release: deploy and verify fresh zero-funded Juno Voice v2 composition #57

Goal

Build deterministic artifacts from merge commit 9f9ae33d517e6c9da5ad14b3e427e3ecdfa2dfae, prepare and independently review a fresh zero-funded juno-1 deployment, then verify all on-chain topology before any frontend cutover or canary funding.

Gates

• Two clean recursive builds produce byte-identical Wasm
• Signed/closed manifest binds parent and DAO submodule SHAs
• Existing code checksums reconciled
• Fresh v2 config and deterministic addresses reviewed
• Historical v1 state rechecked empty and unfunded
• Unsigned upload/instantiate packages independently approved
• Separate deployment authorization recorded
• On-chain code IDs, checksums, addresses, admins, wiring, counters, balances, and empty epoch verified
• Frontend cutover remains separately gated
• Canary/funding remains separately gated

Safety boundary

No migration or v1 import. No program funds in deployment messages. Stop on any identity, checksum, admin, state, or balance mismatch.