwQZcH3RP9atgkmvtmN45QrVcYvh5cmUYARHBTu9",
+            Encoding::Base58,
+        )
+        .unwrap();
+        let mock =
+            Identity::create_basic_identity(test_identity_id, app_context.platform_version())
+                .expect("Expected to create Identity");
+        let mock_identity = QualifiedIdentity {
+            identity: mock,
+            associated_voter_identity: None,
+            associated_operator_identity: None,
+            associated_owner_key_id: None,
+            identity_type: crate::model::qualified_identity::IdentityType::User,
+            alias: None,
+            private_keys: KeyStorage::default(),
+            dpns_names: vec![],
+            associated_wallets: BTreeMap::new(),
+            secret_access: None,
+            wallet_index: None,
+            top_ups: BTreeMap::new(),
+            status: IdentityStatus::Active,
+            network: Network::Mainnet,
+        };
+
+        token_creator_ui.selected_identity = Some(mock_identity);
+
+        // Key selection
+        let mock_key = IdentityPublicKey::random_key(0, None, app_context.platform_version());
+        token_creator_ui.selected_key = Some(mock_key);
+
+        token_creator_ui.token_names_input = vec![(
+            "TestToken".to_owned(),
+            "TestToken".to_owned(),
+            TokenNameLanguage::English,
+            true,
+        )];
+
+        // Set base supply
+        token_creator_ui.base_supply_amount = Some(Amount::new(1000000, 8));
+
+        token_creator_ui.enable_once_per_identity_distribution = true;
+        token_creator_ui.once_per_identity_amount_input = "250".to_string();
+
+        // The connected network's version is not known yet: refused locally.
+        let err = token_creator_ui
+            .parse_token_build_args()
+            .expect_err("a network below protocol 14 refuses the distribution");
+        assert!(err.contains("does not accept"), "got: {err}");
+
+        app_context.set_platform_protocol_version(14);
+        let build_args = token_creator_ui
+            .parse_token_build_args()
+            .expect("Should parse");
+        let owner_id = build_args.identity_id;
+        let data_contract = app_context
+            .build_data_contract_v1_with_one_token(owner_id, build_args.into_contract_params())
+            .expect("Should build successfully");
+        let contract_v1 = data_contract.as_v1().expect("Expected DataContract::V1");
+        let TokenConfiguration::V0(ref token_v0) = contract_v1.tokens[&0u16] else {
+            panic!("the existing token builder must retain V0 configuration");
+        };
+        assert!(matches!(
+            token_v0.distribution_rules,
+            TokenDistributionRules::V1(_)
+        ));
+        assert_eq!(
+            crate::model::token::once_per_identity_amount(&contract_v1.tokens[&0u16]),
+            Some(250)
+        );
+
+        // A bad amount is reported, not sent.
+        token_creator_ui.once_per_identity_amount_input = "0".to_string();
+        assert!(token_creator_ui.parse_token_build_args().is_err());
+    }
+
+    #[test]
+    #[expect(
+        clippy::disallowed_methods,
+        reason = "test fixture setup/teardown outside any production deletion path"
+    )]
+    fn non_transferable_token_builds_a_version_1_configuration_only_on_protocol_14() {
+        use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v1::TokenConfigurationV1Getters;
+        let db_file_path = "test_db_non_transferable_token";
+        let _ = std::fs::remove_file(db_file_path); // Clean up from previous runs
+        let db = Arc::new(Database::new(db_file_path).unwrap());
+        // Force legacy wallet-family schema for tests — `initialize`
+        // gates these out for truly-fresh installs post-T-DEV-01.
+        db.create_tables(true).unwrap();
+        db.set_default_version().unwrap();
+
+        ensure_test_env();
+        // The upstream SQLite persister that backs `app_kv` is not safe
+        // to re-open concurrently from multiple tests on the same file,
+        // so each test gets its own scratch directory. Production opens
+        // a single persister per process via `AppContext::open_app_kv`.
+        let kv_tmp = tempfile::tempdir().expect("kv tmpdir");
+        let app_kv = AppContext::open_app_kv(kv_tmp.path()).expect("open app k/v");
+        let secret_store = AppContext::open_secret_store(kv_tmp.path()).expect("open secret store");
+        let data_dir = crate::app_dir::app_user_data_dir_path().unwrap();
+        let app_context = AppContext::new(
+            data_dir,
+            Network::Regtest,
+            db,
+            Default::default(),
+            Default::default(),
+            egui::Context::default(),
+            app_kv,
+            secret_store,
+            crate::model::user_role::UserRoleCell::default(),
+        )
+        .expect("Expected to create AppContext");
+        let mut token_creator_ui = TokensScreen::new(&app_context, TokensSubscreen::TokenCreator);
+
+        // Identity selection
+        let test_identity_id = Identifier::from_string(
+            "BCMnPwQZcH3RP9atgkmvtmN45QrVcYvh5cmUYARHBTu9",
+            Encoding::Base58,
+        )
+        .unwrap();
+        let mock =
+            Identity::create_basic_identity(test_identity_id, app_context.platform_version())
+                .expect("Expected to create Identity");
+        let mock_identity = QualifiedIdentity {
+            identity: mock,
+            associated_voter_identity: None,
+            associated_operator_identity: None,
+            associated_owner_key_id: None,
+            identity_type: crate::model::qualified_identity::IdentityType::User,
+            alias: None,
+            private_keys: KeyStorage::default(),
+            dpns_names: vec![],
+            associated_wallets: BTreeMap::new(),
+            secret_access: None,
+            wallet_index: None,
+            top_ups: BTreeMap::new(),
+            status: IdentityStatus::Active,
+            network: Network::Mainnet,
+        };
+
+        token_creator_ui.selected_identity = Some(mock_identity);
+
+        // Key selection
+        let mock_key = IdentityPublicKey::random_key(0, None, app_context.platform_version());
+        token_creator_ui.selected_key = Some(mock_key);
+
+        token_creator_ui.token_names_input = vec![(
+            "TestToken".to_owned(),
+            "TestToken".to_owned(),
+            TokenNameLanguage::English,
+            true,
+        )];
+
+        // Set base supply
+        token_creator_ui.base_supply_amount = Some(Amount::new(1000000, 8));
+
+        // A transferable token keeps the version 0 configuration older
+        // networks accept.
+        let build_args = token_creator_ui
+            .parse_token_build_args()
+            .expect("a transferable token parses on any network");
+        let data_contract = app_context
+            .build_data_contract_v1_with_one_token(
+                build_args.identity_id,
+                build_args.into_contract_params(),
+            )
+            .expect("Should build successfully");
+        let token = &data_contract.as_v1().expect("DataContract::V1").tokens[&0u16];
+        assert!(matches!(token, TokenConfiguration::V0(_)));
+        assert!(token.is_transferable());
+
+        token_creator_ui.transferable_input = false;
+
+        // The connected network's version is not known yet: refused locally.
+        let err = token_creator_ui
+            .parse_token_build_args()
+            .expect_err("a network below protocol 14 refuses a non-transferable token");
+        assert!(err.contains("does not accept"), "got: {err}");
+
+        app_context.set_platform_protocol_version(14);
+        let build_args = token_creator_ui
+            .parse_token_build_args()
+            .expect("Should parse");
+        let data_contract = app_context
+            .build_data_contract_v1_with_one_token(
+                build_args.identity_id,
+                build_args.into_contract_params(),
+            )
+            .expect("Should build successfully");
+        let token = &data_contract.as_v1().expect("DataContract::V1").tokens[&0u16];
+        assert!(matches!(token, TokenConfiguration::V1(_)));
+        assert!(!token.is_transferable());
+    }
+
     #[test]
     #[expect(
         clippy::disallowed_methods,
diff --git a/src/ui/tokens/tokens_screen/my_tokens.rs b/src/ui/tokens/tokens_screen/my_tokens.rs
index 7cf834325..c5c447afa 100644
--- a/src/ui/tokens/tokens_screen/my_tokens.rs
+++ b/src/ui/tokens/tokens_screen/my_tokens.rs
@@ -27,6 +27,7 @@ use crate::ui::tokens::view_token_claims_screen::ViewTokenClaimsScreen;
 use crate::ui::{MessageType, Screen, ScreenType};
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v1::TokenConfigurationV1Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration_convention::accessors::v0::TokenConfigurationConventionV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::accessors::v0::TokenDistributionRulesV0Getters;
 use dash_sdk::dpp::platform_value::string_encoding::Encoding;
@@ -114,6 +115,15 @@ impl TokensScreen {
                     );
                     ui.end_row();
 
+                    ui.label("Once-per-identity Distribution:");
+                    match crate::model::token::once_per_identity_amount(config) {
+                        Some(amount) => ui.label(format!(
+                            "Every identity can claim {amount} base tokens once."
+                        )),
+                        None => ui.label("No"),
+                    };
+                    ui.end_row();
+
                     ui.label("Token ID:");
                     ui.label(token_info.token_id.to_string(Encoding::Base58));
                     ui.end_row();
@@ -697,13 +707,18 @@ impl TokensScreen {
                 }
             } else {
                 // Disabled, grayed-out Transfer button
+                let reason = if token_info.token_configuration.is_transferable() {
+                    "Transfer not available"
+                } else {
+                    "This token cannot be sent to other identities."
+                };
                 ui.add_enabled(
                     false,
                     egui::Button::new(
                         RichText::new("Transfer").color(DashColors::muted_color(dark_mode)),
                     ),
                 )
-                .disabled_tooltip("Transfer not available");
+                .disabled_tooltip(reason);
             }
         }
 
@@ -1116,7 +1131,7 @@ mod tests {
         let mut screen = TokensScreen::new(&context, TokensSubscreen::MyTokens);
         let token_id = Identifier::from([42; 32]);
         let config = TokenConfigurationV0::default_most_restrictive().into();
-        let contract = context.dpns_contract.as_ref().clone();
+        let contract = context.dpns_contract().as_ref().clone();
         screen.all_known_tokens.insert(
             token_id,
             TokenInfoWithDataContract {
diff --git a/src/ui/tokens/tokens_screen/structs.rs b/src/ui/tokens/tokens_screen/structs.rs
index 16aaaeb8c..f1869ee5b 100644
--- a/src/ui/tokens/tokens_screen/structs.rs
+++ b/src/ui/tokens/tokens_screen/structs.rs
@@ -8,6 +8,7 @@ use dash_sdk::dpp::balances::credits::TokenAmount;
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::data_contract::accessors::v1::DataContractV1Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
+use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v1::TokenConfigurationV1Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration_convention::accessors::v0::TokenConfigurationConventionV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::accessors::v0::TokenDistributionRulesV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_perpetual_distribution::methods::v0::TokenPerpetualDistributionV0Accessors;
@@ -392,6 +393,16 @@ impl IdentityTokenAvailableActions {
     }
 }
 
+/// Whether the identity can transfer the token: it holds some, and the token
+/// lets holders move it to another identity (Platform refuses every transfer
+/// of a non-transferable token).
+fn transfer_available(
+    token_configuration: &TokenConfiguration,
+    known_balance: Option<TokenAmount>,
+) -> bool {
+    token_configuration.is_transferable() && known_balance.is_some_and(|b| b > 0)
+}
+
 pub fn get_available_token_actions_for_identity(
     known_balance: Option<TokenAmount>,
     identity: &QualifiedIdentity,
@@ -406,7 +417,7 @@ pub fn get_available_token_actions_for_identity(
     let identity_id = identity.identity.id();
     let solo_action_taker = ActionTaker::SingleIdentity(identity_id);
 
-    let can_transfer = known_balance.is_some_and(|b| b > 0);
+    let can_transfer = transfer_available(token_configuration, known_balance);
 
     let is_authorized = |takers: &AuthorizedActionTakers| {
         takers.allowed_for_action_taker(
@@ -424,7 +435,11 @@ pub fn get_available_token_actions_for_identity(
         )
     };
 
-    let can_claim = {
+    // Every identity may take a once-per-identity claim, so its presence alone
+    // offers the claim (Platform refuses a second one).
+    let can_claim_once_per_identity =
+        crate::model::token::once_per_identity_amount(token_configuration).is_some();
+    let can_claim = can_claim_once_per_identity || {
         if let Some(dist) = token_configuration
             .distribution_rules()
             .perpetual_distribution()
@@ -562,3 +577,28 @@ impl From<IdentityTokenBalanceWithActions> for Amount {
         Self::from(&token_balance)
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v1::TokenConfigurationV1Setters;
+    use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationV0;
+
+    fn transferable() -> TokenConfiguration {
+        TokenConfiguration::V0(TokenConfigurationV0::default_most_restrictive())
+    }
+
+    #[test]
+    fn transfer_needs_a_transferable_token_and_a_balance() {
+        let mut non_transferable = transferable();
+        non_transferable.set_transferable(false);
+
+        assert!(transfer_available(&transferable(), Some(5)));
+        assert!(!transfer_available(&transferable(), Some(0)));
+        assert!(!transfer_available(&transferable(), None));
+        assert!(
+            !transfer_available(&non_transferable, Some(5)),
+            "Platform refuses every transfer of a non-transferable token"
+        );
+    }
+}
diff --git a/src/ui/tokens/tokens_screen/token_creator.rs b/src/ui/tokens/tokens_screen/token_creator.rs
index 433dd862c..b06de0cc5 100644
--- a/src/ui/tokens/tokens_screen/token_creator.rs
+++ b/src/ui/tokens/tokens_screen/token_creator.rs
@@ -1,36 +1,46 @@
-use std::collections::{BTreeMap, HashSet};
-use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::{TokenConfigurationPreset, TokenConfigurationPresetFeatures};
-use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::TokenConfigurationPresetFeatures::{MostRestrictive, WithAllAdvancedActions, WithExtremeActions, WithMintingAndBurningActions, WithOnlyEmergencyAction};
-use dash_sdk::dpp::data_contract::associated_token::token_distribution_rules::TokenDistributionRules;
-use dash_sdk::dpp::data_contract::change_control_rules::authorized_action_takers::AuthorizedActionTakers;
-use dash_sdk::dpp::data_contract::change_control_rules::v0::ChangeControlRulesV0;
-use dash_sdk::dpp::data_contract::change_control_rules::ChangeControlRules;
-use dash_sdk::dpp::data_contract::serialized_version::DataContractInSerializationFormat;
-use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
-use dash_sdk::dpp::platform_value::string_encoding::Encoding;
-use dash_sdk::dpp::version::TryFromPlatformVersioned;
-use dash_sdk::platform::Identifier;
-use eframe::epaint::Color32;
-use egui::{ComboBox, Context, Frame, Margin, RichText, TextEdit, Ui};
-use crate::ui::theme::{ComponentStyles, DashColors};
-use crate::ui::ScreenType;
 use crate::app::{AppAction, BackendTasksExecutionMode};
 use crate::backend_task::BackendTask;
 use crate::backend_task::tokens::TokenTask;
+use crate::context::feature_gate::FeatureGate;
+use crate::model::identity_key_usability::SigningScope;
 use crate::model::token::validate_contract_keyword;
-use crate::ui::components::styled::{StyledCheckbox};
-use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
+use crate::model::token::{
+    distribution_rules_with_once_per_identity, parse_once_per_identity_amount,
+};
+use crate::ui::MessageType;
+use crate::ui::ScreenType;
 use crate::ui::components::Component;
-use crate::ui::components::identity_selector::IdentitySelector;
 use crate::ui::components::MessageBanner;
-use crate::ui::MessageType;
-use crate::ui::helpers::{add_identity_key_chooser, TransactionType};
-use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
-use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use crate::ui::components::confirmation_dialog::{ConfirmationDialog, ConfirmationStatus};
+use crate::ui::components::identity_selector::IdentitySelector;
+use crate::ui::components::styled::StyledCheckbox;
+use crate::ui::helpers::{TransactionType, add_identity_key_chooser};
+use crate::ui::theme::{ComponentStyles, DashColors};
 use crate::ui::tokens::tokens_screen::{
     ChangeControlRulesUI, MintRecipientSection, TokenBuildArgs, TokenCreatorStatus,
     TokenNameLanguage, TokensScreen,
 };
+use dash_sdk::dpp::balances::credits::TokenAmount;
+use dash_sdk::dpp::data_contract::associated_token::token_configuration::v0::{
+    TokenConfigurationPreset,
+    TokenConfigurationPresetFeatures::{
+        self, MostRestrictive, WithAllAdvancedActions, WithExtremeActions,
+        WithMintingAndBurningActions, WithOnlyEmergencyAction,
+    },
+};
+use dash_sdk::dpp::data_contract::change_control_rules::ChangeControlRules;
+use dash_sdk::dpp::data_contract::change_control_rules::authorized_action_takers::AuthorizedActionTakers;
+use dash_sdk::dpp::data_contract::change_control_rules::v0::ChangeControlRulesV0;
+use dash_sdk::dpp::data_contract::serialized_version::DataContractInSerializationFormat;
+use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
+use dash_sdk::dpp::identity::identity_public_key::accessors::v0::IdentityPublicKeyGettersV0;
+use dash_sdk::dpp::identity::{Purpose, SecurityLevel};
+use dash_sdk::dpp::platform_value::string_encoding::Encoding;
+use dash_sdk::dpp::version::TryFromPlatformVersioned;
+use dash_sdk::platform::Identifier;
+use eframe::epaint::Color32;
+use egui::{ComboBox, Context, Frame, Margin, RichText, TextEdit, Ui};
+use std::collections::{BTreeMap, HashSet};
 
