Document subnet owner wallet security

[UnArbosFive]

Summary

• document a multisig plus scoped Owner proxy setup for subnet owners
• explain crowdloan ownership for new subnets and coldkey migration for existing owners
• clarify how transfers, stake transfers, and coldkey swaps affect conviction locks

Why

Subnet owners need concise operational guidance for protecting ownership credentials and migrating an existing owner without losing conviction context.

Validation

• git diff --check
• verified internal documentation link targets
• rendered the affected page with the local documentation preview

[vercel]

@UnArbosFive is attempting to deploy a commit to the RaoFoundation Team on Vercel.

A member of the Team first needs to authorize it.

[github-actions]

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

[github-actions]

[MEDIUM] Security procedure links to nonexistent guides

Neither docs/guides/multisig.mdx nor docs/guides/proxies.mdx exists, and neither page is registered in docs/guides/meta.json. The same missing proxy guide is now referenced from docs/concepts/wallets.mdx. Consequently, subnet owners following this security-sensitive procedure reach 404s instead of the promised setup, migration, delay, and recovery instructions. Add and register both guides in this PR, or point these links to existing complete documentation.

[github-actions]

🛡️ AI Review — Skeptic (security review)

VERDICT: VULNERABLE

VERY HIGH account-age scrutiny, mitigated by admin repository permission; no Gittensor association; codex/subnet-owner-wallet-security -> main.

Static analysis found no runtime, dependency, workflow, or trusted review-control changes. The operational claims match the proxy and coldkey-swap implementation, but the proposed security procedure depends on documentation pages that are absent from this PR and the repository.

Findings

Sev	File	Finding
MEDIUM	docs/guides/subnets.mdx:51	Security procedure links to nonexistent guides	inline

Conclusion

The documentation-only change introduces broken links at the core of its wallet-security procedure. Add and register the referenced guides, or link to existing complete instructions, before merge.

---

# 🔍 AI Review — Auditor (domain review) has not yet run on this PR.

[github-actions]

🔄 AI review updated — Skeptic: VULNERABLE

[unarbos]

Reviewed the docs against the swap/proxy runtime behavior; integrated with the multisig and proxies guides (links resolve once #2898 merges).

[unarbos]

Docs content reviewed: security guidance is accurate and consistent with the proxy/multisig material. Note: cross-links target /docs/guides/proxies and /docs/guides/multisig, which land with #2898 — merge after #2898 or the links 404.

[IntiTechnologies]

Superseded by #2898 (v431 release): these changes were reviewed and integrated there.