Skip to content

Commit 7d3e2cc

Browse files
use Prime Agent to be more specific
1 parent 3bf9379 commit 7d3e2cc

File tree

1 file changed

+19
-19
lines changed

1 file changed

+19
-19
lines changed

spell/spell-reviewer-mainnet-checklist.md

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -241,38 +241,38 @@
241241
* [ ] `MCD_VEST_MKR_TREASURY` chainlog address is used for MKR stream `yank`
242242
* [ ] `MCD_VEST_DAI` chainlog address is used for DAI stream `yank`
243243
* [ ] Tested via `testYankDAI` or `testYankMKR`
244-
* IF Agent-related content is present
245-
* IF Agent spell is provided
244+
* IF content related to a Prime Agent is present
245+
* IF Prime spell is provided
246246
* [ ] Handover message matches `XXX spell YYYY-MM-DD deployed to 0x… with hash 0x…, direct execution: yes / no` template
247247
* [ ] IF `direct execution` is `no`
248248
* [ ] The spell is plotted using `StarGuardLike(XXX_STARGUARD).plot(XXX_SPELL, XXX_SPELL_HASH)`
249-
* [ ] `XXX` in `XXX_STARGUARD` matches the name of the Agent
249+
* [ ] `XXX` in `XXX_STARGUARD` matches the name of the Prime Agent
250250
* [ ] `XXX_STARGUARD` is fetched from chainlog
251251
* [ ] The test ensures the spell is executable via `StarGuardLike(XXX_STARGUARD).exec()` before `XXX_STARGUARD.maxDelay`
252252
* [ ] IF `direct execution` is `yes`
253253
* [ ] Provided mandatory explanation of why direct execution is required makes sense on the technical level
254254
* [ ] The hash is checked via `require(XXX_SPELL.codehash == XXX_SPELL_HASH, "XXX_SPELL/wrong-codehash");`
255255
* [ ] The spell is executed via `ProxyLike(XXX_PROXY).exec(XXX_SPELL, abi.encodeWithSignature("execute()"));`
256-
* [ ] `XXX` in `XXX_PROXY` matches the name of the Agent
256+
* [ ] `XXX` in `XXX_PROXY` matches the name of the Prime Agent
257257
* [ ] `XXX_PROXY` is fetched from chainlog
258-
* [ ] Agent spell address (`XXX_SPELL`) matches Exec Sheet
259-
* [ ] Agent spell hash (`XXX_SPELL_HASH`) matches Exec Sheet
258+
* [ ] Prime spell address (`XXX_SPELL`) matches Exec Sheet
259+
* [ ] Prime spell hash (`XXX_SPELL_HASH`) matches Exec Sheet
260260
* [ ] Execution is NOT delegate call
261-
* [ ] IF Agent spell deployer is a smart contract (e.g. multisig or factory), ensure the deployer address is in `addresses_deployers.sol` as an entry
262-
* IF Agent provides instructions to be executed by the main spell (i.e. that will operate within Pause Proxy `DelegateCall` context)
263-
* [ ] No Agent contract being interacted with is authed on a core contract like `vat`, etc. (Check comprehensively where the risk is high)
264-
* [ ] Agent contract licensing and optimizations generally do not matter (except where they pose a security risk)
265-
* [ ] Agent contracts and all libraries / dependencies have verified source code (Blocking)
266-
* Upgradable Agent contracts
261+
* [ ] IF Prime spell deployer is a smart contract (e.g. multisig or factory), ensure the deployer address is in `addresses_deployers.sol` as an entry
262+
* IF Prime Agent provides instructions to be executed by the main spell (i.e. that will operate within Pause Proxy `DelegateCall` context)
263+
* [ ] No Prime Agent contract being interacted with is authed on a core contract like `vat`, etc. (Check comprehensively where the risk is high)
264+
* [ ] Prime Agent contract licensing and optimizations generally do not matter (except where they pose a security risk)
265+
* [ ] Prime Agent contracts and all libraries / dependencies have verified source code (Blocking)
266+
* Upgradable Prime Agent contracts
267267
* [ ] Upgradable contracts have the `PAUSE_PROXY` as their `admin` (i.e. the party that can upgrade)
268-
* [ ] Any upgradable Agent contracts with an `admin` that is not `PAUSE_PROXY` are not authed on any core contracts (Blocking)
269-
* [ ] All Agent content addresses (i.e. provided contract addresses or EOAs) present in the Maker Core spell are present in the Exec Sheet and are correct. Agent addresses being authed or given any permissions MUST be in the Exec Sheet. Agent addresses being called must be confirmed by the Agent spell team.
270-
* [ ] IF addresses not PR'ed in by the Agent team (use git blame for example), Agent content addresses all have inline comment for provenance or source being OKed by the Agent
271-
* [ ] Agent actions match Exec Sheet (only where inline with main spell code) and do not affect core contracts
268+
* [ ] Any upgradable Prime Agent contracts with an `admin` that is not `PAUSE_PROXY` are not authed on any core contracts (Blocking)
269+
* [ ] All Prime Agent content addresses (i.e. provided contract addresses or EOAs) present in the Maker Core spell are present in the Exec Sheet and are correct. Prime Agent addresses being authed or given any permissions MUST be in the Exec Sheet. Prime Agent addresses being called must be confirmed by the Prime Agent spell team.
270+
* [ ] IF addresses not PR'ed in by the Prime Agent team (use git blame for example), Prime Agent content addresses all have inline comment for provenance or source being OKed by the Prime Agent
271+
* [ ] Prime Agent actions match Exec Sheet (only where inline with main spell code) and do not affect core contracts
272272
* [ ] Core contract knock-on actions (such as offboarding or setting DC to 0) are present in the exec and match the code
273-
* [ ] External calls for Agent content are NOT delegate call
274-
* [ ] Code does not have untoward behavior within the scope of Maker Core Contracts (e.g. up to the Agent proxy)
275-
* IF external contracts calls are present (Not Agents, e.g. Starknet)
273+
* [ ] External calls for Prime Agent content are NOT delegate call
274+
* [ ] Code does not have untoward behavior within the scope of Maker Core Contracts (e.g. up to the Prime Agent proxy)
275+
* IF external contracts calls are present (Not Prime Agents, e.g. Starknet)
276276
* [ ] Target Contract doesn't block spell execution
277277
* [ ] External call is NOT `delegatecall`
278278
* [ ] Target Contract doesn't have permissions on the Vat

0 commit comments

Comments
 (0)