Skip to content
Skillpedia
Security48k · #4199

smart-contract-upgrade-governance

Helps your agent manage smart contract upgrades. It controls code, delays, and authorizations to ensure secure and controlled updates.

What it does

This tool helps organize and verify smart contract updates. It ensures updates are secure, have set delays, and are approved by multiple people before happening.

When to use it

  • ✓When defining security rules for contract upgrades.
  • ✓When developers and auditors need to review updates.
  • ✓When creating checklists to track upgrade compliance.

Example of what to ask your AI

“How do I configure and track smart contract upgrade governance for our production environment?”

Want more? Open the sections below.

How to use

The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.

Skill link

https://github.com/sickn33/agentic-awesome-skills/blob/main/plugins/agentic-awesome-skills-claude/skills/smart-contract-upgrade-governance/SKILL.md

Ready-to-paste message

Use this skill to help me: https://github.com/sickn33/agentic-awesome-skills/blob/main/plugins/agentic-awesome-skills-claude/skills/smart-contract-upgrade-governance/SKILL.md Read the SKILL.md file at that link and follow its instructions for my task.
How it works

You define the update details, like the new code and the waiting period. Then, the tool generates files that help verify if everything follows the rules.

Installation

Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.

In the terminal (Claude Code, Codex, Cursor), in your project folder:

npx skills add sickn33/agentic-awesome-skills --skill smart-contract-upgrade-governance

Or download just the file:

curl -L https://raw.githubusercontent.com/sickn33/agentic-awesome-skills/main/plugins/agentic-awesome-skills-claude/skills/smart-contract-upgrade-governance/SKILL.md -o SKILL.md
Technical content (original SKILL.md)

Original text by the author, straight from GitHub.

Smart Contract Upgrade Governance

What it is: Enforces deterministic timelocks, cryptographic bytecode hash verification, and multi-sig consensus for non-custodial smart contract upgrades.

Overview

Provides a standardized, auditable framework and data model for Smart Contract Upgrade Governance operations across distributed engineering and decentralized application systems.

When to Use This Skill

  • When formalizing architectural contracts, security invariants, or operational limits for Smart Contract Upgrade Governance.
  • When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
  • When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.

How It Works

  1. Define the parameters, thresholds, and identity bindings required for the target operational register.
  2. Select appropriate boundary enforcement values from validated enum select sets.
  3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.

Field Reference

# Field Name Type SQL Type JSON Schema Type Notion Property Type Example Value
1 Upgrade Proposal ID id SERIAL PRIMARY KEY integer Text UPG-001
2 Target Contract Address text VARCHAR(56) string Text CAUD...
3 New WASM Bytecode Hash text VARCHAR(64) string Text e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
4 Timelock Delay Hours number INTEGER number Number 48
5 Governance Quorum Required select VARCHAR(32) string Select 3-of-5 Multisig
6 State Migration Function text VARCHAR(64) string Text migrate_storage_v2
7 Emergency Cancel Permitted select VARCHAR(16) string Select Yes
8 Audit Certification Attached select VARCHAR(16) string Select Yes
9 Upgrade Lifecycle Status select VARCHAR(32) string Select Timelock Pending
10 Authorized Proposer text VARCHAR(56) string Text GPROP...
11 Proposal Submission Date date DATE string, format: date Date 2026-10-01

Select Options

Governance Quorum Required

3-of-5 Multisig | 4-of-7 Multisig | DAO Token Vote Quorum

Emergency Cancel Permitted

Yes | No

Audit Certification Attached

Yes | No

Upgrade Lifecycle Status

Draft | Timelock Pending | Executed | Cancelled Revoked

Relations

  • Audit Reference -> links to the formal review documentation or test repository.
  • Target Architecture -> links to the deployed contract or autonomous agent runtime component.

Examples

Prompt

How do I configure and track Smart Contract Upgrade Governance for our production environment?

Recommended Next Step

Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.

Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.

Best Practices

  • Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
  • Re-run validation test suites on every state-altering commit or parameter change.
  • Keep example data synthetic and isolated from production cryptographic keys or private endpoints.

Limitations

  • Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
  • Requires network connectivity and valid RPC credentials when querying on-chain states.

Security & Safety Notes

  • All parameters declare risk: safe. No unauthorized state modification or privileged credential access is performed.
  • Use synthetic dummy keys and mock addresses in test suites and local verification scripts.

Common Pitfalls

  • Problem: Mismatched decimal precision between contract runtime and database register. Solution: Always verify decimals using the explicit field mapping in this reference.
  • Problem: Missing authorization checks prior to state update. Solution: Cross-validate against the Security Audit register before deployment.

Related Skills

…

FAQ

What is a 'bytecode hash'?

It's a unique fingerprint of the contract's code. This ensures the code being uploaded is exactly the same as what was approved.

What does 'multisig' mean?

It means multiple people (or security keys) need to approve an action, like an upgrade, making the process more secure.

Does this tool perform upgrades automatically?

No, it helps organize and verify the process, but the actual upgrade needs to be done with other authorized tools.

Details

Original description by the author

Soroban WASM upgrade governance register: executable bytecode hash, timelocked migration delays, and multi-sig authorization quorum.

repo: sickn33/agentic-awesome-skills

Popularity

GitHub stars
48k
Ranking position
#4199
License
MIT
Updated
10/15/2026

Is this skill useful?

0

Sign in to vote.

Comments

  • …

More skills from this repository

Similar skills