 impl TokensScreen {
     pub(super) fn render_token_creator(&mut self, context: &Context, ui: &mut Ui) -> AppAction {
@@ -235,6 +245,7 @@ impl TokensScreen {
                                 &mut self.selected_identity,
                                 &mut self.selected_key,
                                 TransactionType::RegisterContract,
+                                SigningScope::NonBatch,
                             );
                             let after_id = self
                                 .selected_identity
@@ -610,6 +621,9 @@ impl TokensScreen {
                                         });
                                         ui.end_row();
 
+                                        self.transferable_row(ui);
+                                        ui.end_row();
+
                                         self.history_row(ui);
                                         ui.end_row();
 
@@ -1125,8 +1139,9 @@ impl TokensScreen {
         let main_control_group_change_authorized =
             self.parse_main_control_group_change_authorized()?;
 
-        // 4) Distribution data (perpetual & pre_programmed)
+        // 4) Distribution data (perpetual, pre-programmed & once-per-identity)
         let distribution_rules = self.build_distribution_rules()?;
+        let once_per_identity_amount = self.parse_once_per_identity_amount()?;
 
         // 5) Groups
         let groups = self.parse_groups()?;
@@ -1166,14 +1181,74 @@ impl TokensScreen {
             conventions_change_rules,
             main_control_group_change_authorized,
 
-            distribution_rules: TokenDistributionRules::V0(distribution_rules),
+            distribution_rules: distribution_rules_with_once_per_identity(
+                distribution_rules,
+                once_per_identity_amount,
+            ),
             groups,
             document_schemas: self.parsed_document_schemas.clone(),
             marketplace_rules,
             change_direct_purchase_pricing_rules,
+            transferable: self.parse_transferable()?,
         })
     }
 
+    /// Whether holders may transfer the token. A token that cannot be
+    /// transferred needs protocol version 14, so a network that does not
+    /// accept it yet is refused here rather than by Platform after the fee is
+    /// paid.
+    fn parse_transferable(&self) -> Result<bool, String> {
+        if !self.transferable_input
+            && !FeatureGate::NonTransferableTokens.is_available(&self.app_context)
+        {
+            return Err(
+                "The connected network does not accept tokens that cannot be transferred yet. Allow transfers, or try again after the network upgrades."
+                    .to_string(),
+            );
+        }
+        Ok(self.transferable_input)
+    }
+
+    /// The "holders can send this token" option. Offered only where the
+    /// connected network accepts tokens that cannot be transferred.
+    fn transferable_row(&mut self, ui: &mut egui::Ui) {
+        let available = FeatureGate::NonTransferableTokens.is_available(&self.app_context);
+        if !available {
+            self.transferable_input = true;
+        }
+        ui.horizontal(|ui| {
+            ui.add_enabled_ui(available, |ui| {
+                StyledCheckbox::new(
+                    &mut self.transferable_input,
+                    "Holders can send this token to other identities",
+                )
+                .show(ui)
+                .on_disabled_hover_text(
+                    "The connected network does not accept tokens that cannot be transferred yet.",
+                );
+            });
+            crate::ui::helpers::info_icon_button(ui, "When turned off, holders cannot send the token to other identities. It can still be minted, claimed, bought, burned, frozen and destroyed as configured. This cannot be changed after the token is created.");
+        });
+    }
+
+    /// The once-per-identity amount, when that distribution is enabled. It
+    /// needs protocol version 14, so a network that does not accept it yet is
+    /// refused here rather than by Platform after the fee is paid.
+    fn parse_once_per_identity_amount(&self) -> Result<Option<TokenAmount>, String> {
+        if !self.enable_once_per_identity_distribution {
+            return Ok(None);
+        }
+        if !FeatureGate::TokenOncePerIdentityDistribution.is_available(&self.app_context) {
+            return Err(
+                "The connected network does not accept once-per-identity distributions yet. Turn it off to create the token."
+                    .to_string(),
+            );
+        }
+        parse_once_per_identity_amount(&self.once_per_identity_amount_input)
+            .map(Some)
+            .map_err(|error| error.to_string())
+    }
+
     fn parse_contract_keywords(&self) -> Result<Vec<String>, String> {
         if self.contract_keywords_input.trim().is_empty() {
             return Ok(Vec::new());
diff --git a/src/ui/tokens/transfer_tokens_screen.rs b/src/ui/tokens/transfer_tokens_screen.rs
index 1ab107ee3..2f007b139 100644
--- a/src/ui/tokens/transfer_tokens_screen.rs
+++ b/src/ui/tokens/transfer_tokens_screen.rs
@@ -4,6 +4,7 @@ use crate::backend_task::{BackendTask, BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
 use crate::model::amount::Amount;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_identity::QualifiedIdentity;
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
@@ -95,14 +96,14 @@ impl TransferTokensScreen {
 
         let max_amount = Amount::from(&identity_token_balance);
         let selected_key: Option<IdentityPublicKey> = identity.as_ref().and_then(|id| {
-            id.identity
-                .get_first_public_key_matching(
-                    Purpose::AUTHENTICATION,
-                    HashSet::from([SecurityLevel::CRITICAL]),
-                    KeyType::all_key_types().into(),
-                    false,
-                )
-                .cloned()
+            id.signing_key_now(KeyRequirements::new(
+                Purpose::AUTHENTICATION,
+                &[SecurityLevel::CRITICAL],
+                SigningScope::ContractWide {
+                    contract_id: identity_token_balance.data_contract_id,
+                },
+            ))
+            .cloned()
         });
         let selected_wallet = identity.as_ref().and_then(|id| {
             get_selected_wallet(id, None, selected_key.as_ref())
@@ -522,6 +523,9 @@ impl ScreenLike for TransferTokensScreen {
                         identity,
                         &mut self.selected_key,
                         TransactionType::TokenTransfer,
+                        SigningScope::ContractWide {
+                            contract_id: self.identity_token_balance.data_contract_id,
+                        },
                     );
                     ui.add_space(10.0);
                     ui.separator();
diff --git a/src/ui/tokens/update_token_config.rs b/src/ui/tokens/update_token_config.rs
index 3e127a965..bce4db183 100644
--- a/src/ui/tokens/update_token_config.rs
+++ b/src/ui/tokens/update_token_config.rs
@@ -4,7 +4,9 @@ use crate::backend_task::tokens::TokenTask;
 use crate::backend_task::{BackendTask, BackendTaskSuccessResult, FeeResult};
 use crate::context::AppContext;
 use crate::model::fee_estimation::format_credits_as_dash;
+use crate::model::identity_key_usability::{KeyRequirements, SigningScope};
 use crate::model::qualified_identity::QualifiedIdentity;
+use crate::model::token::token_change_item_is_supported;
 use crate::model::user_role::UserRole;
 use crate::model::wallet::Wallet;
 use crate::ui::components::left_panel::add_left_panel;
@@ -25,6 +27,7 @@ use crate::ui::theme::{ComponentStyles, DashColors, ResponseExt};
 use crate::ui::tokens::validate_signing_key;
 use crate::ui::{MessageType, Screen, ScreenLike};
 use dash_sdk::dpp::data_contract::GroupContractPosition;
+use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::data_contract::accessors::v1::DataContractV1Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration::accessors::v0::TokenConfigurationV0Getters;
 use dash_sdk::dpp::data_contract::associated_token::token_configuration_convention::TokenConfigurationConvention;
@@ -81,13 +84,13 @@ impl UpdateTokenConfigScreen {
     pub fn new(identity_token_info: IdentityTokenInfo, app_context: &Arc<AppContext>) -> Self {
         let possible_key = identity_token_info
             .identity
-            .identity
-            .get_first_public_key_matching(
+            .signing_key_now(KeyRequirements::new(
                 Purpose::AUTHENTICATION,
-                HashSet::from([SecurityLevel::CRITICAL]),
-                KeyType::all_key_types().into(),
-                false,
-            )
+                &[SecurityLevel::CRITICAL],
+                SigningScope::ContractWide {
+                    contract_id: identity_token_info.data_contract.contract.id(),
+                },
+            ))
             .cloned();
 
         // Initialize with no group - will be set when user selects a change item
@@ -604,6 +607,11 @@ impl UpdateTokenConfigScreen {
             TokenConfigurationChangeItem::MarketplaceTradeMode(_) => {
                 ui.label("Marketplace settings are not yet supported.");
             }
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoing(_)
+            | TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingControlGroup(_)
+            | TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingAdminGroup(_) => {
+                ui.label("This setting cannot be changed here. Use another token configuration editor.");
+            }
         }
         });
         });
@@ -668,6 +676,7 @@ impl UpdateTokenConfigScreen {
         );
 
         if (self.app_context.user_role().at_least(UserRole::Power) || !button_text.contains("Test"))
+            && token_change_item_is_supported(&self.change_item)
             && self.change_item != TokenConfigurationChangeItem::TokenConfigurationNoChange
         {
             ui.add_space(20.0);
@@ -1006,6 +1015,9 @@ impl ScreenLike for UpdateTokenConfigScreen {
                         &self.identity,
                         &mut self.signing_key,
                         TransactionType::TokenAction,
+                        SigningScope::ContractWide {
+                            contract_id: self.identity_token_info.data_contract.contract.id(),
+                        },
                     );
                     ui.add_space(10.0);
                     ui.separator();
@@ -1091,5 +1103,38 @@ fn token_change_item_label(item: &TokenConfigurationChangeItem) -> &'static str
             "Marketplace Trade Mode Admin Group"
         }
         TokenConfigurationChangeItem::MainControlGroup(_) => "Main Control Group",
+        TokenConfigurationChangeItem::MinimumPoolNotesForOutgoing(_) => {
+            "Minimum Pool Notes for Outgoing Transfers"
+        }
+        TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingControlGroup(_) => {
+            "Minimum Pool Notes Control Group"
+        }
+        TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingAdminGroup(_) => {
+            "Minimum Pool Notes Admin Group"
+        }
+    }
+}
+
+#[cfg(test)]
+mod sdk_adapter_tests {
+    use super::*;
+
+    #[test]
+    fn shielded_pool_configuration_cannot_be_submitted_from_this_editor() {
+        for item in [
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoing(17),
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingControlGroup(
+                AuthorizedActionTakers::NoOne,
+            ),
+            TokenConfigurationChangeItem::MinimumPoolNotesForOutgoingAdminGroup(
+                AuthorizedActionTakers::NoOne,
+            ),
+        ] {
+            assert!(!token_change_item_is_supported(&item));
+            assert!(token_change_item_label(&item).contains("Pool"));
+        }
+        assert!(token_change_item_is_supported(
+            &TokenConfigurationChangeItem::MaxSupply(Some(17))
+        ));
     }
 }
diff --git a/src/ui/tokens/view_token_claims_screen.rs b/src/ui/tokens/view_token_claims_screen.rs
index 6264a8720..9a23c0243 100644
--- a/src/ui/tokens/view_token_claims_screen.rs
+++ b/src/ui/tokens/view_token_claims_screen.rs
@@ -59,9 +59,10 @@ impl ViewTokenClaimsScreen {
         Self {
             identity_token_basic_info: identity_token_basic_info.clone(),
             new_claims_query: DocumentQuery {
+                integer_range_clauses: vec![],
                 sub_queries: Vec::new(),
                 select: SelectProjection::documents(),
-                data_contract: app_context.token_history_contract.clone(),
+                data_contract: app_context.token_history_contract(),
                 document_type_name: "claim".to_string(),
                 where_clauses: vec![
                     WhereClause {
diff --git a/src/ui/wallets/send_screen.rs b/src/ui/wallets/send_screen.rs
index 9c0cad012..754662548 100644
--- a/src/ui/wallets/send_screen.rs
+++ b/src/ui/wallets/send_screen.rs
@@ -5141,10 +5141,10 @@ mod tests {
     use crate::database::test_helpers::create_database_at_path;
     use crate::utils::tasks::TaskManager;
     use crate::wallet_backend::AssetLockInputState;
-    use dash_sdk::dashcore_rpc::dashcore::secp256k1::{Secp256k1, SecretKey};
     use dash_sdk::dashcore_rpc::dashcore::{Network, PrivateKey, PublicKey};
     use dash_sdk::dpp::dashcore::{OutPoint, Txid, hashes::Hash};
     use dash_sdk::dpp::key_wallet::bip32::{ChildNumber, DerivationPath};
+    use dash_sdk::dpp::secp256k1::SecretKey;
     use egui_kittest::Harness;
     use egui_kittest::kittest::Queryable;
     use std::cell::RefCell;
@@ -5158,10 +5158,11 @@ mod tests {
     }
 
     fn testnet_core_address(key_byte: u8) -> Address {
-        let secp = Secp256k1::new();
-        let secret_key = SecretKey::from_slice(&[key_byte; 32]).expect("valid secret key");
-        let private_key = PrivateKey::new(secret_key, Network::Testnet);
-        let public_key = PublicKey::from_private_key(&secp, &private_key);
+        let secret_key = SecretKey::from_secret_bytes([key_byte; 32]).expect("valid secret key");
+        let private_key =
+            PrivateKey::from_byte_array(secret_key.as_secret_bytes(), Network::Testnet)
+                .expect("valid secret key");
+        let public_key = PublicKey::from_private_key(&private_key);
         Address::p2pkh(&public_key, Network::Testnet)
     }
 
diff --git a/src/ui/wallets/wallets_screen/address_table.rs b/src/ui/wallets/wallets_screen/address_table.rs
index 71f50c5e3..ed000b95c 100644
--- a/src/ui/wallets/wallets_screen/address_table.rs
+++ b/src/ui/wallets/wallets_screen/address_table.rs
@@ -573,16 +573,16 @@ impl WalletsBalancesScreen {
 mod tests {
     use super::*;
     use dash_sdk::dpp::dashcore::PublicKey;
-    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
+    use dash_sdk::dpp::secp256k1::SecretKey;
 
