fix lint and add changelog

Author: mahdy-nasr

arbnode/node.go

@@ -27,7 +27,6 @@ import (
 	"github.com/offchainlabs/nitro/arbnode/dataposter"
 	"github.com/offchainlabs/nitro/arbnode/dataposter/storage"
 	"github.com/offchainlabs/nitro/arbnode/resourcemanager"
-	"github.com/offchainlabs/nitro/restrictedaddr"
 	"github.com/offchainlabs/nitro/arbos/arbostypes"
 	"github.com/offchainlabs/nitro/arbutil"
 	"github.com/offchainlabs/nitro/broadcastclient"
@@ -43,6 +42,7 @@ import (
 	"github.com/offchainlabs/nitro/daprovider/data_streaming"
 	"github.com/offchainlabs/nitro/execution"
 	executionrpcclient "github.com/offchainlabs/nitro/execution/rpcclient"
+	"github.com/offchainlabs/nitro/restrictedaddr"
 	"github.com/offchainlabs/nitro/solgen/go/bridgegen"
 	"github.com/offchainlabs/nitro/solgen/go/precompilesgen"
 	"github.com/offchainlabs/nitro/staker"

changelog/mnasr-compliance-chains-restricted-addr-NIT-4269.md

@@ -0,0 +1,7 @@
+### Added
+- Add restricted address filtering for compliance chains (`restrictedaddr` package). This feature enables sequencers to block transactions involving restricted addresses by polling a hashed address list from S3. Key capabilities include:
+  - S3-based hash list synchronization with ETag change detection for efficient polling
+  - Lock-free HashStore using atomic pointer swaps for zero-blocking reads during updates
+  - LRU cache (10k entries) for high-performance address lookups
+  - Privacy-preserving design: addresses are never stored or transmitted in plaintext (SHA256 with salt)
+  - Configurable via `--node.restricted-addr.*` flags (bucket, region, object-key, poll-interval)