chore(multisig-rollout): proceed optimistically, don't pre-gate on tunnel

[gvladika]

Which Linear task belongs to this PR?

Fixes EXSC-677

Why did I implement it this way?

The multisig-rollout skill was opening runs with questions like "given I can't open the prod tunnel / sign, how should we run this?" instead of just executing. The skill's own design already handles this the right way — Phase 0 defers VPN verification (list-pending-proposals.ts exits 2 with an actionable error if the tunnel is down) and signing is handed off at Phase 6 — but the "Hard rails" + Setup-agents.md "an agent must not open the prod tunnel" guidance was being over-read as "an agent must confirm the tunnel is up before starting." The fix adds an explicit counter-instruction in both places rather than touching any script logic, since the behavior was correct and only the wording invited the premature question. The legitimate gates are untouched: Phase 2 still confirms the plan (gas across many chains) and Phase 6 still hands off Ledger signing.

Checklist before requesting a review

• I have performed a self-review of my code
• This pull request is as small as possible and only tackles one problem
• I have added tests that cover the functionality / test the bug
• For new facets: I have checked all points from this list: https://www.notion.so/lifi/New-Facet-Contract-Checklist-157f0ff14ac78095a2b8f999d655622e
• I have updated any required documentation

Checklist for reviewer (DO NOT DEPLOY and contracts BEFORE CHECKING THIS!!!)

• I have checked that any arbitrary calls to external contracts are validated and or restricted
• I have checked that any privileged calls (i.e. storage modifications) are validated and or restricted
• I have ensured that any new contracts have had AT A MINIMUM 1 preliminary audit conducted on by <company/auditor>

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 823b3eb9-d0c6-4e12-9fcc-1d3412dbf0f0

📥 Commits

Reviewing files that changed from the base of the PR and between 3fda546 and b7cb995.

📒 Files selected for processing (1)

• .agents/commands/multisig-rollout.md

🚧 Files skipped from review as they are similar to previous changes (1)

• .agents/commands/multisig-rollout.md

---

Walkthrough

The rollout documentation replaces VPN references with the lifi-connect tunnel, instructs agents to proceed without upfront tunnel or signing checks, documents fail-fast MongoDB errors, and defers signing to Phase 6.

Changes

Rollout guidance

Layer / File(s)	Summary
Optimistic execution instructions .agents/commands/multisig-rollout.md, docs/Setup-agents.md	Phase 0 and non-interactive shell instructions remove upfront tunnel and signing checks, use fail-fast command errors, consistently reference lifi-connect, and defer signing to Phase 6.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

• lifinance/contracts#2052: Aligns Safe/MongoDB workflow documentation with lifi-connect tunnel handling and fail-fast behavior.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise and accurately summarizes the main change to multisig-rollout tunnel handling.
Description check	✅ Passed	The description includes all required template sections, a linked Linear task, rationale, and both checklists.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/exsc-677-multisig-rollout-optimistic-tunnel

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.agents/commands/multisig-rollout.md:
- Around line 32-33: Update the adjacent Phase 0 failure guidance to refer to
the “lifi-connect tunnel” instead of “VPN,” including any remediation wording,
while preserving the existing optimistic execution guidance and tunnel
dependency.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 9b76c270-6e2c-460d-ab14-1099cd4f3ac7

📥 Commits

Reviewing files that changed from the base of the PR and between 036ba5c and 3fda546.

📒 Files selected for processing (2)

• .agents/commands/multisig-rollout.md
• docs/Setup-agents.md