Description
Critical admin actions (pause, migrate, param changes) currently rely on a single admin key. Add M-of-N multi-sig approval, complementing the existing governance_multisig_tests scaffolding.
Direction
- Add a multi-sig config in
governance_system/admin: set of signer addresses + threshold.
- Sensitive actions create a pending proposal; signers call
approve_action(action_id); execution requires ≥ threshold approvals.
- Reuse
nonce for replay protection and events for ProposalCreated/Approved/Executed.
Acceptance criteria
Description
Critical admin actions (pause, migrate, param changes) currently rely on a single admin key. Add M-of-N multi-sig approval, complementing the existing
governance_multisig_testsscaffolding.Direction
governance_system/admin: set of signer addresses + threshold.approve_action(action_id); execution requires ≥ threshold approvals.noncefor replay protection andeventsforProposalCreated/Approved/Executed.Acceptance criteria