add revert-on-dust invariant

Author: johnsaigle

docs/INVARIANTS.md

@@ -190,9 +190,16 @@
 - **Error Codes**: `DeliveryPaymentTooLow` (EVM)
 - **Code Reference**: `_quoteDeliveryPrice()` and payment validation
 
+### INV-021: Revert On Dust
+
+- **Invariant**: All cross-chain transfers should revert if the user included more than the exact amount ("dust")
+- **Description**: Ensures funds do not become locked in the contracts
+- **Enforcement**: Amount calculations in processing
+- **Error Codes**: `TransferAmountHasDust` (EVM)
+
 ## Peer Management
 
-### INV-021: Peer Management
+### INV-022: Peer Management
 
 - **Invariant**: NTT Manager's peers must not be registered on the same chainID as the NTT Manager
 - **Description**: Peers refer to NTT Managers on other chains; peers must not register each other on the same chain as they are operating on
@@ -201,51 +208,51 @@
 
 ## Transceiver Management
 
-### INV-022: Transceiver Registration Requirement
+### INV-023: Transceiver Registration Requirement
 
 - **Invariant**: A transceiver can be enabled only when it is also registered
 - **Description**: It is invalid for an enabled transceiver to be unregistered
 - **Enforcement**: Assertions on transceiver management code paths
 - **Code Reference**: `TransceiverRegistry.sol` (EVM)
 
-### INV-023: Minimum and Maximum Threshold Bounds
+### INV-024: Minimum and Maximum Threshold Bounds
 
 - **Invariant**: Threshold must be 1) greater than zero and 2) less than or equal to the number of enabled transceivers
 - **Description**: Attestation threshold must not exceed available transceivers and must be positive
 - **Enforcement**: Explicit bounds checking in threshold setting functions
 - **Error Codes**: `ThresholdTooHigh`, `ZeroThreshold` (EVM/Solana)
 - **Code Reference**: `_checkThresholdInvariants()` (EVM), error enforcement (Solana), `EThresholdTooHigh` (Sui)
 
-### INV-024: Minimum Transceiver Requirement
+### INV-025: Minimum Transceiver Requirement
 
 - **Invariant**: At least one transceiver must be enabled for operations (after initial deployment)
 - **Description**: Prevents operations when no transceivers are available to process messages
 - **Enforcement**: Enabled transceiver count validation before operations
 - **Error Codes**: `NoEnabledTransceivers` (EVM), `NoRegisteredTransceivers` (Solana)
 
-### INV-025: Transceiver Registration Requirement
+### INV-026: Transceiver Registration Requirement
 
 - **Invariant**: A transceiver cannot be unregistered and its index must not change
 - **Description**: Transceivers should never be truly deleted, only disabled. This preserves their index into the bitmap which is crucial for attestation.
 - **Enforcement**: Assertions on transceiver management code paths
 
-### INV-026: Transceiver index should always increase
+### INV-027: Transceiver index should always increase
 
 - **Invariant**: The next transceiver index must always increase monotically
 - **Description**: The next transceiver index should always go up by one. This guarantees uniqueness of indices into the bitmap which is crucial for attestation.
 - **Enforcement**: Assertions on transceiver management code paths
 
 ## Timing and Release Controls
 
-### INV-027: Release Timing Validation
+### INV-028: Release Timing Validation
 
 - **Invariant**: Transfers can only be released after rate limit delay expires
 - **Description**: Enforces time-based delays for rate-limited transfers
 - **Enforcement**: Timestamp validation before transfer release
 - **Error Codes**: `CantReleaseYet` (Solana), `ECantReleaseYet` (Sui)
 - **Code Reference**: Rate limiter queue system with timestamp checks, `try_release()` functions
 
-### INV-028: Transfer Redemption Controls
+### INV-029: Transfer Redemption Controls
 
 - **Invariant**: Transfers must be properly approved and not already redeemed before processing
 - **Description**: Prevents unauthorized or duplicate transfer redemptions
@@ -255,15 +262,15 @@
 
 ## Message Size Constraints
 
-### INV-029: Payload Length Limitation
+### INV-030: Payload Length Limitation
 
 - **Invariant**: NttManagerMessages and AdditionalPayloads must not exceed uint16 in size
 - **Description**: Prevents unbounded message sizes that could cause processing issues
 - **Enforcement**: Assertions in encoding logic
 - **Error Codes**: `PayloadTooLong` (EVM)
 - **Code Reference**: `TransceiverStructs.sol` (EVM), implementation of `Writable` trait for `NativeTokenTransfer` (Solana)
 
-### INV-030: Transceiver Instruction Length Limitation
+### INV-031: Transceiver Instruction Length Limitation
 
 - **Invariant**: Individual transceiver instruction payloads must not exceed uint8 in size
 - **Description**: Prevents unbounded message sizes that could cause processing issues