CMTAT v3.3.0-rc3 - #396

Merged

rya-sge merged 46 commits into

Jul 31, 2026

Commits on Jul 24, 2026

fix(enforcement): reject zero address in _setFrozenTokens (NM-15/NM-17) to prevent mint-path DoS, with regression tests
rya-sge
committed
fix(allowance): always allow revocation (approve/permit value == 0) while paused or restricted (NM-3/NM-8), with regression tests
rya-sge
committed
docs(ruleengine): document permissionless zero-value transferred callbacks (NM-6) in IRuleEngine NatSpec and
rya-sge
committed
fix(erc7551): preserve terms document name in setTerms(bytes32,string) overload (NM-22), with regression test
rya-sge
committed
docs(crosschain): document the raw msg.sender bridge gate and the CROSS_CHAIN_ROLE forwarder constraint (NM-4)
rya-sge
committed
docs(erc2612): document that setName does not update the EIP-712 domain and that signers must use eip712Domain() (NM-21)
rya-sge
committed
docs(pause): scope the ERC20Burn pause note and extend the existing doc/README pause Note with the per-path split (NM-20)
rya-sge
committed
fix(ruleengine): guard the transferred callback against reentrancy on size-permitting variants (NM-7/9/11/16/18), with a malicious-engine mock and per-variant docs
rya-sge
committed
chore(solidity): raise the pragma floor to ^0.8.24 across all contracts, required by EIP-1153 transient storage in the RuleEngine reentrancy guard
rya-sge
committed

Commits on Jul 27, 2026

Commits on Jul 28, 2026

Commits on Jul 29, 2026

test(document): add ERC-1643 event-emission, zero-name and missing-document tests (native + engine variants); document getAllDocuments as an intentionally-unpaginated small set
rya-sge
committed

Commits on Jul 30, 2026

Commits on Jul 31, 2026