     /// A distinct testnet p2pkh address keyed off `n` (derived from a valid
     /// secret key so the pubkey is a real curve point).
     fn addr(n: u8) -> Address {
         let mut sk_bytes = [1u8; 32];
         sk_bytes[31] = n.max(1);
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&sk_bytes).unwrap();
-        let pubkey = PublicKey::new(sk.public_key(&secp));
+
+        let sk = SecretKey::from_secret_bytes(sk_bytes).unwrap();
+        let pubkey = PublicKey::new(sk.public_key());
         Address::p2pkh(&pubkey, Network::Testnet)
     }
 
diff --git a/src/wallet_backend/auth_pubkey_cache.rs b/src/wallet_backend/auth_pubkey_cache.rs
index f88a3ad6f..e53c854bc 100644
--- a/src/wallet_backend/auth_pubkey_cache.rs
+++ b/src/wallet_backend/auth_pubkey_cache.rs
@@ -214,9 +214,7 @@ mod tests {
 
     use dash_sdk::dpp::dashcore::PublicKey;
     use dash_sdk::dpp::dashcore::base58;
-    use dash_sdk::dpp::dashcore::secp256k1::{
-        PublicKey as Secp256k1PublicKey, Secp256k1, SecretKey,
-    };
+    use dash_sdk::dpp::secp256k1::{PublicKey as Secp256k1PublicKey, SecretKey};
 
     use crate::wallet_backend::kv_test_support::InMemoryKv;
 
@@ -225,9 +223,8 @@ mod tests {
     }
 
     fn pubkey(seed: u8) -> PublicKey {
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&[seed.max(1); 32]).expect("valid secret key");
-        PublicKey::new(Secp256k1PublicKey::from_secret_key(&secp, &sk))
+        let sk = SecretKey::from_secret_bytes([seed.max(1); 32]).expect("valid secret key");
+        PublicKey::new(Secp256k1PublicKey::from_secret_key(&sk))
     }
 
     /// AUTH-CACHE-VIEW-001 — a written cache round-trips through `get`
diff --git a/src/wallet_backend/contact_profile_cache.rs b/src/wallet_backend/contact_profile_cache.rs
index ec1a47df5..4df5156e3 100644
--- a/src/wallet_backend/contact_profile_cache.rs
+++ b/src/wallet_backend/contact_profile_cache.rs
@@ -21,7 +21,6 @@
 
 use std::sync::Arc;
 
-use dash_sdk::dpp::dashcore::base58;
 use dash_sdk::platform::Identifier;
 
 use crate::backend_task::error::TaskError;
@@ -62,7 +61,13 @@ impl CachedContactProfile {
 
 /// Build the canonical k/v key for a contact's cached profile.
 fn key_for(contact: &Identifier) -> String {
-    format!("{KEY_PREFIX}{}", base58::encode_slice(&contact.to_buffer()))
+    format!(
+        "{KEY_PREFIX}{}",
+        dash_sdk::dpp::platform_value::string_encoding::encode(
+            &contact.to_buffer(),
+            dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58
+        )
+    )
 }
 
 /// View borrowing a shared [`DetKv`] handle. Cheap to construct.
diff --git a/src/wallet_backend/dashpay.rs b/src/wallet_backend/dashpay.rs
index 20bc155ab..35edcc0c7 100644
--- a/src/wallet_backend/dashpay.rs
+++ b/src/wallet_backend/dashpay.rs
@@ -166,41 +166,23 @@ pub(crate) fn derive_contact_info_encryption_keys(
     let root_path =
         DerivationPath::from_str(&format!("m/9'/{coin_type}'/15'/0'")).map_err(derive_err)?;
 
-    let secp = dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new();
-    let root = master_xprv
-        .derive_priv(&secp, &root_path)
-        .map_err(derive_err)?;
+    let root = master_xprv.derive_priv(&root_path).map_err(derive_err)?;
 
     // Key1 (encToUserId): root/(2^16)'/index'
     let key1 = root
-        .derive_priv(
-            &secp,
-            &[ChildNumber::from_hardened_idx(65536).map_err(derive_err)?],
-        )
+        .derive_priv(&[ChildNumber::from_hardened_idx(65536).map_err(derive_err)?])
         .map_err(derive_err)?
-        .derive_priv(
-            &secp,
-            &[ChildNumber::from_hardened_idx(derivation_index).map_err(derive_err)?],
-        )
+        .derive_priv(&[ChildNumber::from_hardened_idx(derivation_index).map_err(derive_err)?])
         .map_err(derive_err)?;
 
     // Key2 (privateData): root/(2^16 + 1)'/index'
     let key2 = root
-        .derive_priv(
-            &secp,
-            &[ChildNumber::from_hardened_idx(65537).map_err(derive_err)?],
-        )
+        .derive_priv(&[ChildNumber::from_hardened_idx(65537).map_err(derive_err)?])
         .map_err(derive_err)?
-        .derive_priv(
-            &secp,
-            &[ChildNumber::from_hardened_idx(derivation_index).map_err(derive_err)?],
-        )
+        .derive_priv(&[ChildNumber::from_hardened_idx(derivation_index).map_err(derive_err)?])
         .map_err(derive_err)?;
 
-    Ok((
-        Zeroizing::new(key1.private_key.secret_bytes()),
-        Zeroizing::new(key2.private_key.secret_bytes()),
-    ))
+    Ok((key1.private_key.to_bytes(), key2.private_key.to_bytes()))
 }
 
 // ---------------------------------------------------------------------------
@@ -3338,7 +3320,7 @@ mod tests {
 
         assert_eq!(
             seam.public_key,
-            local.public_key.serialize(),
+            local.public_key.to_compressed(),
             "published public key must match the receive-side xpub on mainnet"
         );
         assert_eq!(
@@ -3379,7 +3361,7 @@ mod tests {
 
         assert_eq!(
             seam.public_key,
-            local.public_key.serialize(),
+            local.public_key.to_compressed(),
             "published public key must match the receive-side xpub on testnet"
         );
         assert_eq!(
@@ -3421,7 +3403,7 @@ mod tests {
 
             assert_eq!(
                 seam.public_key,
-                local.public_key.serialize(),
+                local.public_key.to_compressed(),
                 "public key must match send↔receive on {network:?}"
             );
             assert_eq!(
@@ -3567,7 +3549,7 @@ mod tests {
             .expect("receive-side xpub");
         assert_eq!(
             published.public_key,
-            scanned.public_key.serialize(),
+            scanned.public_key.to_compressed(),
             "published xpub must equal the scanned xpub for the selected wallet"
         );
 
@@ -3577,7 +3559,7 @@ mod tests {
                 .expect("other-side xpub");
         assert_ne!(
             published.public_key,
-            other_scanned.public_key.serialize(),
+            other_scanned.public_key.to_compressed(),
             "the unselected wallet's seed must derive a different xpub"
         );
     }
diff --git a/src/wallet_backend/det_platform_signer.rs b/src/wallet_backend/det_platform_signer.rs
index 54b52695c..5f7c4ec63 100644
--- a/src/wallet_backend/det_platform_signer.rs
+++ b/src/wallet_backend/det_platform_signer.rs
@@ -154,8 +154,9 @@ impl<'a> DetPlatformSigner<'a> {
             .map_err(|e| ProtocolError::Generic(e.to_string()))?;
         let private_key = extended_private_key.to_priv();
 
-        let signature = dash_sdk::dpp::dashcore::signer::sign(data, private_key.inner.as_ref())
-            .map_err(|e| ProtocolError::Generic(format!("Failed to sign: {}", e)))?;
+        let signature =
+            dash_sdk::dpp::dashcore::signer::sign(data, private_key.inner.to_bytes().as_slice())
+                .map_err(|e| ProtocolError::Generic(format!("Failed to sign: {}", e)))?;
 
         Ok(signature.to_vec())
     }
@@ -202,7 +203,7 @@ mod tests {
     use super::*;
     use crate::model::wallet::{AddressInfo, DerivationPathReference, DerivationPathType};
     use dash_sdk::dpp::dashcore::Address;
-    use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
+
     use zeroize::Zeroizing;
 
     /// Reference platform-address signing — reproduces exactly what the
@@ -223,7 +224,7 @@ mod tests {
             .derive_priv_ecdsa_for_master_seed(seed, network)
             .expect("derive")
             .to_priv();
-        dash_sdk::dpp::dashcore::signer::sign(data, private_key.inner.as_ref())
+        dash_sdk::dpp::dashcore::signer::sign(data, private_key.inner.to_bytes().as_slice())
             .expect("reference sign")
             .to_vec()
     }
@@ -241,8 +242,8 @@ mod tests {
         let xprv = path
             .derive_priv_ecdsa_for_master_seed(&*seed, network)
             .expect("derive platform key");
-        let secp = Secp256k1::new();
-        let address = Address::p2pkh(&xprv.to_priv().public_key(&secp), network);
+
+        let address = Address::p2pkh(&xprv.to_priv().public_key(), network);
         let platform_address =
             PlatformAddress::try_from(address.clone()).expect("to platform address");
 
@@ -318,10 +319,12 @@ mod tests {
                 .expect("derive")
                 .to_priv();
             let data = b"key-parity-vector";
-            let reference_sig =
-                dash_sdk::dpp::dashcore::signer::sign(data, reference_key.inner.as_ref())
-                    .expect("reference sign")
-                    .to_vec();
+            let reference_sig = dash_sdk::dpp::dashcore::signer::sign(
+                data,
+                reference_key.inner.to_bytes().as_slice(),
+            )
+            .expect("reference sign")
+            .to_vec();
 
             // The signer's view of the same address must yield the same key.
             let det = DetPlatformSigner::from_held(&seed, network, &index);
@@ -349,8 +352,8 @@ mod tests {
         let other_xprv = other_path
             .derive_priv_ecdsa_for_master_seed(&*seed, network)
             .unwrap();
-        let secp = Secp256k1::new();
-        let other_address = Address::p2pkh(&other_xprv.to_priv().public_key(&secp), network);
+
+        let other_address = Address::p2pkh(&other_xprv.to_priv().public_key(), network);
         let other_platform = PlatformAddress::try_from(other_address).unwrap();
 
         assert!(!det.can_sign_with(&other_platform));
diff --git a/src/wallet_backend/det_signer.rs b/src/wallet_backend/det_signer.rs
index e75ff6c43..d0cba01ba 100644
--- a/src/wallet_backend/det_signer.rs
+++ b/src/wallet_backend/det_signer.rs
@@ -35,9 +35,10 @@
 
 use async_trait::async_trait;
 use dash_sdk::dpp::dashcore::Network;
-use dash_sdk::dpp::dashcore::secp256k1::{self, Message, PublicKey, Secp256k1, ecdsa};
+use dash_sdk::dpp::dashcore::ecdsa::{EcdsaPublicKey, EcdsaSignature};
 use dash_sdk::dpp::key_wallet::bip32::{DerivationPath, ExtendedPrivKey, ExtendedPubKey};
 use dash_sdk::dpp::key_wallet::signer::{ExtendedPubKeySigner, Signer, SignerMethod};
+use dash_sdk::dpp::secp256k1::{self, Message, PublicKey, ecdsa};
 use zeroize::Zeroizing;
 
 use crate::wallet_backend::secret_access::SecretPlaintext;
@@ -63,7 +64,7 @@ pub enum DetSignerError {
 /// upstream digest-length error as a typed signer error rather than
 /// panicking.
 fn message_from_digest(digest: [u8; 32]) -> Result<Message, DetSignerError> {
-    Message::from_digest_slice(&digest).map_err(DetSignerError::Sign)
+    Ok(Message::from_digest(digest))
 }
 
 /// JIT [`Signer`] backed by a **borrowed** held secret.
@@ -123,8 +124,13 @@ impl<'a> DetSigner<'a> {
     /// Derive the secp256k1 secret at `path` from the held HD seed. Errors
     /// with [`DetSignerError::WrongSecretKind`] if the held secret is a
     /// single key (no derivation tree).
+    ///
+    /// Signing stays on the secp256k1 primitive (plain RFC 6979 nonce), so
+    /// signatures are byte-identical to earlier builds; the newer
+    /// `EcdsaSecretKey::sign` grinds for a low R and would change them.
     fn derive_secret(&self, path: &DerivationPath) -> Result<secp256k1::SecretKey, DetSignerError> {
-        Ok(self.derive_xprv(path)?.private_key)
+        let scalar = self.derive_xprv(path)?.private_key.to_bytes();
+        secp256k1::SecretKey::from_secret_bytes(*scalar).map_err(DetSignerError::Sign)
     }
 
     /// Sign `msg` (a 32-byte digest) with the held **single key** directly,
@@ -137,10 +143,10 @@ impl<'a> DetSigner<'a> {
     ) -> Result<ecdsa::Signature, DetSignerError> {
         match &self.secret {
             HeldSecret::SingleKey(key) => {
-                let sk =
-                    secp256k1::SecretKey::from_byte_array(key).map_err(DetSignerError::Sign)?;
+                let sk = secp256k1::SecretKey::from_secret_bytes(***key)
+                    .map_err(DetSignerError::Sign)?;
                 let message = message_from_digest(*msg)?;
-                Ok(Secp256k1::signing_only().sign_ecdsa(&message, &sk))
+                Ok(dash_sdk::dpp::secp256k1::ecdsa::sign(message, &sk))
             }
             HeldSecret::HdSeed(_) => Err(DetSignerError::WrongSecretKind),
         }
@@ -172,21 +178,18 @@ impl Signer for DetSigner<'_> {
         &self,
         path: &DerivationPath,
         sighash: [u8; 32],
-    ) -> Result<(ecdsa::Signature, PublicKey), Self::Error> {
+    ) -> Result<(EcdsaSignature, EcdsaPublicKey), Self::Error> {
         let secret = self.derive_secret(path)?;
-        let secp = Secp256k1::signing_only();
+
         let msg = message_from_digest(sighash)?;
-        let signature = secp.sign_ecdsa(&msg, &secret);
-        let public_key = PublicKey::from_secret_key(&secp, &secret);
-        Ok((signature, public_key))
+        let signature = dash_sdk::dpp::secp256k1::ecdsa::sign(msg, &secret);
+        let public_key = PublicKey::from_secret_key(&secret);
+        Ok((signature.into(), public_key.into()))
     }
 
-    async fn public_key(&self, path: &DerivationPath) -> Result<PublicKey, Self::Error> {
+    async fn public_key(&self, path: &DerivationPath) -> Result<EcdsaPublicKey, Self::Error> {
         let secret = self.derive_secret(path)?;
-        Ok(PublicKey::from_secret_key(
-            &Secp256k1::signing_only(),
-            &secret,
-        ))
+        Ok(PublicKey::from_secret_key(&secret).into())
     }
 }
 
@@ -204,7 +207,7 @@ impl ExtendedPubKeySigner for DetSigner<'_> {
         path: &DerivationPath,
     ) -> Result<ExtendedPubKey, Self::Error> {
         let xprv = self.derive_xprv(path)?;
-        Ok(ExtendedPubKey::from_priv(&Secp256k1::signing_only(), &xprv))
+        Ok(ExtendedPubKey::from_priv(&xprv))
     }
 }
 
