feat(P1+P2+P4): session action permissions + dual-cluster + release infra - #51

Merged

onspeedhp merged 11 commits into

chore/cherry-pick-guardrailsfrom

feat/session-action-permissions

May 6, 2026

Commits on Apr 30, 2026

feat(state): port session action permission types from lazorkit-protocol
onspeedhp
committed
2716642
feat(session): support optional action permission buffer at session creation
onspeedhp
committed
3ff167f
chore(compact): port zero-copy ref-based instruction parser from upstream
onspeedhp
committed
a3930f2
feat(execute): enforce session action permissions at execute time
onspeedhp
committed
644c5d6
feat(build): dual-cluster Cargo features for compile-time program ID
onspeedhp
committed
4cbe03d
feat(program): embed security.txt with audit + contact info
onspeedhp
committed
57358e8
chore(build): adapt dev workflow to dual-cluster features
onspeedhp
committed
2708a24
ci: port sbf-cluster-check workflow from lazorkit-protocol
onspeedhp
committed
3525c83
docs(changelog): record P1 + P2 additions under [Unreleased]
onspeedhp
committed
d384fd6
docs(deploy): mainnet deploy runbook + audit-frozen tag checklist
onspeedhp
committed
fe249b8
ci(release): tagged-release workflow with verified-build hashes
onspeedhp
committed
9f77dcd