PEN token migration to Base - #559

Merged

ebma merged 61 commits into

mainfrom

feat/pen-to-base-migration

Sep 8, 2026

Commits on Aug 24, 2026

docs: Add design documents for the PEN migration to Base
ebma
committed
a27e4a6
pallets: Add the token-migration pallet
ebma
committed
9cf7d89
runtime: Wire the token-migration pallet into Pendulum
ebma
committed
e1f168a
contracts: Add the PEN token, migration vault and governance for Base
ebma
committed
2aec0e8
attestor: Add the attestor daemon
ebma
committed
eb8ba1b
monitor: Add the independent invariant monitor
ebma
committed
bb1966c
releaser: Add the deferred-release service
ebma
committed
9b6a7c8
docs: Add operational runbooks, local test plan and review log
ebma
committed
2fb8c1c
contracts: Fill in the decided deployment parameters
ebma
committed
3c47488

Commits on Aug 27, 2026

testing: Add a local validation harness for the migration
ebma
committed
a6f8100
docs: Refresh the implementation overview and settle the testnet plan
ebma
committed
b3e31fe
pallets: Replace estimated weights with benchmarked ones
ebma
committed
298a54b
attestor: Pad the gas limit when submitting an approval
ebma
committed
7c1b91c
releaser: Declare Multicall3 and fall back to per-nonce reads
ebma
committed
dcf5401
testing: Add phase 1 and phase 3 to the validation harness
ebma
committed
58e48b2
attestor: Ignore local checkpoint files from test runs
ebma
committed
1bb94df

Commits on Aug 28, 2026

docs: Point the test plan at the automated harness
ebma
committed
7027c81
testing: Repair chain specs so the node can read back its own output
ebma
committed
9aeb872
testing: Add a Zombienet network for relay-finality validation
ebma
committed
e7ca41b
testing: Add phase 4, relay-chain finality under Zombienet
ebma
committed
df0b9a8
docs: Record relay-finality validation in the test plan
ebma
committed
9c2add8
testing: Add rehearsal environment with testnet guardrails
ebma
committed
ec4100d
testing: Extract Zombienet control into a shared module
ebma
committed
e0eda12
testing: Add phase 5, full-stack rehearsal on Base Sepolia
ebma
committed
c1b2654
docs: Document the full-stack rehearsal phase
ebma
committed
53acc1e
testing: Fan rehearsal gas out from the deployer
ebma
committed
b4f13aa
testing: Share the collator discovery helper with phase 4
ebma
committed
0a05626
attestor: Survive a lost race when the RPC has not caught up
ebma
committed
844f731
attestor: Actually route the race recheck through the backoff
ebma
committed
c7f4f0c
attestor: Survive transient RPC failures instead of exiting
ebma
committed
7037f6f
testing: Ride out endpoint throttling in the rehearsal's own reads
ebma
committed
faf7939
docs: Record the two defects the Base Sepolia rehearsal found
ebma
committed
299601f

Commits on Aug 31, 2026

testing: Automate the phase 6 failure drills
ebma
committed
8b86094
docs: Point the failure-drill table at the automated drills
ebma
committed
c0ba4f1
testing: Drill the real runtime upgrade under a live fleet
ebma
committed
e975577
attestor: Cover bare 429 codes; record the post-drills review pass
ebma
committed
f0f64e4
testing: Add phase 5b, the governance rehearsal on Base Sepolia
ebma
committed
d952d5e
docs: Document the governance rehearsal and its manual walkthrough
ebma
committed
16ee8bf
docs: Add the review handover briefing for the next review round
ebma
committed
ac1e77b

Commits on Sep 6, 2026

pallet: Make the treasury destination a one-time anchor
ebma
committed
fc29bc8
attestor: Persist an identity-bound checkpoint atomically
ebma
committed
bb97e5b
attestor: Process at latest and trail the checkpoint at Base finality
ebma
committed
f49990c
releaser: Persist an identity-bound state file atomically
ebma
committed
ce57ffd
releaser: Drop pending entries only at the finality boundary
ebma
committed
4a21164
monitor: Persist the two-chain cursor and pending tuples atomically
ebma
committed
9da3dd1
monitor: Reconcile every safe Base event against its finalized Pendulum burn
ebma
committed
95e7e47
contracts: Base quorum on circulating supply with an absolute floor
ebma
committed
7ed88c3
contracts: Let a human canceller veto a queued proposal during the delay
ebma
committed
9d9e81f
contracts: Enforce cap invariants and reject a past sweep floor
ebma
committed
e3a14b9
testing: Drive the monitor's durable cursors and drill the new alarms
ebma
committed
8f89a6f
docs: Record review rounds 8 and 9 and realign the runbooks
ebma
committed
12dc446
ci: Run the Foundry and daemon suites
ebma
committed
6ac055e
attestor: Treat a pre-vault finality boundary as not yet durable
ebma
committed
6622d94
testing: Tee daemon logs; require an Anvil whose safe tag tracks latest
ebma
committed
1622aea
releaser: Buffer the release() gas limit
ebma
committed
224ff6d
testing: Pass explicit gas in the harness; keep the drill's caps equal
ebma
committed
67702bd
docs: Record the phase 1 and phase 3 results on the round-9 revision
ebma
committed
e0a36b9

Commits on Sep 8, 2026