@@ -311,14 +314,21 @@ mod tests {
             // Independent reference: derive the key directly from the seed at
             // the path, then sign + recover the public key with the same
             // secp256k1 primitive `DetSigner` uses internally.
-            let secp = Secp256k1::new();
-            let reference_sk = path
-                .derive_priv_ecdsa_for_master_seed(&PARITY_SEED, network)
-                .expect("reference derive")
-                .private_key;
-            let reference_msg = Message::from_digest_slice(&sighash).expect("reference digest");
-            let reference_sig = secp.sign_ecdsa(&reference_msg, &reference_sk);
-            let reference_pk = PublicKey::from_secret_key(&secp, &reference_sk);
+
+            let reference_sk = secp256k1::SecretKey::from_secret_bytes(
+                *path
+                    .derive_priv_ecdsa_for_master_seed(&PARITY_SEED, network)
+                    .expect("reference derive")
+                    .private_key
+                    .to_bytes(),
+            )
+            .expect("valid scalar");
+            let reference_msg = Message::from_digest(sighash);
+            let reference_sig = EcdsaSignature::from(dash_sdk::dpp::secp256k1::ecdsa::sign(
+                reference_msg,
+                &reference_sk,
+            ));
+            let reference_pk = EcdsaPublicKey::from(PublicKey::from_secret_key(&reference_sk));
 
             // The JIT signer over the same seed, held open through the
             // chokepoint, must match byte-for-byte.
@@ -359,11 +369,11 @@ mod tests {
         for network in [Network::Testnet, Network::Mainnet] {
             // Independent reference: derive the xprv straight from the seed at
             // the path, then convert to the xpub with the same primitive.
-            let secp = Secp256k1::new();
+
             let reference_xprv = path
                 .derive_priv_ecdsa_for_master_seed(&PARITY_SEED, network)
                 .expect("reference derive");
-            let reference_xpub = ExtendedPubKey::from_priv(&secp, &reference_xprv);
+            let reference_xpub = ExtendedPubKey::from_priv(&reference_xprv);
 
             let held = Zeroizing::new(PARITY_SEED);
             let signer = DetSigner::from_held(SecretPlaintext::HdSeed(&held), network);
@@ -402,14 +412,14 @@ mod tests {
     #[test]
     fn hd_derivation_matches_pinned_vector() {
         let path: DerivationPath = "m/44'/1'/0'/0/0".parse().unwrap();
-        let secp = Secp256k1::new();
-        let sk = path
+
+        let pk = path
             .derive_priv_ecdsa_for_master_seed(&PARITY_SEED, Network::Testnet)
             .expect("derive")
-            .private_key;
-        let pk = PublicKey::from_secret_key(&secp, &sk);
+            .private_key
+            .public_key();
         assert_eq!(
-            hex::encode(pk.serialize()),
+            hex::encode(pk.to_compressed()),
             PINNED_TESTNET_PUBKEY_HEX,
             "derived pubkey drifted from the pinned vector — a derivation regression"
         );
@@ -433,8 +443,10 @@ mod tests {
         );
         let mut key_bytes = [0u8; 32];
         key_bytes[31] = 1;
-        let sk = secp256k1::SecretKey::from_byte_array(&key_bytes).unwrap();
-        let wif = PrivateKey::new(sk, Network::Testnet).to_wif();
+        let sk = secp256k1::SecretKey::from_secret_bytes(key_bytes).unwrap();
+        let wif = PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .to_wif();
         let imported = view
             .import_wif_with_passphrase(
                 &wif,
diff --git a/src/wallet_backend/event_bridge.rs b/src/wallet_backend/event_bridge.rs
index 3df519f1d..29b81fbed 100644
--- a/src/wallet_backend/event_bridge.rs
+++ b/src/wallet_backend/event_bridge.rs
@@ -286,6 +286,17 @@ impl EventHandler for EventBridge {
                 *wallet_id
             }
             WalletEvent::SyncHeightAdvanced { wallet_id, .. } => *wallet_id,
+            WalletEvent::ChainTruncated {
+                wallet_id,
+                txids,
+                unconfirmed_txids,
+                ..
+            } => {
+                self.snapshots.remove_transactions(wallet_id, txids);
+                self.snapshots
+                    .unconfirm_instant_locked(wallet_id, unconfirmed_txids);
+                *wallet_id
+            }
             WalletEvent::TransactionsSwept {
                 wallet_id, txids, ..
             } => {
@@ -573,7 +584,9 @@ fn summary_ok_balances(summary: &ShieldedSyncPassSummary) -> Vec<([u8; 32], u64)
             WalletShieldedOutcome::Ok(sync) => match sync.balance_total() {
                 Ok(balance) => Some((*wallet_id, balance)),
                 Err(error) => {
-                    tracing::debug!(
+                    // An overflowing note total means corrupt or hostile sync
+                    // data, not routine noise: surface it at warn.
+                    tracing::warn!(
                         ?wallet_id,
                         ?error,
                         "Shielded sync balance total is invalid; preserving the cached balance"
diff --git a/src/wallet_backend/mod.rs b/src/wallet_backend/mod.rs
index f1aeb5fc8..35b149c85 100644
--- a/src/wallet_backend/mod.rs
+++ b/src/wallet_backend/mod.rs
@@ -587,6 +587,14 @@ impl WalletBackend {
         self.inner.pwm.sdk()
     }
 
+    /// Whether upstream refused to save wallet sync data during this run.
+    /// Once set it stays set until the backend is rebuilt: the saved sync
+    /// height is held back and the missing range is scanned again on the next
+    /// start.
+    pub(crate) fn sync_fault_detected(&self) -> bool {
+        self.inner.pwm.sync_fault_detected()
+    }
+
     /// Construct the backend: open the upstream SQLite persister, build the
     /// `PlatformWalletManager` with the DET `EventBridge`, then register every
     /// persisted wallet via [`Self::load_from_persistor_seedless`] (per
@@ -2326,7 +2334,7 @@ impl WalletBackend {
         &self,
         address: &str,
         msg: &[u8; 32],
-    ) -> Result<dash_sdk::dpp::dashcore::secp256k1::ecdsa::Signature, TaskError> {
+    ) -> Result<dash_sdk::dpp::secp256k1::ecdsa::Signature, TaskError> {
         let scope = SecretScope::SingleKey {
             address: address.to_string(),
         };
@@ -3378,6 +3386,12 @@ fn map_shielded_op_error(e: platform_wallet::error::PlatformWalletError) -> Task
             }
         }
 
+        // A token operation keeps its SDK cause, so it is classified like any
+        // SDK error; an unclassified one still names the operation.
+        P::TokenOperationFailed { operation, source } => {
+            TaskError::from_token_operation_failure(operation, source)
+        }
+
         // Every remaining variant → generic WalletBackend wrapper.
         other @ (P::WalletCreation(_)
         | P::StaleReservation
@@ -3427,8 +3441,6 @@ fn map_shielded_op_error(e: platform_wallet::error::PlatformWalletError) -> Task
         | P::NoWalletsConfigured
         | P::SpvError(_)
         | P::TokenError(_)
-        // Upstream's typed successor of `TokenError`; same message.
-        | P::TokenOperationFailed { .. }
         | P::ShieldedNoUnspentNotes
         | P::ShieldedInsufficientBalance { .. }
         | P::ShieldedBuildError(_)
@@ -3453,6 +3465,12 @@ fn map_shielded_op_error(e: platform_wallet::error::PlatformWalletError) -> Task
         | P::MessageSigningMessageInvalid { .. }
         | P::MessageSigningKeyUnavailable { .. }
         | P::MessageSigningFailed { .. }
+        | P::PersisterFlush(_)
+        | P::IdentityBalanceUnavailable(_)
+        | P::InvitationNetworkMismatch { .. }
+        | P::AssetLockTooManyInputs { .. }
+        | P::QuorumNotVerified { .. }
+        | P::SpvProcessRestartRequired(_)
         | P::ShutdownIncomplete(_)) => TaskError::WalletBackend {
             source: Arc::new(other),
         },
@@ -3783,6 +3801,12 @@ fn identity_op_error_kind(e: &platform_wallet::error::PlatformWalletError) -> Id
         // know", so it is not `NotManaged` (which asserts the identity is
         // absent and must be reloaded); upstream's contract is to retry.
         | P::IdentityDiscoveryIncomplete { .. }
+        | P::PersisterFlush(_)
+        | P::IdentityBalanceUnavailable(_)
+        | P::InvitationNetworkMismatch { .. }
+        | P::AssetLockTooManyInputs { .. }
+        | P::QuorumNotVerified { .. }
+        | P::SpvProcessRestartRequired(_)
         // Background sync failed to quiesce — a shutdown fault, unrelated to
         // whether this op reached Platform.
         | P::ShutdownIncomplete(_) => IdentityOpErrorKind::Other,
diff --git a/src/wallet_backend/payments.rs b/src/wallet_backend/payments.rs
index 7c573f995..71a14cfdb 100644
--- a/src/wallet_backend/payments.rs
+++ b/src/wallet_backend/payments.rs
@@ -1111,6 +1111,14 @@ mod tests {
         }
     }
 
+    /// A credit output script as long as the P2PKH one a real asset lock pays
+    /// to. The builder sizes the asset-lock payload, and so its fee, from the
+    /// actual credit outputs, so a shorter script would make the fee cheaper
+    /// than in production and let a larger amount build.
+    fn credit_output_script() -> ScriptBuf {
+        ScriptBuf::from_bytes(vec![0; super::P2PKH_CREDIT_OUTPUT_SCRIPT_LEN])
+    }
+
     #[test]
     fn asset_lock_max_excludes_unconfirmed_funds_counted_by_snapshot() {
         const CONFIRMED_DUFFS: u64 = 1_000_000;
@@ -1175,7 +1183,7 @@ mod tests {
             .set_special_payload(TransactionPayload::AssetLockPayloadType(
                 AssetLockPayload::new(vec![TxOut {
                     value: max_amount,
-                    script_pubkey: ScriptBuf::new(),
+                    script_pubkey: credit_output_script(),
                 }]),
             ))
             .add_funding(&mut dry_run_account, account)
@@ -1193,7 +1201,7 @@ mod tests {
             .set_special_payload(TransactionPayload::AssetLockPayloadType(
                 AssetLockPayload::new(vec![TxOut {
                     value: max_amount + 1,
-                    script_pubkey: ScriptBuf::new(),
+                    script_pubkey: credit_output_script(),
                 }]),
             ))
             .add_funding(&mut one_over_account, account)
@@ -1211,7 +1219,7 @@ mod tests {
             .set_special_payload(TransactionPayload::AssetLockPayloadType(
                 AssetLockPayload::new(vec![TxOut {
                     value: snapshot_balance.spendable(),
-                    script_pubkey: ScriptBuf::new(),
+                    script_pubkey: credit_output_script(),
                 }]),
             ))
             .add_funding(&mut overshoot_account, account)
@@ -1294,7 +1302,7 @@ mod tests {
             .set_special_payload(TransactionPayload::AssetLockPayloadType(
                 AssetLockPayload::new(vec![TxOut {
                     value: max_amount,
-                    script_pubkey: ScriptBuf::new(),
+                    script_pubkey: credit_output_script(),
                 }]),
             ))
             .add_funding(&mut dry_run_account, account)
@@ -1316,7 +1324,7 @@ mod tests {
             .set_special_payload(TransactionPayload::AssetLockPayloadType(
                 AssetLockPayload::new(vec![TxOut {
                     value: max_amount + 1,
-                    script_pubkey: ScriptBuf::new(),
+                    script_pubkey: credit_output_script(),
                 }]),
             ))
             .add_funding(&mut one_over_account, account)
diff --git a/src/wallet_backend/platform_compatibility/engine.rs b/src/wallet_backend/platform_compatibility/engine.rs
index af1fd4f7e..4397c0fb5 100644
--- a/src/wallet_backend/platform_compatibility/engine.rs
+++ b/src/wallet_backend/platform_compatibility/engine.rs
@@ -6,7 +6,7 @@ use rusqlite::{Connection, OpenFlags, OptionalExtension, TransactionBehavior};
 use super::storage_failure::StorageFailure;
 
 const OLD_SCHEMA: &str = include_str!("fixtures/67d4ef3.sql");
-const TARGET_SCHEMA: &str = include_str!("fixtures/e3cd7cf.sql");
+const TARGET_SCHEMA: &str = include_str!("fixtures/033ecae.sql");
 const HISTORY: &str = "refinery_schema_history";
 const IDENTITY_INDEX_KEY: &str = "det:identity_index:v1";
 
