Merge staging into main

[UnArbosFive]

Summary

Promote the current staging branch to main.

• restore and harden public multi-architecture localnet image publication
• publish only the native images that passed smoke testing, using immutable digest handoff
• add the SS58 balance precompile and accompanying SDK/documentation updates
• correct leasing weights and optimize hotkey-swap stake iteration
• remove build warnings and resolve remaining dependency security alerts

Included changes

• Cleanup SubnetUidToLeaseId in do_terminate_lease #2912 — clean up SubnetUidToLeaseId during lease termination
• Fix build warnings #2913 — fix build warnings
• Fix hardcoded leasing weights #2915 — fix hardcoded leasing weights
• Read ss58 Balance Precompile #2916 — add SS58 balance precompile reads
• ci: restore public multi-arch localnet images #2919 — restore public multi-architecture localnet images
• Optimize hotkey swap stake iteration #2920 — optimize hotkey-swap stake iteration
• fix remaining Dependabot security alerts #2923 — resolve remaining Dependabot alerts
• suppress warnings #2925 — suppress superseded vendored-crate warnings
• Publish tested localnet images and restore clippy #2928 — publish the tested localnet images and restore clippy
• reuse canonical alpha iterator helper  #2929 — reuse the canonical alpha iterator during hotkey swap

Scope

• 12 commits
• 51 files changed
• 2,744 insertions and 1,255 deletions

Validation

The included changes were validated in their staging PRs. This promotion PR runs the full main-target check suite before merge.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
subtensor	Ready	Preview, Comment	Jul 16, 2026 4:53pm

[github-actions]

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

[github-actions]

[HIGH] Unbounded stake positions exceed the fixed dispatch weight

This collects every stake position under a user-populatable hotkey and later performs storage operations for each position. However, swap_hotkey() charges a fixed weight benchmarked with exactly 1,273 positions; the added test explicitly permits more than the former cap. An attacker can create a larger prefix and make execution exceed its declared weight, potentially exhausting block resources. Enforce a protocol-level maximum before mutation or parameterize/conservatively bound the weight by the number of positions.

[github-actions]

🛡️ AI Review — Skeptic (security review)

VERDICT: VULNERABLE

BASELINE scrutiny — repository admin with substantial merged history; staging → main promotion, no known Gittensor association.

The runtime changes include an unbounded stake migration charged using a fixed incident-sized benchmark, and they retain the existing runtime specification version.

Findings

Sev	File	Finding
HIGH	runtime/src/lib.rs	Runtime behavior changed without a specification-version bump	(off-diff)
HIGH	pallets/subtensor/src/swap/swap_hotkey.rs:31	Unbounded stake positions exceed the fixed dispatch weight	inline

Other findings

• [HIGH] Runtime behavior changed without a specification-version bump (runtime/src/lib.rs) — This PR changes consensus runtime behavior in pallets/subtensor and registers a new balance precompile, but runtime/src/lib.rs remains at spec_version: 431. Runtime-affecting releases require a new specification version so nodes and release tooling can distinguish the new Wasm. Increment spec_version before merging.

Conclusion

The PR is legitimate-looking, but the unbounded hotkey-swap workload and missing spec_version bump are merge-blocking runtime safety issues.

---

# 🔍 AI Review — Auditor (domain review) has not yet run on this PR.

[github-actions]

🔄 AI review updated — Skeptic: VULNERABLE

[UnArbosFive]

Superseded by #2910