Add deferred whitelist-gated migration tool

PlasticDigits commented

2026-11-01 04:47:25 +00:00

Owner

Prepare the later Terra Classic security rollout while deployment is blocked on the chain whitelist. Adds a Python3 stdlib/terrad tool that defaults to an offline plan, prepares one unsigned action, and only broadcasts an externally signed exact transaction with explicit --execute and fresh checks. Tracking: #16; related rollout #7. This PR does not close the whitelist or live-rollout acceptance work.

Stages cover exact-artifact storage or verified existing code IDs, initially paused controller instantiation, legacy migration with a full raw-state baseline, enrollment, reviewed protocol assignments, real 24h+ activation deadlines and governance-only finalization across the complete enrolled cohort. Broadcast rechecks whitelist/chain/code/admin/minter/role identities and separation, exact signed body and finite fees/gas, sequence and expiry; durable submission intent prevents blind retry after ambiguous results. LP contract-admin forwarding and unresolved identities fail closed. The docs specify the agent-owned config/signing/receipt workflow and current unresolved inputs.

Validation: 19 focused Python fixtures pass, Python compilation and diff checks pass; installed terrad3.5.0-rc.0 offline unsigned generation checked without key access or transactions. Independent review cleared exact head 0fce4922e4a05ba0f76e49f0eac40c94fecd8957 for deferred tooling publication. Rust contracts, artifacts and optimizer were not changed or rerun. No live upload, signing, instantiation, migration or enrollment occurred; coverage remains0/35.

Prepare the later Terra Classic security rollout while deployment is blocked on the chain whitelist. Adds a Python3 stdlib/terrad tool that defaults to an offline plan, prepares one unsigned action, and only broadcasts an externally signed exact transaction with explicit `--execute` and fresh checks. Tracking: #16; related rollout #7. This PR does not close the whitelist or live-rollout acceptance work. Stages cover exact-artifact storage or verified existing code IDs, initially paused controller instantiation, legacy migration with a full raw-state baseline, enrollment, reviewed protocol assignments, real 24h+ activation deadlines and governance-only finalization across the complete enrolled cohort. Broadcast rechecks whitelist/chain/code/admin/minter/role identities and separation, exact signed body and finite fees/gas, sequence and expiry; durable submission intent prevents blind retry after ambiguous results. LP contract-admin forwarding and unresolved identities fail closed. The docs specify the agent-owned config/signing/receipt workflow and current unresolved inputs. Validation: 19 focused Python fixtures pass, Python compilation and diff checks pass; installed terrad3.5.0-rc.0 offline unsigned generation checked without key access or transactions. Independent review cleared exact head `0fce4922e4a05ba0f76e49f0eac40c94fecd8957` for deferred tooling publication. Rust contracts, artifacts and optimizer were not changed or rerun. No live upload, signing, instantiation, migration or enrollment occurred; coverage remains0/35.

PlasticDigits added 1 commit

2026-11-01 04:47:25 +00:00

Add deferred whitelist-gated one-action migration tooling

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

0fce4922e4

PlasticDigits referenced this pull request

2026-11-01 04:47:45 +00:00

Prepare later-run migration script; deployment blocked pending Terra Classic whitelist #16

PlasticDigits commented

2026-11-01 05:11:19 +00:00

Author

Owner

Parent reviewed deferred-tool scope and exact pin 0fce4922e4a05ba0f76e49f0eac40c94fecd8957; independent review issue16 comment65668 and19 focused fixtures pass, and actual required CI pipeline10 is successful. Integrating script/docs only. The operator can run the offline plan now; Terra Classic deployment remains deferred pending whitelist and fresh role/authority/protocol preflight. No chain signing, upload or migration occurred; coverage0/35. Tracking issue16 remains open for future execution.

Parent reviewed deferred-tool scope and exact pin `0fce4922e4a05ba0f76e49f0eac40c94fecd8957`; independent review issue16 comment65668 and19 focused fixtures pass, and actual required CI pipeline10 is successful. Integrating script/docs only. The operator can run the offline plan now; Terra Classic deployment remains deferred pending whitelist and fresh role/authority/protocol preflight. No chain signing, upload or migration occurred; coverage0/35. Tracking issue16 remains open for future execution.

PlasticDigits merged commit 28ce608eb9 into main

2026-11-01 05:11:20 +00:00

PlasticDigits referenced this pull request from a commit

2026-11-01 05:11:21 +00:00

Merge pull request 'Add deferred whitelist-gated migration tool' (#17) from ops/whitelist-gated-migration into main

Rows
Columns

Add deferred whitelist-gated migration tool #17