@@ -740,6 +740,7 @@ fn allowed_columns(
             "winner_mined_height",
         ],
         "core_sync_state" => &["chainlock_height"],
+        "asset_locks" => &["operation_id"],
         _ => &[],
     };
     let expected_removed: &[&str] = if table == "identities" {
diff --git a/src/wallet_backend/platform_compatibility/engine/tests.rs b/src/wallet_backend/platform_compatibility/engine/tests.rs
index a6132f4b1..adbfc6489 100644
--- a/src/wallet_backend/platform_compatibility/engine/tests.rs
+++ b/src/wallet_backend/platform_compatibility/engine/tests.rs
@@ -1055,3 +1055,50 @@ fn platform_compatibility_lock_survives_concurrent_process_spawns() {
         outcome.expect("a released lock must be re-acquirable while processes spawn");
     });
 }
+
+#[test]
+fn platform_compatibility_asset_lock_blobs_survive_with_no_operation_id() {
+    let (_dir, path, target) = fixture();
+    let conn = Connection::open(&path).unwrap();
+    conn.execute_batch(include_str!("../fixtures/public-rows.sql"))
+        .unwrap();
+    conn.execute("INSERT INTO asset_locks (wallet_id, outpoint, status, account_index, identity_index, amount_duffs, lifecycle_blob) VALUES (?1, ?2, 'built', 0, 0, 123, ?3)", rusqlite::params![&[0xA1u8;32][..], &[0xB1u8;36][..], &[0xC1u8,0xC2][..]]).unwrap();
+    drop(conn);
+    let backup = upgrade(&path, &target, |_| Ok(())).unwrap().unwrap();
+    let conn = Connection::open(&path).unwrap();
+    let (blob, operation): (Vec<u8>, Option<Vec<u8>>) = conn
+        .query_row(
+            "SELECT lifecycle_blob, operation_id FROM asset_locks",
+            [],
+            |row| Ok((row.get(0)?, row.get(1)?)),
+        )
+        .unwrap();
+    assert_eq!(blob, [0xC1, 0xC2]);
+    assert_eq!(operation, None);
+    assert_eq!(
+        Connection::open(backup)
+            .unwrap()
+            .query_row("SELECT lifecycle_blob FROM asset_locks", [], |row| row
+                .get::<_, Vec<u8>>(0))
+            .unwrap(),
+        blob
+    );
+}
+
+#[test]
+fn platform_compatibility_refuses_a_different_version_19_without_changes() {
+    let (dir, path, target) = fixture();
+    let conn = Connection::open(&path).unwrap();
+    conn.execute_batch("INSERT INTO refinery_schema_history VALUES (19, 'core_transaction_accounting', '2026-10-21T00:00:00Z', '1'); CREATE TABLE core_transaction_inputs (opaque BLOB);").unwrap();
+    drop(conn);
+    let before = snapshot(&path);
+    assert!(
+        upgrade(&path, &target, |_| panic!(
+            "unrecognized history must not reach validation"
+        ))
+        .unwrap()
+        .is_none()
+    );
+    assert_eq!(snapshot(&path), before);
+    assert!(backup_files(dir.path()).is_empty());
+}
diff --git a/src/wallet_backend/platform_compatibility/fixtures/033ecae.sql b/src/wallet_backend/platform_compatibility/fixtures/033ecae.sql
new file mode 100644
index 000000000..185a9e2af
--- /dev/null
+++ b/src/wallet_backend/platform_compatibility/fixtures/033ecae.sql
@@ -0,0 +1,413 @@
+-- Empty schema captured from Platform 033ecaee2f3badc8e04ff8be664062f33516e3e4.
+-- Generated by SqlitePersister::open; no wallet or identity data.
+BEGIN TRANSACTION;
+CREATE TABLE "account_registrations" (
+    wallet_id BLOB NOT NULL,
+    account_type TEXT NOT NULL CHECK (account_type IN ('standard', 'standard_bip44', 'standard_bip32', 'coinjoin', 'identity_registration', 'identity_topup', 'identity_topup_unbound', 'identity_invitation', 'asset_lock_address_topup', 'asset_lock_shielded_topup', 'provider_voting', 'provider_owner', 'provider_operator', 'provider_platform', 'dashpay_receiving', 'dashpay_external', 'platform_payment')),
+    account_index INTEGER NOT NULL,
+    key_class INTEGER NOT NULL DEFAULT 0,
+    user_identity_id BLOB NOT NULL DEFAULT (zeroblob(32)),
+    friend_identity_id BLOB NOT NULL DEFAULT (zeroblob(32)),
+    account_xpub_bytes BLOB NOT NULL,
+    PRIMARY KEY (wallet_id, account_type, account_index, key_class, user_identity_id, friend_identity_id),
+    FOREIGN KEY (wallet_id) REFERENCES wallets(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE "asset_locks" (
+    wallet_id BLOB NOT NULL,
+    outpoint BLOB NOT NULL,
+    status TEXT NOT NULL CHECK (status IN ('built', 'broadcast', 'is_locked', 'chain_locked', 'consumed', 'recovered_from_chain')),
+    account_index INTEGER NOT NULL,
+    identity_index INTEGER NOT NULL,
+    amount_duffs INTEGER NOT NULL,
+    lifecycle_blob BLOB NOT NULL, operation_id BLOB CHECK (operation_id IS NULL OR (typeof(operation_id) = 'blob' AND length(operation_id) = 16)),
+    PRIMARY KEY (wallet_id, outpoint),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE contacts (
+    wallet_id BLOB NOT NULL,
+    owner_id BLOB NOT NULL,
+    contact_id BLOB NOT NULL,
+    state TEXT NOT NULL CHECK (state IN ('sent', 'received', 'established')),
+    outgoing_request BLOB,
+    incoming_request BLOB,
+    alias TEXT,
+    note TEXT,
+    is_hidden INTEGER,
+    accepted_accounts BLOB,
+    -- G1c: set when external-account registration permanently fails for a
+    -- contact (so the sync sweep stops retrying a poisoned channel);
+    -- cleared on a superseding rotation. Nullable — readers treat NULL as
+    -- `false`.
+    payment_channel_broken INTEGER,
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (wallet_id, owner_id, contact_id),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE core_address_pool (
+    wallet_id BLOB NOT NULL,
+    account_type TEXT NOT NULL,
+    account_index INTEGER NOT NULL,
+    key_class INTEGER NOT NULL DEFAULT 0,
+    user_identity_id BLOB NOT NULL DEFAULT (zeroblob(32)),
+    friend_identity_id BLOB NOT NULL DEFAULT (zeroblob(32)),
+    pool_type INTEGER NOT NULL CHECK (pool_type IN (0, 1, 2, 3)),
+    address_index INTEGER NOT NULL,
+    script BLOB NOT NULL,
+    used INTEGER NOT NULL DEFAULT 0 CHECK (used IN (0, 1)), public_key BLOB NULL, key_type INTEGER NULL CHECK (key_type IS NULL OR key_type IN (0, 1, 2)), reserved_at INTEGER NULL,
+    PRIMARY KEY (wallet_id, account_type, account_index, key_class, user_identity_id, friend_identity_id, pool_type, address_index),
+    FOREIGN KEY (wallet_id) REFERENCES wallets(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE core_instant_locks (
+    wallet_id BLOB NOT NULL,
+    txid BLOB NOT NULL,
+    islock_blob BLOB NOT NULL,
+    PRIMARY KEY (wallet_id, txid),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE core_sync_state (
+    wallet_id BLOB NOT NULL PRIMARY KEY,
+    last_processed_height INTEGER,
+    synced_height INTEGER, chainlock_height INTEGER, last_applied_chain_lock BLOB,
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE "core_transactions" (
+    wallet_id BLOB NOT NULL,
+    txid BLOB NOT NULL,
+    height INTEGER,
+    block_hash BLOB,
+    block_time INTEGER,
+    finalized INTEGER NOT NULL,
+    record_blob BLOB,
+    PRIMARY KEY (wallet_id, txid),
+    FOREIGN KEY (wallet_id) REFERENCES wallets(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE core_utxos (
+    wallet_id BLOB NOT NULL,
+    outpoint BLOB NOT NULL,
+    value INTEGER NOT NULL,
+    script BLOB NOT NULL,
+    spent INTEGER NOT NULL,
+    spent_in_txid BLOB, winner_mined_height INTEGER, is_sweep_placeholder INTEGER NOT NULL DEFAULT 0,
+    PRIMARY KEY (wallet_id, outpoint),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE dashpay_payments_overlay (
+    identity_id BLOB NOT NULL,
+    payment_id TEXT NOT NULL,
+    overlay_blob BLOB NOT NULL,
+    PRIMARY KEY (identity_id, payment_id),
+    FOREIGN KEY (identity_id) REFERENCES identities(identity_id) ON DELETE CASCADE
+);
+CREATE TABLE dashpay_profiles (
+    identity_id BLOB NOT NULL PRIMARY KEY,
+    profile_blob BLOB NOT NULL,
+    FOREIGN KEY (identity_id) REFERENCES identities(identity_id) ON DELETE CASCADE
+);
+CREATE TABLE dpns_name_states (
+        wallet_id BLOB NOT NULL,
+        document_id BLOB NOT NULL,
+        identity_id BLOB NOT NULL,
+        label TEXT NOT NULL,
+        normalized_label TEXT NOT NULL,
+        normalized_parent_domain TEXT NOT NULL,
+        price INTEGER CHECK (price IS NULL OR price >= 0),
+        status TEXT NOT NULL CHECK (status IN ('owned', 'sold', 'transferred')),
+        counterparty_id BLOB,
+        created_at_ms INTEGER,
+        updated_at_ms INTEGER,
+        transferred_at_ms INTEGER,
+        last_synced_at_ms INTEGER NOT NULL,
+        PRIMARY KEY (wallet_id, document_id),
+        CHECK ((status = 'owned') = (counterparty_id IS NULL)),
+        FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+    );
+CREATE TABLE identities (
+    identity_id BLOB NOT NULL PRIMARY KEY,
+    wallet_id BLOB,
+    identity_index INTEGER,
+    entry_blob BLOB NOT NULL,
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE "identity_keys" (
+    wallet_id BLOB,
+    identity_id BLOB NOT NULL,
+    key_id INTEGER NOT NULL,
+    public_key_blob BLOB NOT NULL,
+    public_key_hash BLOB NOT NULL,
+    -- Reserved for a future typed projection; always NULL today.
+    -- derivation_indices lives inside public_key_blob (the IdentityKeyWire
+    -- blob is the single source of truth).
+    derivation_blob BLOB,
+    PRIMARY KEY (identity_id, key_id),
+    FOREIGN KEY (wallet_id) REFERENCES wallets(wallet_id) ON DELETE CASCADE,
+    FOREIGN KEY (wallet_id, identity_id)
+        REFERENCES identities(wallet_id, identity_id) ON DELETE CASCADE
+);
+CREATE TABLE identity_scan_failed_indices (
+    wallet_id BLOB NOT NULL,
+    failed_index INTEGER NOT NULL CHECK (failed_index >= 0),
+    PRIMARY KEY (wallet_id, failed_index),
+    FOREIGN KEY (wallet_id) REFERENCES identity_scan_states(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE identity_scan_states (
+    wallet_id BLOB NOT NULL PRIMARY KEY,
+    complete INTEGER NOT NULL CHECK (complete IN (0, 1)),
+    probed_from INTEGER NOT NULL CHECK (probed_from >= 0),
+    probed_through INTEGER NOT NULL CHECK (probed_through >= probed_from),
+    unlocated_gap INTEGER NOT NULL CHECK (unlocated_gap IN (0, 1)),
+    -- A scan cannot both have answered everything and be sitting on a gap
+    -- nobody could name.
+    CHECK (complete = 0 OR unlocated_gap = 0),
+    FOREIGN KEY (wallet_id) REFERENCES wallets(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE ignored_senders (
+    wallet_id BLOB NOT NULL,
+    owner_id BLOB NOT NULL,
+    sender_id BLOB NOT NULL,
+    ignored_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (wallet_id, owner_id, sender_id),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE invitations (
+        wallet_id BLOB NOT NULL,
+        outpoint BLOB NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('created', 'claimed', 'reclaimed')),
+        funding_index INTEGER NOT NULL,
+        amount_duffs INTEGER NOT NULL,
+        expiry_unix INTEGER NOT NULL,
+        created_at_secs INTEGER NOT NULL,
+        has_inviter INTEGER NOT NULL,
+        PRIMARY KEY (wallet_id, outpoint),
+        FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+    );
+CREATE TABLE meta_contact (
+    wallet_id  BLOB NOT NULL,
+    owner_id   BLOB NOT NULL,
+    contact_id BLOB NOT NULL,
+    key        TEXT NOT NULL CHECK (length(key) BETWEEN 1 AND 128),
+    value      BLOB NOT NULL,
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (wallet_id, owner_id, contact_id, key)
+);
+CREATE TABLE meta_data_versions (
+    wallet_id BLOB NOT NULL,
+    domain TEXT NOT NULL,
+    seq INTEGER NOT NULL DEFAULT 0,
+    PRIMARY KEY (wallet_id, domain)
+);
+CREATE TABLE meta_global (
+    key        TEXT NOT NULL PRIMARY KEY CHECK (length(key) BETWEEN 1 AND 128),
+    value      BLOB NOT NULL,
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE TABLE meta_identity (
+    identity_id BLOB NOT NULL,
+    key         TEXT NOT NULL CHECK (length(key) BETWEEN 1 AND 128),
+    value       BLOB NOT NULL,
+    updated_at  INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (identity_id, key)
+);
+CREATE TABLE meta_platform_address (
+    wallet_id  BLOB NOT NULL,
+    address    BLOB NOT NULL,
+    key        TEXT NOT NULL CHECK (length(key) BETWEEN 1 AND 128),
+    value      BLOB NOT NULL,
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (wallet_id, address, key)
+);
+CREATE TABLE meta_store_generation (
+    id INTEGER NOT NULL PRIMARY KEY CHECK (id = 0),
+    generation BLOB NOT NULL
+);
+INSERT INTO "meta_store_generation" VALUES(0,X'90C76E7005D87413639127DDBBC6C290');
+CREATE TABLE meta_token (
+    identity_id BLOB NOT NULL,
+    token_id    BLOB NOT NULL,
+    key         TEXT NOT NULL CHECK (length(key) BETWEEN 1 AND 128),
+    value       BLOB NOT NULL,
+    updated_at  INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (identity_id, token_id, key)
+);
+CREATE TABLE meta_wallet (
+    wallet_id  BLOB NOT NULL,
+    key        TEXT NOT NULL CHECK (length(key) BETWEEN 1 AND 128),
+    value      BLOB NOT NULL,
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    PRIMARY KEY (wallet_id, key)
+);
+CREATE TABLE pending_contact_crypto (
+    wallet_id BLOB NOT NULL,
+    owner_identity_id BLOB NOT NULL,
+    contact_id BLOB NOT NULL,
+    kind TEXT NOT NULL CHECK (kind IN ('register_receiving', 'register_external', 'contact_info_decrypt', 'auto_accept')),
+    payload BLOB NOT NULL,
+    enqueued_at_ms INTEGER NOT NULL,
+    PRIMARY KEY (wallet_id, owner_identity_id, contact_id, kind),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE platform_address_sync (
+    wallet_id BLOB NOT NULL PRIMARY KEY,
+    sync_height INTEGER NOT NULL,
+    sync_timestamp INTEGER NOT NULL,
+    last_known_recent_block INTEGER NOT NULL,
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE platform_addresses (
+    wallet_id BLOB NOT NULL,
+    account_index INTEGER NOT NULL,
+    address_index INTEGER NOT NULL,
+    address BLOB NOT NULL,
+    balance INTEGER NOT NULL,
+    nonce INTEGER NOT NULL, as_of_height INTEGER NOT NULL DEFAULT 0,
+    PRIMARY KEY (wallet_id, address),
+    FOREIGN KEY (wallet_id) REFERENCES "wallets"(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE refinery_schema_history(
+             version int4 PRIMARY KEY,
+             name VARCHAR(255),
+             applied_on VARCHAR(255),
+             checksum VARCHAR(255));
+INSERT INTO "refinery_schema_history" VALUES(1,'initial','2026-10-21T00:00:00Z','16458714021387590417');
+INSERT INTO "refinery_schema_history" VALUES(2,'address_height_pin','2026-10-21T00:00:00Z','9304453063389616695');
+INSERT INTO "refinery_schema_history" VALUES(3,'invitations','2026-10-21T00:00:00Z','6768710306020099565');
+INSERT INTO "refinery_schema_history" VALUES(4,'asset_lock_recovered_status','2026-10-21T00:00:00Z','14446754812616312642');
+INSERT INTO "refinery_schema_history" VALUES(5,'dpns_name_states','2026-10-21T00:00:00Z','16834970739141546284');
+INSERT INTO "refinery_schema_history" VALUES(6,'tracked_masternodes','2026-10-21T00:00:00Z','13718514320935649081');
+INSERT INTO "refinery_schema_history" VALUES(7,'utxo_sweep_winner_height','2026-10-21T00:00:00Z','4410976868559573281');
+INSERT INTO "refinery_schema_history" VALUES(8,'rehydration_base_schema','2026-10-21T00:00:00Z','8883371305674850298');
+INSERT INTO "refinery_schema_history" VALUES(9,'unified','2026-10-21T00:00:00Z','8389295906542582065');
+INSERT INTO "refinery_schema_history" VALUES(10,'pool_public_key','2026-10-21T00:00:00Z','15088205568906581463');
+INSERT INTO "refinery_schema_history" VALUES(11,'pool_reserved_at','2026-10-21T00:00:00Z','1184102594786438566');
+INSERT INTO "refinery_schema_history" VALUES(12,'drop_core_utxo_metadata','2026-10-21T00:00:00Z','14281733277552006158');
+INSERT INTO "refinery_schema_history" VALUES(13,'shielded_viewing_keys','2026-10-21T00:00:00Z','2886147678304763509');
+INSERT INTO "refinery_schema_history" VALUES(14,'single_source_core_confirmation_height','2026-10-21T00:00:00Z','13462228277166821110');
+INSERT INTO "refinery_schema_history" VALUES(15,'purge_legacy_empty_script_spent_utxos','2026-10-21T00:00:00Z','723175730717787103');
+INSERT INTO "refinery_schema_history" VALUES(16,'identity_keys_null_scope_requires_existing_identity','2026-10-21T00:00:00Z','5573841766625796742');
+INSERT INTO "refinery_schema_history" VALUES(17,'identity_scan_state','2026-10-21T00:00:00Z','14086773559107496341');
+INSERT INTO "refinery_schema_history" VALUES(18,'identity_hard_delete','2026-10-21T00:00:00Z','14764815300602197850');
+INSERT INTO "refinery_schema_history" VALUES(19,'asset_lock_operation_id','2026-10-21T00:00:00Z','1537039181339941563');
+CREATE TABLE shielded_viewing_keys (
+    wallet_id BLOB NOT NULL,
+    account_index INTEGER NOT NULL CHECK (account_index BETWEEN 0 AND 4294967295),
+    viewing_key BLOB NOT NULL,
+    PRIMARY KEY (wallet_id, account_index),
+    FOREIGN KEY (wallet_id) REFERENCES wallets(wallet_id) ON DELETE CASCADE
+);
+CREATE TABLE token_balances (
+    identity_id BLOB NOT NULL,
+    token_id BLOB NOT NULL,
+    balance INTEGER NOT NULL,
+    updated_at INTEGER NOT NULL,
+    PRIMARY KEY (identity_id, token_id),
+    FOREIGN KEY (identity_id) REFERENCES identities(identity_id) ON DELETE CASCADE
+);
+CREATE TABLE tracked_masternodes (
+        network TEXT NOT NULL CHECK (network IN ('mainnet', 'testnet', 'devnet', 'regtest')),
+        pro_tx_hash BLOB NOT NULL CHECK (length(pro_tx_hash) = 32),
+        label TEXT,
+        added_at INTEGER NOT NULL,
+        snapshot_json TEXT NOT NULL,
+        PRIMARY KEY (network, pro_tx_hash)
+    );
+CREATE TABLE "wallets" (
+    wallet_id BLOB NOT NULL PRIMARY KEY,
+    network TEXT NOT NULL CHECK (network IN ('mainnet', 'testnet', 'devnet', 'regtest')),
+    birth_height INTEGER NOT NULL
+);
+CREATE INDEX idx_core_utxos_spent ON core_utxos(wallet_id, spent);
+CREATE INDEX idx_identities_wallet ON identities(wallet_id);
+CREATE TRIGGER cascade_meta_on_wallet_delete
+AFTER DELETE ON "wallets"
+FOR EACH ROW
+BEGIN
+    DELETE FROM meta_wallet           WHERE wallet_id = OLD.wallet_id;
+    DELETE FROM meta_contact          WHERE wallet_id = OLD.wallet_id;
+    DELETE FROM meta_platform_address WHERE wallet_id = OLD.wallet_id;
+END;
+CREATE TRIGGER cascade_meta_on_identity_delete
+AFTER DELETE ON identities
+FOR EACH ROW
+BEGIN
+    DELETE FROM meta_identity WHERE identity_id = OLD.identity_id;
+    DELETE FROM meta_token    WHERE identity_id = OLD.identity_id;
+END;
+CREATE TRIGGER cascade_meta_token_on_token_balance_delete
+AFTER DELETE ON token_balances
+FOR EACH ROW
+BEGIN
+    DELETE FROM meta_token
+        WHERE identity_id = OLD.identity_id AND token_id = OLD.token_id;
+END;
+CREATE TRIGGER cascade_meta_contact_on_contact_delete
+AFTER DELETE ON contacts
+FOR EACH ROW
+BEGIN
+    DELETE FROM meta_contact
+        WHERE wallet_id = OLD.wallet_id
+          AND owner_id = OLD.owner_id
+          AND contact_id = OLD.contact_id;
+END;
+CREATE TRIGGER cascade_meta_platform_address_on_address_delete
+AFTER DELETE ON platform_addresses
+FOR EACH ROW
+BEGIN
+    DELETE FROM meta_platform_address
+        WHERE wallet_id = OLD.wallet_id AND address = OLD.address;
+END;
+CREATE UNIQUE INDEX idx_identities_wallet_identity ON identities(wallet_id, identity_id);
+CREATE INDEX idx_identity_keys_wallet_identity ON identity_keys(wallet_id, identity_id);
+CREATE INDEX idx_core_address_pool_used
+    ON core_address_pool(wallet_id, used);
+CREATE INDEX idx_core_address_pool_script
+    ON core_address_pool(wallet_id, script);
+CREATE TRIGGER cascade_meta_data_versions_on_wallet_delete
+AFTER DELETE ON wallets
+FOR EACH ROW
+BEGIN
+    DELETE FROM meta_data_versions WHERE wallet_id = OLD.wallet_id;
+END;
+CREATE INDEX idx_core_transactions_height ON core_transactions(wallet_id, height);
+CREATE INDEX idx_core_utxos_unmaterialized ON core_utxos(wallet_id, winner_mined_height)
+    WHERE is_sweep_placeholder = 1;
+CREATE TRIGGER setnull_core_utxos_on_tx_delete AFTER DELETE ON core_transactions
+BEGIN
+    UPDATE core_utxos SET spent_in_txid = NULL
+    WHERE wallet_id = OLD.wallet_id AND spent_in_txid = OLD.txid;
+END;
+CREATE TRIGGER identity_keys_null_scope_requires_unowned_identity
+BEFORE INSERT ON identity_keys
+FOR EACH ROW WHEN NEW.wallet_id IS NULL
+BEGIN
+    SELECT RAISE(ABORT, 'identity_keys.wallet_id is NULL but the named identity is missing or wallet-owned')
+    WHERE NOT EXISTS (
+        SELECT 1 FROM identities i
+        WHERE i.identity_id = NEW.identity_id AND i.wallet_id IS NULL
+    );
+END;
+CREATE TRIGGER identity_keys_null_scope_requires_unowned_identity_on_update
+BEFORE UPDATE ON identity_keys
+FOR EACH ROW WHEN NEW.wallet_id IS NULL
+BEGIN
+    SELECT RAISE(ABORT, 'identity_keys.wallet_id is NULL but the named identity is missing or wallet-owned')
+    WHERE NOT EXISTS (
+        SELECT 1 FROM identities i
+        WHERE i.identity_id = NEW.identity_id AND i.wallet_id IS NULL
+    );
+END;
+CREATE TRIGGER cascade_children_on_identity_delete
+AFTER DELETE ON identities
+FOR EACH ROW
+BEGIN
+    DELETE FROM identity_keys   WHERE identity_id = OLD.identity_id;
+    DELETE FROM contacts        WHERE owner_id    = OLD.identity_id;
+    DELETE FROM ignored_senders WHERE owner_id    = OLD.identity_id;
+    DELETE FROM pending_contact_crypto WHERE owner_identity_id = OLD.identity_id;
+END;
+CREATE INDEX idx_contacts_owner ON contacts(owner_id);
+CREATE INDEX idx_ignored_senders_owner ON ignored_senders(owner_id);
+CREATE INDEX idx_pending_contact_crypto_owner ON pending_contact_crypto(owner_identity_id);
+CREATE UNIQUE INDEX asset_locks_wallet_operation_id ON asset_locks(wallet_id, operation_id) WHERE operation_id IS NOT NULL;
+CREATE TRIGGER asset_locks_operation_id_immutable BEFORE UPDATE OF operation_id ON asset_locks WHEN OLD.operation_id IS NOT NULL AND NEW.operation_id IS NOT OLD.operation_id BEGIN SELECT RAISE(ABORT, 'asset lock operation ID cannot change'); END;
+COMMIT;
+PRAGMA application_id = 1347180372;
+PRAGMA user_version = 0;
diff --git a/src/wallet_backend/platform_compatibility/fixtures/README.md b/src/wallet_backend/platform_compatibility/fixtures/README.md
index 4582259f9..f70031f0a 100644
--- a/src/wallet_backend/platform_compatibility/fixtures/README.md
+++ b/src/wallet_backend/platform_compatibility/fixtures/README.md
@@ -18,9 +18,20 @@ The production bridge compares these exact histories and materialized
 schemas before translating data. The destination itself is created by the
 current public `SqlitePersister::open`, not by the fixture SQL. Updating
 either schema revision requires reviewing and regenerating these guards.
-The selected dependency pin `63cf57f40d0000bf3b2b26026c8fa1c71162852d`
-has identical migration code and schema to `e3cd7cf`, so it uses the same
-destination guard.
+The current destination guard is `033ecae.sql`, captured from an empty database
+opened by `SqlitePersister::open` at Platform revision
+`033ecaee2f3badc8e04ff8be664062f33516e3e4`. The V001–V018 migration names and
+checksums match `e3cd7cf.sql`. V019 adds only the nullable `asset_locks.operation_id`
+column, its unique index and immutability trigger (checksum `1537039181339941563`).
+The snapshot contains no domain rows; history timestamps are normalized. The
+bridge copies existing asset-lock blobs unchanged and leaves the new column NULL.
+A different migration occupying version 19 is not an accepted source history.
+Platform revision `a0d7b6ffec6f91e3818530b83d75adcd62480ebe` changes only doc
+comments in `V007__utxo_sweep_winner_height.rs`; every migration's SQL and
+checksum, and so the snapshot, are unchanged.
+Revision `132ae31a1356d035cd8326f27c1109685090a71d` (5.0.0-rc.8) leaves the
+migrations untouched.
+
 
