Skip to content

v0.18.0-beta.2 — quick-wins: VERSION fix + #104 prague-green + #22 Guard strict mode

Choose a tag to compare

View all tags
@jhfnetboy jhfnetboy released this 14 Jun 13:50
· 8 commits to main since this release
v0.18.0-beta.2
807d4ee
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AirAccount v0.18.0-beta.2 — quick-wins batch + redeploy

Low-cost hardening/cleanup batch on top of v0.18.0-beta.1, redeployed to Sepolia. 805 unit tests (cancun) + 805 under EIP-2537/prague (full suite now), 0 failed.

What changed (PR #111)

  • 🔴 VERSION fix — the v0.18 contracts self-reported "0.17.2"; bumped ACCOUNT_VERSION / FACTORY_VERSION / accountId() → 0.18.0 (verified on-chain on the new deployment).
  • #104 — removed the dead g2Add/_g2Add (EIP-2537 0x0e=G2MSM) helper from AAStarBLSAlgorithm (live hash-to-curve uses 0x0d, untouched); fixed test_aggregateKeys_twoNodes → the full prague test suite is now green (CI job widened from scoped to full).
  • #22 — Guard strict mode: opt-in blockUnconfiguredTokens flag (default OFF, backward-compatible) on AAStarGlobalGuard + owner-gated guardSetStrictMode → allowlist mode (unconfigured tokens revert TokenNotConfigured()).
  • Docs — recovery timelock aligned to 48h (the actual RECOVERY_TIMELOCK = 2 days constant; the "72h" was a doc error).
  • Deferred to v0.19 (#42): Safe/ERC-1271 guardians (SignatureChecker can't recover an address + 2 guardian sites run inside validateUserOp where ERC-7562 forbids the external staticcall).

Deployed to Sepolia (2026-06-14) — supersedes beta.1

Contract Address
Factory 0x1b694Aa55fBe2953e724037d2449905d531C1e65
Implementation 0x9Bf4d9FeFaA1e7358e58583294569adf730A97b0
Extension 0x008B136106e98384B640bD5F0D0fb6012542F24D
AAStarBLSAlgorithm 0xA9EE4f8A59fCE1B56f9da8e153c3f5F38D3C59ED
AAStarBLSAggregator 0x321D68F5eD927B59E1A953Fd97972FbCB21f7601
ValidatorRouter 0xe8e5a8c5eeDfb75adb7FbA2BCCD3A6b1B766d6f0
SessionKeyValidator 0xBB79BF812aE239443fF48323dD24860F9bFb2874
ForceExitModule 0xEaDb9EEDD1aF021AEC687C18C3491337a481e4Ed
AirAccountDelegate 0x6b60897172B7CA2fa3986d19a55B25d968988c22
AgentRegistry 0x00D7045617b9807cE36db9591a63b5af66036192
CalldataParserRegistry 0xD6A16905C25F1D928e2fF5204f1385379e84D3Ff

On-chain verification

E2E re-run against this deployment: phase 13 module-nonce 8/8 · phase 14 ForceExit TOCTOU 7/7 · phase 15 session cap+velocity 4/4 · phase 16 P256 low-S 6/6. ACCOUNT_VERSION/FACTORY_VERSION confirmed "0.18.0" on-chain.

Testnet: owner = deployer EOA (no Safe on Sepolia). Beta — not for production funds. Remaining roadmap tracked in the v0.19 milestone.

Assets 2
Loading