Script Purposes

One of the arguments every Plutus script receives is the script context, containing information about the transaction the script is validating. One of the fields of script context is the script purpose. Since a transaction may do multiple things, each of which is validated by a separate script, the script purpose informs a script what exactly it is supposed to validate.

Plutus V1 and V2 share the same ScriptPurpose type with four variants: spending, minting, rewarding and certifying. Plutus V3's ScriptPurpose has two additional variants: voting and proposing. Next we go over and explain all these different script purposes.

Spending

A spending script validates the spending of a UTXO. A UTXO can have either a public key address or a script address. To spend a UTXO with a script address, the script whose hash matches the script address must be included in the transaction (either directly, or as a reference script), and is executed to validate it.

The script can make the decision based on the datum attached in the UTXO being spent, if any (datum is mandatory for Plutus V1 and V2, i.e., a UTXO with a Plutus V1 or V2 script address but without a datum cannot be spent; datum is optional for Plutus V3), the redeemer included in the transaction, as well as other fields of the transaction.

The Spending constructor of ScriptPurpose includes a TxOutRef field that references the UTXO the script is validating, which is also one of the UTXOs the transaction attempts to spend.

Minting

Minting scripts, sometimes also referred to as minting policies, are used to approve or reject minting of new assets.

In Cardano, we can uniquely identify an asset by its CurrencySymbol and TokenName. If a transaction attempts to mint some new assets, then for each unique CurrencySymbol in the new assets, the script whose hash matches the CurrencySymbol must be included in the transaction, and is executed to validate the minting of that CurrencySymbol. This is the reason why the Minting constructor of ScriptPurpose contains a CurrencySymbol field.

A minting script should pay attention to the fact that the transaction may attempt to mint multiple assets with the same CurrencySymbol but different TokenNames. In general all these assets with the same CurrencySymbol should be checked.

Rewarding

As previously stated, a UTXO's address can be either a public key address or a script address. Both kinds of addresses can optionally have a staking credential. A UTXO may contain Ada, and the Ada it contains can be delegated to an SPO to earn staking rewards. Staking rewards are deposited into a reward account¹ corresponding to the staking credential.

A staking credential can contain either a public key hash or a script hash. To withdraw rewards from a reward account corresponding to a staking credential that contains a script hash, the script with that particular hash must be included in the transaction, and is executed to validate the withdrawal.

The script might set conditions on reward distribution, such as ensuring that any withdrawal are deposited into one of the designated addresses.

Certifying

A certifying script can validate a number of certificate-related transactions, such as: (1) registering a staking credential, and in doing so, creating a reward account associated with the staking credential; (2) de-registering a staking credential, and in doing so, terminating the reward account; (3) delegating a staking credential to a particular delegatee.

In all these cases except registration, if the staking credential in question contains a script hash (as opposed to a public key hash), the script with that hash must be included in the transaction, and is executed to validate the action.

Such a script may, for instance, check that certain signatures be provided for de-registration and delegation, or that the delegatee must be among the allowed delegatees.

In Conway and all previous eras, including the associated script for registering a staking credential in a transaction is optional. This is due to the availability of two different certificates for registering staking credentials: stake_registration, which does not require a witness, and reg_cert, which does require the script credential as a witness. When using reg_cert, the script must be included in the transaction. In the era following Conway, the stake_registration certificate, which allows for the registration of script credentials without a script witness, will be deprecated. After this change, all stake credential registration transactions will require the script associated with a script hash to be included in the transaction, aligning them with the behavior of all other certificate-related transactions.

Voting

A voting script validates votes cast by a Delegated Representative (DRep) or a constitutional committee member (CCM) in a transaction. A DRep or a CCM can be associated with a script hash. If a transaction contains one or more votes from a DRep or a constitution committee member associated with a script hash, the script with that hash must be included in the transaction, and is executed to approve or reject the vote.

Proposing

A proposing script, also known as constitution script or guardrail script, validates two kinds of governance actions: ParameterChange and TreasuryWithdrawals.

There is a key distinction between proposing scripts and other kinds of scripts: proposing scripts are not written by regular users. At any given point in time, there is exactly one active proposing script being used by the entire chain. This proposing script must be included in transactions that propose ParameterChange or TreasuryWithdrawals. The ledger enforces that no other proposing script is accepted. The proposing script is updated only when there is a change to the constitution, via the NewConstitution governance action.

Note that what the proposing script decides is whether the proposal of a governance action is allowed to go through, rather than whether the governance action will be enacted. After a proposal goes through, it will need to meet the appropriate criteria (such as gathering enough votes from consitution committee members, DReps and/or SPOs) in order to be enacted.

---

Footnotes

1. Reward accounts are distinct from UTXOs, and are more akin to accounts in account-based blockchains. They are used for accumulating staking rewards, rather than using UTXOs, in order to avoid creating a large number of UTXOs with tiny values. Reward accounts are special on Cardano and cannot be created arbitrarily. Each reward account is associated with a staking credential, and is created automatically when the staking credential is registered. ↩