 `public-rows.sql` contains only public synthetic rows from that old revision's
 `packages/rs-platform-wallet-storage/tests/fixtures/populated_v001.db`, after
diff --git a/src/wallet_backend/secret_access.rs b/src/wallet_backend/secret_access.rs
index 5d676afab..2038b5317 100644
--- a/src/wallet_backend/secret_access.rs
+++ b/src/wallet_backend/secret_access.rs
@@ -1730,11 +1730,13 @@ mod tests {
 
     fn known_testnet_wif() -> String {
         use dash_sdk::dpp::dashcore::PrivateKey;
-        use dash_sdk::dpp::dashcore::secp256k1::SecretKey;
+        use dash_sdk::dpp::secp256k1::SecretKey;
         let mut bytes = [0u8; 32];
         bytes[31] = 1;
-        let sk = SecretKey::from_byte_array(&bytes).unwrap();
-        PrivateKey::new(sk, Network::Testnet).to_wif()
+        let sk = SecretKey::from_secret_bytes(bytes).unwrap();
+        PrivateKey::from_byte_array(sk.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .to_wif()
     }
 
     /// Write a legacy DET AES-GCM `SingleKeyEntry` straight to the vault Tier-1 —
@@ -1742,19 +1744,17 @@ mod tests {
     /// import time, so this is how the legacy→Tier-2 lazy migration path stays
     /// covered.
     fn write_legacy_protected_key(store: &Arc<SecretStore>, passphrase: &str) -> String {
-        use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
         use dash_sdk::dpp::dashcore::{Address, PrivateKey, PublicKey};
 
         let priv_key = PrivateKey::from_wif(&known_testnet_wif()).expect("wif");
-        let raw: Zeroizing<[u8; 32]> =
-            Zeroizing::new(priv_key.inner[..].try_into().expect("32 bytes"));
-        let secp = Secp256k1::new();
+        let raw: Zeroizing<[u8; 32]> = priv_key.inner.to_bytes();
+
         let pub_key = PublicKey {
             compressed: priv_key.compressed,
-            inner: priv_key.inner.public_key(&secp),
+            inner: priv_key.inner.public_key(),
         };
         let address = Address::p2pkh(&pub_key, Network::Testnet).to_string();
-        let pub_bytes = pub_key.inner.serialize().to_vec();
+        let pub_bytes = pub_key.inner.to_compressed().to_vec();
         let entry =
             SingleKeyEntry::protected(&raw, passphrase, Some("the usual".into()), pub_bytes)
                 .expect("build legacy protected entry");
@@ -1819,9 +1819,10 @@ mod tests {
         let dir = tempfile::tempdir().unwrap();
         let store = fresh_store(dir.path());
         let address = write_legacy_protected_key(&store, SENTINEL_PASSPHRASE);
-        let expected: [u8; 32] = PrivateKey::from_wif(&known_testnet_wif()).unwrap().inner[..]
-            .try_into()
-            .unwrap();
+        let expected: [u8; 32] = *PrivateKey::from_wif(&known_testnet_wif())
+            .unwrap()
+            .inner
+            .to_bytes();
 
         // First resolve: one passphrase, re-wraps to Tier-2.
         let prompt = Arc::new(TestPrompt::new([ScriptedAnswer::once(SENTINEL_PASSPHRASE)]));
diff --git a/src/wallet_backend/sidecar.rs b/src/wallet_backend/sidecar.rs
index f399b831d..9f87cb0c3 100644
--- a/src/wallet_backend/sidecar.rs
+++ b/src/wallet_backend/sidecar.rs
@@ -32,7 +32,10 @@ pub(crate) fn sidecar_key(network: Network, infix: &str, id: &SidecarId) -> Stri
     format!(
         "{}{infix}{}",
         network_prefix(network),
-        base58::encode_slice(id)
+        dash_sdk::dpp::platform_value::string_encoding::encode(
+            id,
+            dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58
+        )
     )
 }
 
diff --git a/src/wallet_backend/single_key.rs b/src/wallet_backend/single_key.rs
index 7c8424fa9..2fb1c85f9 100644
--- a/src/wallet_backend/single_key.rs
+++ b/src/wallet_backend/single_key.rs
@@ -14,11 +14,11 @@
 use std::sync::Arc;
 
 #[cfg(test)]
-use dash_sdk::dpp::dashcore::secp256k1::Message;
-use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
-#[cfg(test)]
-use dash_sdk::dpp::dashcore::secp256k1::ecdsa::Signature;
+use dash_sdk::dpp::secp256k1::Message;
+
 use dash_sdk::dpp::dashcore::{Address, Network, PrivateKey, PublicKey};
+#[cfg(test)]
+use dash_sdk::dpp::secp256k1::ecdsa::Signature;
 use platform_wallet_storage::secrets::{
     SecretBytes, SecretStore, SecretStoreError, SecretString, WalletId as SecretWalletId,
 };
@@ -256,10 +256,10 @@ impl<'a> SingleKeyView<'a> {
         if !priv_key.compressed {
             return Err(TaskError::UncompressedWifUnsupported);
         }
-        let secp = Secp256k1::new();
+
         let pub_key = PublicKey {
             compressed: priv_key.compressed,
-            inner: priv_key.inner.public_key(&secp),
+            inner: priv_key.inner.public_key(),
         };
         let address = Address::p2pkh(&pub_key, self.network);
         let address_str = address.to_string();
@@ -289,13 +289,9 @@ impl<'a> SingleKeyView<'a> {
                 };
                 // Extracted WIF bytes wrapped in `Zeroizing` so the stack copy wipes
                 // on drop instead of lingering after the entry is built.
-                let raw: Zeroizing<[u8; 32]> = Zeroizing::new(
-                    priv_key.inner[..]
-                        .try_into()
-                        .map_err(|_| TaskError::SingleKeyCryptoFailure)?,
-                );
+                let raw: Zeroizing<[u8; 32]> = priv_key.inner.to_bytes();
 
-                let pub_bytes = pub_key.inner.serialize().to_vec();
+                let pub_bytes = pub_key.inner.to_compressed().to_vec();
                 let password = passphrase
                     .passphrase
                     .as_ref()
@@ -714,8 +710,8 @@ impl<'a> SingleKeyView<'a> {
                 return Ok(None);
             }
         };
-        let secp = Secp256k1::new();
-        let public_key = priv_key.public_key(&secp);
+
+        let public_key = priv_key.public_key();
         let address = Address::p2pkh(&public_key, meta.network);
 
         let key_hash = ClosedSingleKey::compute_key_hash(&key_bytes);
@@ -869,7 +865,7 @@ fn parse_locked_address_and_pubkey(
         );
         return None;
     }
-    let inner = match dash_sdk::dpp::dashcore::secp256k1::PublicKey::from_slice(public_key_bytes) {
+    let inner = match dash_sdk::dpp::secp256k1::PublicKey::from_slice(public_key_bytes) {
         Ok(p) => p,
         Err(e) => {
             tracing::warn!(
@@ -885,7 +881,7 @@ fn parse_locked_address_and_pubkey(
         address,
         PublicKey {
             compressed: true,
-            inner,
+            inner: inner.into(),
         },
     ))
 }
@@ -1031,10 +1027,10 @@ impl<'a> SingleKeyView<'a> {
 /// [`DetSigner`](crate::wallet_backend::det_signer::DetSigner).
 #[cfg(test)]
 fn sign_message_with_raw_key(bytes: &[u8; 32], msg: &[u8; 32]) -> Result<Signature, TaskError> {
-    let sk = dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_byte_array(bytes)
+    let sk = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(*bytes)
         .map_err(|_| TaskError::ImportedKeyNotFound)?;
     let message = Message::from_digest(*msg);
-    Ok(Secp256k1::new().sign_ecdsa(&message, &sk))
+    Ok(dash_sdk::dpp::secp256k1::ecdsa::sign(message, &sk))
 }
 
