feat(hyperbridge): allow Technical Committee alongside Root for ismp origins#730
Merged
Merged
Conversation
…origins Widen AdminOrigin (pallet_ismp), RootOrigin (ismp_grandpa) and CreateOrigin (pallet_hyper_fungible_token) from EnsureRoot-only to EitherOfDiverse<EnsureRoot, EnsureMembers<TechCommCollective, N>> so governance dispatches can drive consensus-client management and token registration without going through sudo. Sudo remains as an emergency lever. * cere: N = 3 (matches other governance origins in runtime/cere) * cere-dev: N = 2 (matches runtime/cere-dev pattern) cere-dev's CreateOrigin was previously EnsureSigned (permissive devnet); it is tightened to Root+TC here to match the mainnet governance shape. spec_version bumped 73157 -> 73158; transaction_version unchanged (call encodings are the same, only origin resolution changes). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WXaw8xZuZK3Lkx9XA7Cvwv
yahortsaryk
approved these changes
Jul 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
AdminOrigin(pallet_ismp),RootOrigin(ismp_grandpa) andCreateOrigin(pallet_hyper_fungible_token) fromEnsureRoot-only toEitherOfDiverse<EnsureRoot, EnsureMembers<TechCommCollective, N>>. Sudo still works; Technical Committee also does. Matches the pattern already used by other governance origins in the runtime.cere(mainnet, TC max 100), N=2 forcere-dev(devnet). Absolute AYE counts — not proportional.cere-dev'sCreateOriginwas previouslyEnsureSigned(permissive devnet for HFT token registration). Tightened here to Root+TC to align with the mainnet governance shape. Flag if you want that reverted.spec_versionbumped73157 → 73158.transaction_versionunchanged (only origin resolution changes; call encodings unchanged).Motivation
The three origins gate consensus-client lifecycle (
create_consensus_client,update_consensus_state), supported-chain management onismp_grandpa, and token registration onpallet_hyper_fungible_token. Previously only sudo could dispatch them. Adding the TC path gives us a proper governance route without giving up sudo as an emergency lever.Local CI
cargo fmt -- --check✅cargo clippy --no-deps --all-targets --features runtime-benchmarks,try-runtime --workspace -- --deny warnings✅cargo check -p cere-runtime --features try-runtime✅cargo check -p cere-dev-runtime --features try-runtime✅Test plan
pallet_ismp.create_consensus_client/tokenGateway.registerToken🤖 Generated with Claude Code
https://claude.ai/code/session_01WXaw8xZuZK3Lkx9XA7Cvwv