docs: add audit reports for Risk Stewards V1 and Core pool Comptroller interface unification

Author: chechu

security-and-audits.md

@@ -8,6 +8,38 @@ We firmly believe that the true test of a smart contract's security lies in its
 
 ## Audits
 
+### Risk Stewards V1 and Core pool Comptroller interface compatibility with Isolated Pools
+
+**Scope**: Venus Risk Steward contracts compatible with the Risk Oracle contracts from Chaos Labs. These stewards will be authorized to perform risk parameter changes (initially only increasing the supply and borrow caps), without VIP's. Moreover, the interface of the Comptroller contract on BNB Chain is extended with the functions defined in the Comptroller contract for the Isolated Pools. That simplifies the interaction with both Comptroller contracts.
+
+* [Certik audit report (2025/02/19)](https://github.com/VenusProtocol/governance-contracts/blob/210d1e54f0c9136a805977b41077567b0883a4e0/audits/120_risk_stewards_v1_certik_20250219.pdf)
+* [Quantstamp audit report (2025/02/13)](https://github.com/VenusProtocol/governance-contracts/blob/210d1e54f0c9136a805977b41077567b0883a4e0/audits/121_risk_stewards_v1_quantstamp_20250213.pdf)
+* [FairyProof audit report (2025/02/26)](https://github.com/VenusProtocol/governance-contracts/blob/210d1e54f0c9136a805977b41077567b0883a4e0/audits/122_risk_stewards_v1_fairyproof_20250226.pdf)
+
+<details>
+<summary>Detailed scope</summary>
+
+- Pull request [#115](https://github.com/VenusProtocol/governance-contracts/pull/115) in the `governance-contracts` repository.
+  - contracts/RiskSteward/RiskStewardReceiver.sol - entry point of the feature
+  - contracts/RiskSteward/MarketCapsRiskSteward.sol
+  - contracts/RiskSteward/IRiskSteward.sol
+  - contracts/RiskSteward/IRiskStewardReceiver.sol
+  - interfaces with “external” contracts:
+    - contracts/interfaces/ICorePoolComptroller.sol
+    - contracts/interfaces/IIsolatedPoolsComptroller.sol
+    - contracts/interfaces/IRiskOracle.sol
+    - contracts/interfaces/IVToken.sol
+
+- Pull request [#548](https://github.com/VenusProtocol/venus-protocol/pull/548) in the `venus-protocol` repository
+  - contracts/Comptroller/Diamond/facets/MarketFacet.sol
+  - contracts/Comptroller/Diamond/facets/PolicyFacet.sol
+  - contracts/Comptroller/Diamond/facets/SetterFacet.sol
+  - contracts/Comptroller/Diamond/interfaces/IMarketFacet.sol
+  - contracts/Comptroller/Diamond/interfaces/IPolicyFacet.sol
+  - contracts/Comptroller/Diamond/interfaces/ISetterFacet.sol
+
+</details>
+
 ### Venus ERC4626 Vaults
 
 **Scope**: [ERC-4626](https://ethereum.org/en/developers/docs/standards/tokens/erc-4626/) wrapper for Venus markets for isolated pools, enabling seamless integration with external DeFi protocols that follow the ERC-4626 standard.