2-of-3 multisig per docs/mainnet-deploy-runbook.md and docs/admin-custody-policy.md. Book signers in week 1 for this slot; the ~24h timelock is calendar, not effort.
Pre-flight, immediately before proposing (plan Appendix C): read id_base, walk forward until get_event returns error 30, confirm every event is Completed or Cancelled. If any event is Active, stop — its record cannot be rewritten safely.
Done when
propose_upgrade submitted, XDR committed to signing/
- ~24h timelock elapsed (17,280 ledgers)
apply_upgrade then migrate() confirmed
version() reads 1.7.0, both historical events readable
deployments/mainnet.json and mainnet-upgrades.jsonl updated
Blocked on the audit gating decision, plan 7.6.
Plan: boundless-bounty-programs-implementation-plan.md
2-of-3 multisig per
docs/mainnet-deploy-runbook.mdanddocs/admin-custody-policy.md. Book signers in week 1 for this slot; the ~24h timelock is calendar, not effort.Pre-flight, immediately before proposing (plan Appendix C): read
id_base, walk forward untilget_eventreturns error 30, confirm every event is Completed or Cancelled. If any event is Active, stop — its record cannot be rewritten safely.Done when
propose_upgradesubmitted, XDR committed tosigning/apply_upgradethenmigrate()confirmedversion()reads 1.7.0, both historical events readabledeployments/mainnet.jsonandmainnet-upgrades.jsonlupdatedBlocked on the audit gating decision, plan 7.6.
Plan:
boundless-bounty-programs-implementation-plan.md