 #[cfg(test)]
@@ -1137,7 +1133,7 @@ mod tests {
 
     fn known_wif() -> &'static str {
         // Testnet WIF with deterministic, all-zero-except-last-byte key
-        // bytes. Generated locally with `PrivateKey::new(SecretKey::from_byte_array(&[0;31].chain(&[1])).unwrap(), Testnet).to_wif()`
+        // bytes. Generated locally with `PrivateKey::new(SecretKey::from_secret_bytes([0;31].chain(&[1])).unwrap(), Testnet).to_wif()`
         // and pinned here to keep tests offline + reproducible.
         "cMahea7zqjxrtgAbB7LSGbcQUr1uX1ojuat9jZodMN8rFTv2sfUK"
     }
@@ -1251,8 +1247,6 @@ mod tests {
     /// lookup path.
     #[test]
     fn tc_sk_008_sign_uses_secret_store_path_not_bip32() {
-        use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
-
         let dir = tempfile::tempdir().expect("tempdir");
         let (store, index, network) = fresh_view(dir.path(), Network::Testnet);
         let view = SingleKeyView {
@@ -1274,9 +1268,9 @@ mod tests {
         // the signer hit the imported-key path (not some other key the
         // backend might fall back to) without referencing BIP-32 at all.
         let priv_key = PrivateKey::from_wif(known_wif()).expect("wif");
-        let secp = Secp256k1::new();
-        let pk = priv_key.inner.public_key(&secp);
-        secp.verify_ecdsa(&Message::from_digest(msg), &sig, &pk)
+
+        let pk = dash_sdk::dpp::secp256k1::PublicKey::from(priv_key.inner.public_key());
+        dash_sdk::dpp::secp256k1::ecdsa::verify(&sig, Message::from_digest(msg), &pk)
             .expect("signature verifies against WIF-derived pubkey");
 
         // Forgetting the key removes both the index entry and the
@@ -1928,9 +1922,9 @@ mod tests {
             .expect("chokepoint signs after the right passphrase");
 
         let priv_key = PrivateKey::from_wif(known_wif()).unwrap();
-        let secp = Secp256k1::new();
-        let pk = priv_key.inner.public_key(&secp);
-        secp.verify_ecdsa(&Message::from_digest(msg), &sig, &pk)
+
+        let pk = dash_sdk::dpp::secp256k1::PublicKey::from(priv_key.inner.public_key());
+        dash_sdk::dpp::secp256k1::ecdsa::verify(&sig, Message::from_digest(msg), &pk)
             .expect("chokepoint signature verifies");
         assert_eq!(prompt.ask_count(), 2, "one wrong + one right passphrase");
     }
@@ -2107,9 +2101,11 @@ mod tests {
 
     /// A deterministic throwaway testnet WIF distinct per `byte`.
     fn wif_for_byte(byte: u8) -> String {
-        let secret = dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_byte_array(&[byte; 32])
+        let secret = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes([byte; 32])
             .expect("valid scalar");
-        PrivateKey::new(secret, Network::Testnet).to_wif()
+        PrivateKey::from_byte_array(secret.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .to_wif()
     }
 
     fn transient_view<'a>(
@@ -2553,11 +2549,11 @@ mod tests {
         let priv_key = PrivateKey::from_wif(known_wif()).unwrap();
         let pub_key = PublicKey {
             compressed: priv_key.compressed,
-            inner: priv_key.inner.public_key(&Secp256k1::new()),
+            inner: priv_key.inner.public_key(),
         };
         let address = Address::p2pkh(&pub_key, network).to_string();
         let label = label_for_address(&address);
-        let raw = SecretBytes::from_slice(&priv_key.inner[..]);
+        let raw = SecretBytes::from_slice(&priv_key.inner.to_bytes()[..]);
         store
             .set(&single_key_namespace_id(), &label, &raw)
             .expect("write legacy bytes");
@@ -2617,7 +2613,7 @@ mod tests {
             "raw, not a versioned envelope"
         );
         let priv_key = PrivateKey::from_wif(known_wif()).unwrap();
-        assert_eq!(raw.expose_secret(), &priv_key.inner[..]);
+        assert_eq!(raw.expose_secret(), &priv_key.inner.to_bytes()[..]);
 
         // Signs with no passphrase.
         view.sign_with(&imported.address, &[0x42u8; 32])
@@ -2922,7 +2918,7 @@ mod tests {
             .expect("secret retained");
         assert_eq!(
             raw.expose_secret(),
-            &PrivateKey::from_wif(known_wif()).unwrap().inner[..]
+            &PrivateKey::from_wif(known_wif()).unwrap().inner.to_bytes()[..]
         );
         assert_eq!(view.hydrate_wallets().len(), 1);
         view.forget(&existing.address)
@@ -2997,7 +2993,7 @@ mod tests {
             .map(|key| {
                 let public = PublicKey {
                     compressed: true,
-                    inner: key.inner.public_key(&Secp256k1::new()),
+                    inner: key.inner.public_key(),
                 };
                 Address::p2pkh(&public, Network::Testnet).to_string()
             })
@@ -3032,7 +3028,7 @@ mod tests {
             .map(|key| {
                 let public = PublicKey {
                     compressed: true,
-                    inner: key.inner.public_key(&Secp256k1::new()),
+                    inner: key.inner.public_key(),
                 };
                 Address::p2pkh(&public, Network::Testnet).to_string()
             })
diff --git a/src/wallet_backend/snapshot.rs b/src/wallet_backend/snapshot.rs
index 65347cbb6..90807d228 100644
--- a/src/wallet_backend/snapshot.rs
+++ b/src/wallet_backend/snapshot.rs
@@ -766,6 +766,21 @@ impl SnapshotStore {
         }
     }
 
+    pub(super) fn unconfirm_instant_locked(&self, wallet_id: &WalletId, txids: &[Txid]) {
+        let Ok(mut log) = self.tx_log.lock() else {
+            return;
+        };
+        if let Some(transactions) = log.get_mut(wallet_id) {
+            for txid in txids {
+                if let Some(tx) = transactions.get_mut(txid) {
+                    tx.status = TransactionStatus::InstantSendLocked;
+                    tx.height = None;
+                    tx.block_hash = None;
+                }
+            }
+        }
+    }
+
     /// Upgrade a previously-accumulated record's status to
     /// `InstantSendLocked`.
     ///
@@ -1030,7 +1045,6 @@ impl SnapshotStore {
 mod tests {
     use super::*;
     use dash_sdk::dpp::dashcore::hashes::Hash;
-    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
     use dash_sdk::dpp::dashcore::{BlockHash, Network, PublicKey, Transaction, TxOut};
     use dash_sdk::dpp::key_wallet::account::{AccountType, StandardAccountType};
     use dash_sdk::dpp::key_wallet::managed_account::transaction_record::{
@@ -1038,6 +1052,7 @@ mod tests {
     };
     use dash_sdk::dpp::key_wallet::transaction_checking::BlockInfo;
     use dash_sdk::dpp::key_wallet::transaction_checking::transaction_router::TransactionType;
+    use dash_sdk::dpp::secp256k1::SecretKey;
 
     fn seed(n: u8) -> WalletSeedHash {
         [n; 32]
@@ -1962,6 +1977,34 @@ mod tests {
         );
     }
 
+    #[test]
+    fn truncated_chain_clears_block_evidence_but_preserves_instant_lock() {
+        let store = SnapshotStore::new();
+        let mut rec = record(2, 300);
+        rec.context = TransactionContext::InChainLockedBlock(BlockInfo::new(
+            10,
+            BlockHash::from_byte_array([1; 32]),
+            123,
+        ));
+        let txid = rec.txid;
+        store.accumulate_transactions(&wid(5), [&rec]);
+        store.accumulate_transactions(&wid(6), [&rec]);
+        store.unconfirm_instant_locked(&wid(5), &[txid]);
+        publish_tx_only(&store, seed(5), wid(5));
+        publish_tx_only(&store, seed(6), wid(6));
+        let snap = store.snapshot(&seed(5));
+        assert_eq!(
+            snap.transactions[0].status,
+            TransactionStatus::InstantSendLocked
+        );
+        assert_eq!(snap.transactions[0].height, None);
+        assert_eq!(snap.transactions[0].block_hash, None);
+        assert_eq!(
+            store.snapshot(&seed(6)).transactions[0].status,
+            TransactionStatus::ChainLocked
+        );
+    }
+
     /// A block confirmation may race the InstantLock notification. If the
     /// stronger status already landed first, the InstantLock must not
     /// regress it back to `InstantSendLocked`.
@@ -2244,9 +2287,9 @@ mod tests {
     fn addr(n: u8) -> Address {
         let mut sk_bytes = [1u8; 32];
         sk_bytes[31] = n.max(1);
-        let secp = Secp256k1::new();
-        let sk = SecretKey::from_slice(&sk_bytes).unwrap();
-        let pubkey = PublicKey::new(sk.public_key(&secp));
+
+        let sk = SecretKey::from_secret_bytes(sk_bytes).unwrap();
+        let pubkey = PublicKey::new(sk.public_key());
         Address::p2pkh(&pubkey, Network::Testnet)
     }
 
diff --git a/src/wallet_backend/wallet_context.rs b/src/wallet_backend/wallet_context.rs
index 7c0655ac9..ff6ce79a2 100644
--- a/src/wallet_backend/wallet_context.rs
+++ b/src/wallet_backend/wallet_context.rs
@@ -489,7 +489,7 @@ impl WalletContext {
                 network,
                 has_passphrase: w.uses_password,
                 passphrase_hint: None,
-                public_key_bytes: w.public_key.inner.serialize().to_vec(),
+                public_key_bytes: w.public_key.inner.to_compressed().to_vec(),
             }
         };
         let _writer = self.lock_writer();
@@ -853,7 +853,7 @@ mod tests {
             network,
             has_passphrase: false,
             passphrase_hint: None,
-            public_key_bytes: open.public_key.inner.serialize().to_vec(),
+            public_key_bytes: open.public_key.inner.to_compressed().to_vec(),
         };
         (meta, open, protected)
     }
diff --git a/tests/backend-e2e/dashpay_tasks.rs b/tests/backend-e2e/dashpay_tasks.rs
index c1ae089f8..98386d3a8 100644
--- a/tests/backend-e2e/dashpay_tasks.rs
+++ b/tests/backend-e2e/dashpay_tasks.rs
@@ -627,14 +627,16 @@ async fn step_update_contact_info(
             key_type: KeyType::ECDSA_SECP256K1,
             read_only: false,
             data: {
-                use dash_sdk::dashcore_rpc::dashcore::key::Secp256k1;
                 use dash_sdk::dpp::dashcore::PrivateKey;
-                let secp = Secp256k1::new();
                 let secret_key =
-                    dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&private_key_bytes)
+                    dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(private_key_bytes)
                         .expect("Step 5: invalid secret key");
-                let pk = PrivateKey::new(secret_key, dash_sdk::dpp::dashcore::Network::Testnet);
-                pk.public_key(&secp).to_bytes().into()
+                let pk = PrivateKey::from_byte_array(
+                    secret_key.as_secret_bytes(),
+                    dash_sdk::dpp::dashcore::Network::Testnet,
+                )
+                .expect("valid secret key");
+                pk.public_key().to_bytes().into()
             },
             disabled_at: None,
         });
@@ -850,11 +852,10 @@ async fn tc_045_detect_incoming_contact_payment() {
     // secret keys so the addresses stay stable across runs while remaining valid
     // curve points — secp256k1 now rejects raw bytes that are not on the curve,
     // so a hand-written `[0x02; 33]` is no longer a usable public key.
-    let secp = dash_sdk::dpp::dashcore::secp256k1::Secp256k1::new();
     let derive_pubkey = |seed: [u8; 32]| {
-        let secret_key = dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&seed)
+        let secret_key = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(seed)
             .expect("fixed test secret key is a valid scalar");
-        dash_sdk::dpp::dashcore::PublicKey::new(secret_key.public_key(&secp))
+        dash_sdk::dpp::dashcore::PublicKey::new(secret_key.public_key())
     };
     let pubkey_0 = derive_pubkey([0x01; 32]);
     let pubkey_1 = derive_pubkey([0x02; 32]);
diff --git a/tests/backend-e2e/framework/token_helpers.rs b/tests/backend-e2e/framework/token_helpers.rs
index 3c57e4ad0..33ee74fcc 100644
--- a/tests/backend-e2e/framework/token_helpers.rs
+++ b/tests/backend-e2e/framework/token_helpers.rs
@@ -92,6 +92,7 @@ pub fn build_register_token_task(
             groups: BTreeMap::new(),
             document_schemas: None,
             marketplace_rules: owner_only,
+            transferable: true,
         }),
     }))
 }
diff --git a/tests/backend-e2e/identity_in_vault_sign.rs b/tests/backend-e2e/identity_in_vault_sign.rs
index 3f85cf0dc..142909c22 100644
--- a/tests/backend-e2e/identity_in_vault_sign.rs
+++ b/tests/backend-e2e/identity_in_vault_sign.rs
@@ -102,14 +102,13 @@ async fn ts_sign_e2e_01_in_vault_identity_signs_and_broadcasts() {
     // MASTER key via the JIT free-rider path.
     let new_private_key_bytes: [u8; 32] = rand::random();
     let new_public_key_data = {
-        use dash_sdk::dashcore_rpc::dashcore::key::Secp256k1;
         use dash_sdk::dpp::dashcore::PrivateKey;
-        let secp = Secp256k1::new();
         let secret_key =
-            dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&new_private_key_bytes)
+            dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(new_private_key_bytes)
                 .expect("valid secret");
-        PrivateKey::new(secret_key, Network::Testnet)
-            .public_key(&secp)
+        PrivateKey::from_byte_array(secret_key.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key")
+            .public_key()
             .to_bytes()
     };
     let mut new_ipk = IdentityPublicKey::V0(IdentityPublicKeyV0 {
@@ -263,7 +262,7 @@ async fn materialize_master_key_as_clear(
                 let xprv = master_path
                     .derive_priv_ecdsa_for_master_seed(seed, network)
                     .expect("derive master private key from seed");
-                Ok(xprv.to_priv().inner.secret_bytes())
+                Ok(*xprv.to_priv().inner.to_bytes())
             },
         )
         .await
diff --git a/tests/backend-e2e/identity_tasks.rs b/tests/backend-e2e/identity_tasks.rs
index 60d40dc36..6d476ce42 100644
--- a/tests/backend-e2e/identity_tasks.rs
+++ b/tests/backend-e2e/identity_tasks.rs
@@ -194,14 +194,13 @@ async fn step_add_key(
         key_type: KeyType::ECDSA_SECP256K1,
         read_only: false,
         data: {
-            use dash_sdk::dashcore_rpc::dashcore::key::Secp256k1;
             use dash_sdk::dpp::dashcore::PrivateKey;
-            let secp = Secp256k1::new();
             let secret_key =
-                dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&private_key_bytes)
+                dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(private_key_bytes)
                     .expect("invalid secret key");
-            let pk = PrivateKey::new(secret_key, Network::Testnet);
-            pk.public_key(&secp).to_bytes().into()
+            let pk = PrivateKey::from_byte_array(secret_key.as_secret_bytes(), Network::Testnet)
+                .expect("valid secret key");
+            pk.public_key().to_bytes().into()
         },
         disabled_at: None,
     });
diff --git a/tests/backend-e2e/measure_dpns_registration.rs b/tests/backend-e2e/measure_dpns_registration.rs
index 29f0c65d9..e5155fca3 100644
--- a/tests/backend-e2e/measure_dpns_registration.rs
+++ b/tests/backend-e2e/measure_dpns_registration.rs
@@ -22,6 +22,7 @@ use crate::register_dpns::{
 };
 use dash_evo_tool::context::AppContext;
 use dash_evo_tool::model::fee_estimation::contest_fee_credits;
+use dash_evo_tool::model::identity_key_usability::SigningScope;
 use dash_evo_tool::model::qualified_identity::QualifiedIdentity;
 use dash_sdk::dpp::data_contract::accessors::v0::DataContractV0Getters;
 use dash_sdk::dpp::identity::accessors::IdentityGettersV0;
@@ -165,13 +166,21 @@ async fn register_and_log(
         .document_type_for_name("preorder")
         .expect("the DPNS contract should define preorder");
     let signing_key = identity
-        .document_signing_key(&preorder)
+        .document_signing_key(
+            SigningScope::ContractWide {
+                contract_id: dpns.id(),
+            },
+            &preorder,
+        )
         .cloned()
         .expect("the identity should hold a key that signs name documents");
 
