[Feat]: Track `originIsRoot` reaching the release line the production runtime uses

[re-gius]

Component

Proof of Personhood

Priority

P0

Summary

DotnsPopController has to recognise a Substrate Root dispatch as an authority to allow governance updates through specific tracks. The only Root check in earlier pallet-revive releases is callerIsRoot, which answers solely for the contract that is the direct callee of the dispatch. The controller is a UUPS proxy, so its implementation executes inside the proxy's delegatecall frame and cannot ask the precompile from its own frame, which is the entire reason RootGatewayDispatcher exists.

originIsRoot (paritytech/polkadot-sdk#12281) returns true whenever the top-level dispatch was Root, regardless of how many contract or delegatecall frames separate the precompile from it. That lets the controller check Root authority directly, and it is the same mechanism any future governance-gated entrypoint would use.

The method is only useful once it exists on the chain dotNS runs on, which means it has to travel a chain of hops in more than one repository. This issue tracks that, so the state is visible in one place rather than spread across pull requests.

Proposal

Follow the method through each hop:

• Land in polkadot-sdk master: [pallet-revive] Implement originIsRoot precompile method polkadot-sdk#12281
• Backport to unstable2604: [unstable2604 Backport #12281] [pallet-revive] Implement originIsRoot precompile method polkadot-sdk#12923
• Backport to stable2606: [stable2606 Backport #12281] [pallet-revive] Implement originIsRoot precompile method polkadot-sdk#12959
• Have a new release from unstable2604: published as pallet-revive 0.18.1.
• Have a new release from stable2606: published as pallet-revive 0.19.1.
• Have it in the runtime that will serve the preview networks: bump pallet-revive to 0.19.1 individuality-community#73 bumps to pallet-revive 0.19.1 is ready for review
• Have it in the runtime that will serve mainnet: Update pallet-revive to 0.19.1 polkadot-fellows/runtimes#1262 is ready for review, it should make it for the 3rd Sep release cutoff
• Have it in the current runtime of Paseo v2
• Have it in the current runtime of Mainnet

Two dotNS issues depend on the last hop and should not be completed before it:

• [Feat]: Verify Root authority in the controller and remove the gateway dispatcher #215 can drop RootGatewayDispatcher and have the controller verify Root from its own proxy frame.
• [Feat]: Decide contract upgrade authority: governance (Root) or a wallet #238's governance option becomes implementable, since _authorizeUpgrade gated on originIsRoot() holds through the UUPS delegatecall frame where callerIsRoot() does not.

Acceptance criteria

• originIsRoot is callable on the chain dotNS deploys to, verified against a live node rather than inferred from a release note.
• The pallet-revive version in the deployed runtime is recorded here, so [Feat]: Verify Root authority in the controller and remove the gateway dispatcher #215 and [Feat]: Decide contract upgrade authority: governance (Root) or a wallet #238 can be scheduled against something concrete.

[re-gius]

P0: we need paritytech/polkadot-sdk#12959 merged before the stable2606 release planned for the end of the week.

EDIT: merged

[re-gius]

Our pallet revive changes from paritytech/individuality-community#21 were overridden in paritytech/individuality-community#10 , so now the current runtime does not contain the feature. This is because stable2606 has now been chosen as a reference runtime.

I'm working to fix this, since the change has now been backported both to unstable2604 and stable2606 branches on polkadot-sdk, so it's just a matter of releases sync.