Evaluated on: · Spec revision: 2026-08-25 · ac450a4ab2 · Inclusion status at snapshot: PFI
Scope at the cutoff. Execution-layer-only assessment of draft EIP-8237 at the sealed Hegota PFI snapshot. The scored surface adds a consensus-critical partial_header_hash to ExecutionPayload and the execution block header, requires independent EL computation and validation of that value, and requires a new Engine API lookup method; consensus-layer range-sync behavior is treated only as boundary context.
- Evaluator
- LLMChecklist v2
- Confidence
- Medium
- Under-specified at assessment cutoff
- Yes — 7 criteria affected
- Plausible range
- 25–31 (High)
- Snapshot
- 2026-08-25 · EIP revision
ac450a4ab2(2026-08-25)
Score bands · Checklist revision 2
- Low <12
- Medium 12–22
- High ≥23
28 criteria scored 0–3 (4 in exceptional cases; cross-EIP interactions is uncapped); nominal maximum 84.
Complexity profile
Each segment is one criterion's contribution to the LLM total. Hover or focus a segment for its score and rationale.
Top complexity drivers
- New block / header fields3
- Encoding changes (RLP/SSZ)3
- Patterns affecting pre-existing tests3
- Security risks3
Under-specified at assessment cutoff: Yes
The EIP text available at the assessment cutoff left material behavior unresolved. The affected criteria and the plausible total range record that uncertainty.
Why: Material details are absent for the consensus-critical raw serialization of composite withdrawal/request data, the execution-header field ordering and fork-aware encoding, and the new Engine API method's concrete protocol and historical lookup semantics. These are recorded chiefly under the unspecified-behavior anchor rather than multiplied across unrelated rows.
Plausible total
25–31
recorded score 29 · plausible tiers High
Unresolved questions at the cutoff (4)
- What is the complete, unambiguous byte encoding and framing for withdrawals and each ExecutionRequests component in the SHA256 preimage?
- Where exactly is partial_header_hash placed in the execution header encoding, and how is the parent-to-activation-block boundary handled?
- What are the new Engine API method's name, version, request/response types, error semantics, and historical data-availability requirements?
- Is divergence localization a caller-driven sequence of per-block lookups, and what history must an EL retain to support it?
Notable ambiguities noted by the assessor (3)
- The function is described as an accumulator that chains across blocks, while its explicit inputs contain parent_hash rather than a separately named prior accumulator; the intended indirect chain depends on parent_hash covering the prior header field.
- "Raw bytes serialization" is precise for uint64 but incomplete for the composite list contents and does not state explicit framing or domain separation.
- The required Engine API method is described only by purpose, not as a testable wire contract.
Criterion breakdown
| Criterion | Score | Why this score | Evidence / uncertainty |
|---|---|---|---|
| New block / header fields | 3 | The rubric assigns 3 whenever a new block or header field is introduced. |
Confidence: High Uncertainty: Field placement is under-specified, but introduction of the field is explicit. |
| Encoding changes (RLP/SSZ)Under-specified | 3 | A new field changes the encoded execution block header and payload/interface shape, satisfying the rubric's binary encoding-change anchor. |
Confidence: High Uncertainty: Exact field placement and complete raw serialization of composite list entries are not fully specified, but an encoding change is unambiguous. |
| Patterns affecting pre-existing tests | 3 | This is a new validation rule on every post-activation execution block. Existing payload/header construction, block-hash, valid-block, invalid-block, and sync patterns must be reworked to populate the field and satisfy or intentionally violate the commitment, making the affected test surface broad rather than a contrived subset. |
Confidence: High Uncertainty: The package does not enumerate test suites, but the mandatory field and validation apply uniformly to post-activation execution blocks. |
| Security risksUnder-specified | 3 | Incorrect encoding, accumulation, request derivation, or validation can split EL block validity and undermine deferred inconsistency detection. The mechanism touches multiple critical components—header hashing, block validation, withdrawals, execution requests, and Engine API coordination—requiring broad security review and adversarial testing even though the EIP claims no new trust assumption. |
Confidence: High Uncertainty: The consensus-layer sync process itself is outside the scored surface; the score reflects only failure modes of the EL commitment and its cross-layer boundary. |
| Edge/boundary conditionsUnder-specified | 3 | Tests must cover empty and populated variable lists, serialization boundaries, correct and incorrect field components, parent-linked accumulator continuity, and divergence at different positions in a synced range. The variable-list and chain-position dimensions create an elevated case count. |
Confidence: High Uncertainty: Exact list serialization and divergence-search behavior are under-specified, increasing uncertainty about the final boundary matrix but not eliminating it. |
| Unspecified behavior requiring cross-client consensusUnder-specified | 3 | The exact bytes feeding a newly observable consensus-critical hash are not fully determined for constructible composite-list cases. Clients must agree on those bytes and revise baselines when the draft is completed; the missing API and header details add localized coordination needs but are not scored again as separate unspecified mechanisms. |
