* Made StateManager usage authenticated

* add safety checker contract

* update safety checker: blacklist revert, KALL + KOPY checks

* lint

* update testrunner: smock safety check, add EM params

* add safety checker constants python script

* set mock targetMessenger to internal

Co-authored-by: Kelvin Fichter <kelvinfichter@gmail.com>

Initial rollup node spec

Gas Optimization: optimize _resolveAttestation() and _resolveAttestations()

update .gitignore to ignore additional test files and directories

feat(book): FPP Introduction

feat(book): FPP Introduction

chore: add missing default

chore: add missing default

Address informational audit findings with improved inline documentation:
- Document that guardian pause blocks interop upgrades (acceptable for dev feature)
- Document migrate() is exclusively for N pre-interop chains merging into one set
- Document that re-migration and partial migration are not supported
- Document intentional use of chainSystemConfigs[0] for shared contracts
- Fix inaccurate PERMIT_ALL_CONTRACTS_INSTRUCTION comment

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Address informational audit findings with improved inline documentation:
- Document that guardian pause blocks interop upgrades (acceptable for dev feature)
- Document migrate() is exclusively for N pre-interop chains merging into one set
- Document that re-migration and partial migration are not supported
- Document intentional use of chainSystemConfigs[0] for shared contracts
- Fix inaccurate PERMIT_ALL_CONTRACTS_INSTRUCTION comment

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…16

Add missing @param blueprint NatSpec to OpcmContractRef struct (#2).
Add comments about pause blocking interop upgrades (#3). Document
migrate() scope limitations and re-migration risks (#7, #15). Update
PERMIT_ALL_CONTRACTS_INSTRUCTION comment (#12). Document intentional
use of chainSystemConfigs[0] for shared contracts (#16).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…16 (#19271)

Add missing @param blueprint NatSpec to OpcmContractRef struct (#2).
Add comments about pause blocking interop upgrades (#3). Document
migrate() scope limitations and re-migration risks (#7, #15). Update
PERMIT_ALL_CONTRACTS_INSTRUCTION comment (#12). Document intentional
use of chainSystemConfigs[0] for shared contracts (#16).

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Cantina audit finding #7: _decreasePeData unconditionally reset
lastUpdate on every decrease, penalizing partial unstakers by
resetting their staking weight. Now lastUpdate is only reset when
effectiveStake reaches zero.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* docs(staking): document pause bypass behavior in setAllowedStaker

* fix(staking): only reset lastUpdate on full unstake in _decreasePeData

Cantina audit finding #7: _decreasePeData unconditionally reset
lastUpdate on every decrease, penalizing partial unstakers by
resetting their staking weight. Now lastUpdate is only reset when
effectiveStake reaches zero.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat(staking): implement two-step ownership transfer

Cantina audit finding #8: transferOwnership now nominates a pending
owner who must call acceptOwnership() to finalize the transfer,
preventing irrevocable ownership loss from incorrect addresses.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* docs(staking): document lastUpdate reset trust assumption in setAllowedStaker

Cantina audit finding #10: when a beneficiary removes a staker from
their allowlist, the staker's lastUpdate is reset via _increasePeData,
losing accumulated staking weight. Document this as an inherent trust
assumption of the delegation model.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: undo version change

* chore: upgrade natspec

* chore: update event emission order

* fix: wrong event args

* chore: add interface comments

* fix: pre-pr

* refactor: make ownable private functions public

* fix: pre-pr

* feat(ownable): reset pending owner on zeroaddress ownership transfer

* refactor: inherit OZ's ownable and use helper contract for mapping storage slot

* fix: ci

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>