luxfi/runtime
1
0
Fork 0
mirror of https://github.com/luxfi/runtime.git synced 2026-07-26 22:53:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

runtime: add GovernanceController to chain wiring (DEX halt authority seam)

Browse Source 
The 0x9999 DEX settlement precompile's emergency-halt + pot-seeding authority
must be a per-network governance CONTRACT resolved at runtime, NOT a hardcoded
mnemonic-derivable EOA. Add Runtime.GovernanceController (ids.ShortID, the geth-
free 20-byte type) + GetGovernanceController accessor so the host can bind the
network's governance authority and surface it to the precompile via
contract.AtomicState.GovernanceController() — the SAME runtime seam CChainID/
DChainID flow through, with zero per-net config file. The zero value is the safe
fail-closed default (an unset authority makes the halt switches uncallable, so no
single key can DoS the DEX).
This commit is contained in:
zeekay
2026-06-22 22:49:21 -07:00
parent e257052407
commit fc56d18239
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime.go
+24
View File
@@ -58,6 +58,20 @@ type Runtime struct {
// CChainID is the C-Chain identifier
CChainID ids.ID `json:"cChainID"`
// GovernanceController is the 20-byte EVM address of the DEX governance
// authority — the ONLY caller that may toggle the 0x9999 settlement kill
// switches (setHaltGlobal/Market/Asset) and seed the settlement pots. It is a
// per-NETWORK identity (each network deploys its own Governor/Timelock/multisig
// CONTRACT), resolved at chain wiring from the host's deployment topology and
// surfaced to the precompile via contract.AtomicState.GovernanceController() —
// the SAME runtime seam CChainID/DChainID flow through, with ZERO per-net config
// file. It MUST be a governance CONTRACT, NEVER an EOA derivable from any dev
// mnemonic. The zero value is the safe default: an unset governance authority
// makes the halt switches uncallable (fail-closed — no single key can DoS the
// DEX), never fail-open. Typed ids.ShortID ([20]byte) so this low consensus leaf
// stays free of any geth import; it is the same 20 bytes as a geth common.Address.
GovernanceController ids.ShortID `json:"governanceController"`
// UTXOAssetID is the primary network's UTXO fee asset — burned to
// pay fees on P-chain (CreateChainTx, AddChainValidatorTx, …) and
// X-chain transfers. Sourced from the chain's genesis (the X-chain's
@@ -232,6 +246,16 @@ func (r *Runtime) GetCChainID() ids.ID {
return r.CChainID
}
// GetGovernanceController returns the DEX governance authority address (the sole
// caller permitted to halt 0x9999 settlement / seed its pots), or the zero ShortID
// when unset — which the precompile treats as fail-closed (no halt authority).
func (r *Runtime) GetGovernanceController() ids.ShortID {
if r == nil {
return ids.ShortEmpty
}
return r.GovernanceController
}
func (r *Runtime) GetAssetID() ids.ID {
if r == nil {
return ids.Empty