     let (confirmed_tx, confirmed_rx) = tokio::sync::oneshot::channel::<()>();
     let (resume_tx, resume_rx) = std::sync::mpsc::channel::<()>();
     let input = SdkRegistrationInput {
+        // States the fund the app approves, as the app's task does: the vote
+        // fee for a contested name, nothing otherwise.
+        contest_fund: Some(vote_fee),
         label: label.clone(),
         identity: identity.identity.clone(),
         identity_public_key: signing_key,
diff --git a/tests/backend-e2e/wallet_reregistration.rs b/tests/backend-e2e/wallet_reregistration.rs
index 32f2a7cd9..d899ddea2 100644
--- a/tests/backend-e2e/wallet_reregistration.rs
+++ b/tests/backend-e2e/wallet_reregistration.rs
@@ -140,7 +140,6 @@ async fn cold_process_boot_from_migrated_state_registers_and_shows_balance() {
     use dash_evo_tool::utils::egui_mpsc::EguiMpscAsync;
     use dash_evo_tool::utils::tasks::TaskManager;
     use dash_sdk::dpp::dashcore::Network;
-    use dash_sdk::dpp::dashcore::secp256k1::Secp256k1;
     use dash_sdk::dpp::key_wallet::bip32::{
         ChildNumber, DerivationPath, ExtendedPrivKey, ExtendedPubKey,
     };
@@ -175,15 +174,14 @@ async fn cold_process_boot_from_migrated_state_registers_and_shows_balance() {
         w.seed_hash()
     };
     let epk = {
-        let secp = Secp256k1::new();
         let master = ExtendedPrivKey::new_master(Network::Testnet, &seed).expect("master key");
         let path = DerivationPath::from(vec![
             ChildNumber::Hardened { index: 44 },
             ChildNumber::Hardened { index: 1 },
             ChildNumber::Hardened { index: 0 },
         ]);
-        let account = master.derive_priv(&secp, &path).expect("derive account");
-        ExtendedPubKey::from_priv(&secp, &account).encode().to_vec()
+        let account = master.derive_priv(&path).expect("derive account");
+        ExtendedPubKey::from_priv(&account).encode().to_vec()
     };
     seed_legacy_unprotected_hd_wallet_row(
         &db,
diff --git a/tests/backend-e2e/z_broadcast_st_tasks.rs b/tests/backend-e2e/z_broadcast_st_tasks.rs
index e3076e1c3..97f0f6330 100644
--- a/tests/backend-e2e/z_broadcast_st_tasks.rs
+++ b/tests/backend-e2e/z_broadcast_st_tasks.rs
@@ -51,14 +51,13 @@ async fn step_broadcast_valid(
     let new_private_key_bytes: [u8; 32] = rand::random();
 
     let new_public_key_data = {
-        use dash_sdk::dashcore_rpc::dashcore::key::Secp256k1;
         use dash_sdk::dpp::dashcore::PrivateKey;
-        let secp = Secp256k1::new();
         let secret_key =
-            dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&new_private_key_bytes)
+            dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(new_private_key_bytes)
                 .expect("invalid secret key bytes");
-        let pk = PrivateKey::new(secret_key, Network::Testnet);
-        pk.public_key(&secp).to_bytes()
+        let pk = PrivateKey::from_byte_array(secret_key.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key");
+        pk.public_key().to_bytes()
     };
 
     let mut new_ipk = IdentityPublicKey::V0(IdentityPublicKeyV0 {
@@ -212,14 +211,13 @@ async fn step_broadcast_invalid(
 
     let new_private_key_bytes: [u8; 32] = rand::random();
     let new_public_key_data = {
-        use dash_sdk::dashcore_rpc::dashcore::key::Secp256k1;
         use dash_sdk::dpp::dashcore::PrivateKey;
-        let secp = Secp256k1::new();
         let secret_key =
-            dash_sdk::dpp::dashcore::secp256k1::SecretKey::from_slice(&new_private_key_bytes)
+            dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(new_private_key_bytes)
                 .expect("invalid secret key bytes");
-        let pk = PrivateKey::new(secret_key, Network::Testnet);
-        pk.public_key(&secp).to_bytes()
+        let pk = PrivateKey::from_byte_array(secret_key.as_secret_bytes(), Network::Testnet)
+            .expect("valid secret key");
+        pk.public_key().to_bytes()
     };
 
     let mut new_ipk = IdentityPublicKey::V0(IdentityPublicKeyV0 {
diff --git a/tests/kittest/address_input.rs b/tests/kittest/address_input.rs
index 2cca9378f..d4864c470 100644
--- a/tests/kittest/address_input.rs
+++ b/tests/kittest/address_input.rs
@@ -30,18 +30,17 @@ use std::sync::{Arc, RwLock};
 /// and exactly one BIP-44 receive address, distinct per `seed`. The snapshot
 /// paths — not the wallet's own bookkeeping — are what the component offers.
 fn wallet(seed: u8, alias: &str) -> WalletWithSnapshot {
-    use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
     use dash_sdk::dpp::dashcore::{Address, PublicKey};
     use dash_sdk::dpp::key_wallet::bip32::{ChildNumber, DerivationPath};
 
     let wallet = Wallet::new_from_seed([seed; 64], Network::Testnet, Some(alias.to_string()), None)
         .expect("wallet from seed");
 
-    let secp = Secp256k1::new();
     let mut sk_bytes = [1u8; 32];
     sk_bytes[31] = seed.max(1);
-    let sk = SecretKey::from_slice(&sk_bytes).expect("valid secret key");
-    let address = Address::p2pkh(&PublicKey::new(sk.public_key(&secp)), Network::Testnet);
+    let sk =
+        dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(sk_bytes).expect("valid secret key");
+    let address = Address::p2pkh(&PublicKey::new(sk.public_key()), Network::Testnet);
 
     // m/44'/1'/0'/0/0 — a BIP-44 external receive path.
     let path = DerivationPath::from(
diff --git a/tests/kittest/keys_screen.rs b/tests/kittest/keys_screen.rs
index a06c7a23d..43c2ee040 100644
--- a/tests/kittest/keys_screen.rs
+++ b/tests/kittest/keys_screen.rs
@@ -1220,3 +1220,41 @@ fn key_info_names_a_users_transfer_key_as_the_keys_list_does() {
         );
     });
 }
+
+/// Each key row marks a key Platform no longer accepts as "Expired" and a key
+/// with a budget or a future expiry as "Limited"; an unlimited key carries no
+/// marker.
+#[test]
+fn expired_and_limited_keys_are_marked_in_the_list() {
+    with_isolated_data_dir(|| {
+        let (_rt, app_context) = fresh_app_context();
+        let mut identity = stranded_identity(
+            0x3e,
+            &[
+                Purpose::AUTHENTICATION,
+                Purpose::AUTHENTICATION,
+                Purpose::AUTHENTICATION,
+            ],
+            "limits",
+        );
+        // Key 0 stays unlimited; key 1 expired long ago; key 2 has a budget.
+        identity
+            .identity
+            .add_public_key(key(1, Purpose::AUTHENTICATION).with_limits(None, Some(1)));
+        identity
+            .identity
+            .add_public_key(key(2, Purpose::AUTHENTICATION).with_limits(Some(5_000), None));
+
+        let (harness, _) = harness_for(KeysScreen::new(identity, &app_context));
+        assert_eq!(
+            harness.query_all_by_label("Expired").count(),
+            1,
+            "the expired key is marked once"
+        );
+        assert_eq!(
+            harness.query_all_by_label("Limited").count(),
+            1,
+            "the budgeted key is marked once"
+        );
+    });
+}
diff --git a/tests/kittest/send_screen.rs b/tests/kittest/send_screen.rs
index 678c84a13..caa9feb3d 100644
--- a/tests/kittest/send_screen.rs
+++ b/tests/kittest/send_screen.rs
@@ -11,7 +11,6 @@ use dash_evo_tool::model::wallet::{Wallet, WalletSeedHash};
 use dash_evo_tool::ui::wallets::send_screen::{SourceSelection, WalletSendScreen};
 use dash_sdk::dpp::address_funds::PlatformAddress;
 use dash_sdk::dpp::balances::credits::CREDITS_PER_DUFF;
-use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
 use dash_sdk::dpp::dashcore::{Address, Network, PublicKey};
 use dash_sdk::dpp::identity::Identity;
 use dash_sdk::dpp::identity::core_script::CoreScript;
@@ -27,11 +26,11 @@ const ONE_DASH_CREDITS: u64 = CREDITS_PER_DUFF * 100_000_000;
 fn core_address() -> Address {
     let secret_key = loop {
         let bytes: [u8; 32] = rand::random();
-        if let Ok(key) = SecretKey::from_slice(&bytes) {
+        if let Ok(key) = dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes(bytes) {
             break key;
         }
     };
-    let public_key = PublicKey::new(secret_key.public_key(&Secp256k1::new()));
+    let public_key = PublicKey::new(secret_key.public_key());
     Address::p2pkh(&public_key, Network::Testnet)
 }
 
diff --git a/tests/kittest/top_up_identity_screen.rs b/tests/kittest/top_up_identity_screen.rs
index 327dfdfeb..fb125cc6b 100644
--- a/tests/kittest/top_up_identity_screen.rs
+++ b/tests/kittest/top_up_identity_screen.rs
@@ -25,7 +25,6 @@ use dash_evo_tool::ui::wallets::send_screen::{
 use dash_evo_tool::ui::{RootScreenType, Screen, ScreenType};
 use dash_sdk::dpp::address_funds::PlatformAddress;
 use dash_sdk::dpp::balances::credits::CREDITS_PER_DUFF;
-use dash_sdk::dpp::dashcore::secp256k1::{Secp256k1, SecretKey};
 use dash_sdk::dpp::dashcore::{Address, Network, PublicKey};
 use dash_sdk::dpp::identity::Identity;
 use dash_sdk::dpp::identity::accessors::{IdentityGettersV0, IdentitySettersV0};
@@ -502,9 +501,9 @@ fn confirm_top_up(harness: &mut App, identity: &QualifiedIdentity) -> BackendTas
 fn prepare_top_up(harness: &mut App, identity: &QualifiedIdentity) -> Result<AppAction, String> {
     let core = Address::p2pkh(
         &PublicKey::new(
-            SecretKey::from_slice(&[0x31; 32])
+            dash_sdk::dpp::secp256k1::SecretKey::from_secret_bytes([0x31; 32])
                 .expect("secret key")
-                .public_key(&Secp256k1::new()),
+                .public_key(),
         ),
         identity.network,
     );
diff --git a/tests/migration-matrix/assertions.rs b/tests/migration-matrix/assertions.rs
index cf14e42af..a341cece9 100644
--- a/tests/migration-matrix/assertions.rs
+++ b/tests/migration-matrix/assertions.rs
@@ -532,7 +532,7 @@ pub fn legacy_wallet_registrations(
                     "SELECT EXISTS (SELECT 1 FROM account_registrations \
                      WHERE account_type = 'standard_bip44' AND account_index = 0 \
                      AND instr(account_xpub_bytes, CAST(?1 AS BLOB)) > 0)",
-                    [base58::encode_check(&account_xpub)],
+                    [base58::Base58CkString::encode_unbounded(&account_xpub).to_string()],
                     |row| row.get::<_, bool>(0),
                 )
                 .map_err(|e| {
@@ -1062,7 +1062,7 @@ mod tests {
         )
         .expect("test vector hex");
         assert_eq!(
-            base58::encode_check(&serialized),
+            base58::Base58CkString::encode_unbounded(&serialized).to_string(),
             "xpub661MyMwAqRbcFtXgS5sYJABqqG9YLmC4Q1Rdap9gSE8NqtwybGhePY2gZ29ESFjqJoCu1Rupje8YtGqsefD265TMg7usUDFdp6W1EGMcet8"
         );
     }
@@ -1100,7 +1100,7 @@ mod tests {
                  account_xpub_bytes BLOB NOT NULL);",
             )
             .expect("create registrations");
-        let text = base58::encode_check(&plain_xpub);
+        let text = base58::Base58CkString::encode_unbounded(&plain_xpub).to_string();
         let mut stored = (text.len() as u32).to_be_bytes().to_vec();
         stored.extend_from_slice(text.as_bytes());
         store
diff --git a/tests/migration-matrix/public_identities.rs b/tests/migration-matrix/public_identities.rs
index a4cec78a7..ab8fbbb8d 100644
--- a/tests/migration-matrix/public_identities.rs
+++ b/tests/migration-matrix/public_identities.rs
@@ -163,7 +163,12 @@ pub fn check_source(
     for row in rows {
         let (id, bytes, status, identity_type, alias) = row.map_err(|e| e.to_string())?;
         let record = snapshot(&bytes, status, &identity_type)?;
-        if record.id != dash_sdk::dpp::dashcore::base58::encode_slice(&id) || record.alias != alias
+        if record.id
+            != dash_sdk::dpp::platform_value::string_encoding::encode(
+                &id,
+                dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58,
+            )
+            || record.alias != alias
         {
             return Err("legacy identity columns disagree with the serialized identity".into());
         }
@@ -191,7 +196,12 @@ pub fn check_migrated(
             return Err("unexpected wallet binding in public identity record".into());
         }
         let record = snapshot(&stored.qi_bytes, stored.status, &stored.identity_type)?;
-        if record.id != dash_sdk::dpp::dashcore::base58::encode_slice(&id) {
+        if record.id
+            != dash_sdk::dpp::platform_value::string_encoding::encode(
+                &id,
+                dash_sdk::dpp::platform_value::string_encoding::Encoding::Base58,
+            )
+        {
             return Err("identity storage key differs from its serialized identity".into());
         }
         found.push(record);