How to manage framework versions for devnet, testnet, and mainnet?

[andygolay]

We have PRs open against the movement branch of aptos-core which remove the core resource signer's privileges. Maybe this has already been discussed, but how are we managing the release bundles so we have distinct framework versions for devnet, testnet, and mainnet, and so the core resources account is only disabled on mainnet?

[l-monninger]

That's a valid point against bundling the framework disabled release signer in with the current release framework.

We could update that API to take a config and exclude that.

[andygolay]

I'm not sure that we need to refactor the API itself; couldn't we just have a feature flag for disabling the core resources account?

Similar to this example-after-randomness-enabled release: https://github.com/movementlabsxyz/aptos-core/blob/movement/aptos-move/aptos-release-builder/data/example-release-with-randomness-framework/release.yaml

Could we just have different releases with different feature flags enabled? If that sounds good, I'll write an issue for it. Or let me know if you think it's not a good enough solution for managing releases.

The way I envision it working is that for the decommissioning functions I add in the PRs linked here #36, we assert for say the decommission_core_resources flag in those functions, only allow them to run if that flag is enabled. And only enable that flag on mainnet, as a way of protecting testnet and devnet from having the core resources account's privileges tampered with.

[l-monninger]

Well... what we want to do is propose and vote with a set of validators we control. Currently, all we're doing is encoding changes directly and then calling them through with core resources.

So, we need to add:

1. Proposal formation.
2. Submitting votes with a set of signers.

[l-monninger]

By release API, I mean our internal release API.

[andygolay]

Okay, I created this issue: #60

I'm not familiar with that API, so will need some guidance about it. Do you have a link to the code for it?

[l-monninger]

https://github.com/movementlabsxyz/movement/tree/main/protocol-units/execution/maptos/framework

Releases and migrations there.