#3486 installs ConstantFeeManager on both AggLayer accounts. set_note_fee is
unmapped in both Authority procedure-role maps, so it falls back to ADMIN.
Repricing the note is a recurring, automatable operation and should not share a key with admin-critical operations like changing the allowlists.
Do: add a FEE_MNGR role and map ConstantFeeManager::set_note_fee_root() to it in
AggLayerBridge::procedure_roles() and in the faucet's currently-empty map.
Leave at ADMIN. These decide which policy is in force - a sensitive, admin-level operation, and are not routine.
set_fee_policy,add_allowed_fee_policy,remove_allowed_fee_policy.
Note: FEE_MNGR role still warrants near-ADMIN custody: as @partylikeits1983 noted, a CONSTANT_FEE_POLICY_CONFIG fee that
no sender can fund permanently freezes fee administration.
#3486 installs
ConstantFeeManageron both AggLayer accounts.set_note_feeisunmapped in both
Authorityprocedure-role maps, so it falls back toADMIN.Repricing the note is a recurring, automatable operation and should not share a key with admin-critical operations like changing the allowlists.
Do: add a
FEE_MNGRrole and mapConstantFeeManager::set_note_fee_root()to it inAggLayerBridge::procedure_roles()and in the faucet's currently-empty map.Leave at
ADMIN. These decide which policy is in force - a sensitive, admin-level operation, and are not routine.set_fee_policy,add_allowed_fee_policy,remove_allowed_fee_policy.Note:
FEE_MNGRrole still warrants near-ADMINcustody: as @partylikeits1983 noted, aCONSTANT_FEE_POLICY_CONFIGfee thatno sender can fund permanently freezes fee administration.