Confidence: High Uncertainty: No implementation, devnet, discussion, or amendment evidence is available or permitted; the score is based solely on the draft text's unresolved consensus-visible encoding. |
| Block syncing changesUnder-specified | 2 | The new header member and its consensus-critical multi-input validation form a single complex block-validation change that execution-client sync tests must exercise. |
Confidence: Medium Uncertainty: The EIP does not explicitly spell out the header's RLP position or sync importer behavior, so complexity between simple and complex validation remains plausible. |
| Engine API changesUnder-specified | 2 | A new Engine API endpoint is explicitly required, meeting score 2; the package specifies only one new payload field, so the score-3 combination of multiple fields plus a new endpoint is not established. |
Confidence: High Uncertainty: The new method's name, request/response schema, versioning, error behavior, and historical-availability requirements are unspecified. |
| New invariant on pre-existing tests | 2 | Tests unrelated to EIP-8237 but constructing a post-activation execution block gain the same mechanically applied commitment invariant. The evidence does not require re-deriving pre-fork vectors, so the score remains below 3. |
Confidence: High Uncertainty: Whether individual harnesses expose this as an explicit assertion or implicit block-validity check is not specified. |
| Cross-EIP interactions | 2 | EIP-8237 depends on and modifies the EIP-7732 payload-separation commitment and directly consumes the EIP-7843 slot_number in the new EL commitment; these require coordinated testing but remain limited to the commitment and payload/header boundary. |
Confidence: High Uncertainty: The package names no originating EIP for withdrawals or the ExecutionRequests type, so those package-grounded mechanism interactions are not assigned invented EIP numbers. Interacting EIPs: EIP-7732, EIP-7843 |
| Transition-tool interface changes | 1 | A transition tool processing the fork's payload shape needs one new input/output field. |
Confidence: Medium Uncertainty: The package does not define a transition-tool schema separately from ExecutionPayload. |
| Performance risksUnder-specified | 1 | The per-block hash calculation and keyed lookup are new performance-sensitive operations, but their core costs can be benchmarked in isolation and the package does not establish substantial impact on existing EL benchmarks. |
Confidence: Medium Uncertainty: Historical retention and repeated lookup/search behavior are unspecified; a less isolated storage design could raise the score to 2. |
| Cryptography | 1 | One well-known cryptographic hash mechanism is newly used for the consensus-critical accumulator. |
Confidence: High Uncertainty: No novel cryptographic primitive or construction beyond the specified SHA256 commitment is evidenced. |
Show 15 zero-score criteria
| Criterion | Score | Why this score | Evidence / uncertainty |
|---|---|---|---|
| Added opcodes | 0 | No opcode is added. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| Modified opcodes | 0 | No pre-existing opcode is modified. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| Added precompiles | 0 | No precompile is introduced. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| Modified precompiles | 0 | No pre-existing precompile is modified. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| Added system contracts | 0 | No new system contract exists in the sealed proposal. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| Modified system contracts | 0 | The proposal has no specified system-contract interaction. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| EVM Gas rule changes | 0 | The proposal changes block-level commitment validation, not EVM gas accounting. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| State-access ordering within opcode execution | 0 | No opcode state access or gas-charge ordering is modified. |
Uncertainty: No opcode-level behavior is specified by this EIP. |
| Blob gas accounting changes | 0 | The proposal introduces no blob gas accounting rule. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| State gas accounting changes | 0 | No state-writing gas mechanism is introduced or modified. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| New EVM gas refund | 0 | There is no new EVM gas-refund mechanism. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| New transaction types | 0 | The proposal adds no transaction type. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| New or modified transaction validity mechanisms | 0 | Existing transaction validity rules and intrinsic-gas calculation are unchanged. |
Uncertainty: No material uncertainty in the sealed execution-layer text. |
| New fork activation mechanism | 0 | Requiring a hard fork is not itself the special activation mechanism scored by this row. |
Uncertainty: The EIP gives no activation procedure; no scored mutation may be inferred from that absence. |
| New test-framework primitives | 0 | The sealed proposal establishes test cases and data generation needs, but does not require a new framework-level primitive beyond ordinary hash calculation and equality checks. |
Uncertainty: No test-framework design is included in the package; absent such evidence, no framework primitive is scored. |
Assessment provenance
- Assessed EIP revision
ethereum/EIPs@ac450a4ab2EIPS/eip-8237.md committed 2026-08-25 · information cutoff 2026-08-25T11:56:58Z- Rubric
- Checklist revision 2 ·
ethspecs/pm@3d8c0128c5 - Evaluator
- gpt-5.6-sol at xhigh reasoning effort · isolation
bubblewrap_one_eip_capsule_v1 - Source record
- Frozen research record
research/tasks/08-hegota-prospective-complexity-assessment/outputs/assessments/hegota-pfi-2026-08-26/eip-8237.yaml· sha256de10beacc3e5 - Supporting documents in the sealed package
supporting/eip-7732.md