---
id: TIP-1152
title: T14 Hardfork Meta TIP
description: Meta TIP linking proposed T14 TIPs and additional fork-gated changes.
authors: Richard Janis Goldschmidt (@SuperFluffy), Jennifer (@jenpaff)
status: Approved
related: TIP-1017
protocolVersion: T14
---

# TIP-1152: T14 Hardfork Meta TIP

## Abstract

T14 adds configurable accounts, removes admin access keys, enforces proposer
fee recipients, bounds validator endpoint lengths, defaults consensus to
deferred verification after the fork boundary, and blocks Zone Portal refund
claims and batch settlement while paused. This meta TIP links the individual
TIPs and specifies the additional protocol changes.

## Motivation

Collect the T14 upgrade scope and implementation links in one place for review.

---

# T14 TIPs

The following TIPs have changes proposed behind T14. Configurable accounts are
listed once through their meta TIP, which links the Phase 1 component specifications.

| TIP | Change |
| --- | --- |
| [TIP-1107: Configurable Accounts (Meta)](https://github.com/tempoxyz/tempo/pull/7510) | Phase 1: weighted ownership, key rotation, account configuration commitments, address derivation, access-key delegation, root-key disablement, and existing-account migration. |
| [TIP-1137: Remove Admin Access Keys](https://github.com/tempoxyz/tempo/pull/8204) | Disables new admin-key grants and removes existing keys' admin authority. Implementation: [#8618](https://github.com/tempoxyz/tempo/pull/8618). |

---

# Additional protocol changes

These changes are not covered by an individual T14 TIP. They are proposed behind
T14; pre-T14 execution rules are preserved.

## 1. Bound validator endpoint lengths

**PR**: [#8206](https://github.com/tempoxyz/tempo/pull/8206) · **Author**: @hamdiallam

Amends [TIP-1017](./tip-1017.md): `addValidator`, `rotateValidator`, and
`setIpAddresses` revert with `InvalidIp(string input)` when `ingress` or
`egress` exceeds 255 bytes, the maximum the one-byte length prefix in validator
signature messages can encode. Ingress is checked before egress, and each
length before its format. Malformed inputs within the limit still revert with
`NotIpPort` (ingress) or `NotIp` (egress). Stored endpoints are not
revalidated, and V1 is unchanged.

## 2. Default consensus to deferred verification after the fork boundary

**PR**: [#8438](https://github.com/tempoxyz/tempo/pull/8438) · **Author**: @decofe

Defaults `--consensus.verification-mode` to `hardfork`. Selects immediate or
deferred verification once per epoch using the previous epoch's finalized
boundary-block timestamp, or genesis for epoch zero. Deferred verification
starts when that timestamp reaches T14; explicit `immediate` and `deferred`
overrides remain available.

## 3. Enforce the proposer's registered fee recipient

**PR**: [#8572](https://github.com/tempoxyz/tempo/pull/8572) · **Author**: @SuperFluffy

Block execution rejects a block if its beneficiary differs from the proposer's
`ValidatorConfigV2` fee recipient, or if the proposer has no entry. The recipient
is resolved from parent state. A registered zero address burns the fees.

## 4. Pause Zone Portal refund claims and batch settlement

**PR**: [#8295](https://github.com/tempoxyz/tempo/pull/8295) · **Author**: @decofe

From T14, a paused Zone Portal rejects refund claims and batch settlement.
The sequencer idles batch preparation and submission until the portal resumes.
Pre-T14 portal behavior is unchanged.