Skip to content

Conversation

@kvinwang
Copy link
Collaborator

@kvinwang kvinwang commented Feb 9, 2026

Summary

  • add optional requireTcbUpToDate flag to DstackApp (initializer + setter) and enforce it in isAppAllowed
  • extend KMS factory deploy to accept the new flag and keep a backward-compatible overload
  • update hardhat task, foundry cheatsheet, and tests

Upgrade notes (existing KMS deployments)

  • No storage layout change for DstackKms; upgrade is in-place via UUPS proxy.
  • Deploy new DstackKms implementation (e.g. npx hardhat kms:deploy-impl).
  • Call upgradeTo(address) on the existing KMS proxy.
  • No initializer is required for the KMS upgrade.
  • Important: if you want new apps to use the updated DstackApp implementation, deploy a new DstackApp implementation and call setAppImplementation(address) on the KMS proxy. Existing app proxies can be upgraded separately via their own upgradeTo (if upgrades are not disabled).

Testing

  • cd kms/auth-eth && npm test

@kvinwang kvinwang force-pushed the feature/app-tcb-toggle branch from 90140f9 to d660bc0 Compare February 9, 2026 02:32
@kvinwang kvinwang force-pushed the feature/app-tcb-toggle branch from d660bc0 to bfeaa5b Compare February 9, 2026 02:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant