- Began a route-by-route migration to CCIP 2.0 on Ethereum. A new immutable OnRamp 2.0 was deployed, and the main Router moved Mantle, Ink, Cronos, Abstract, Plume, AB, and Robinhood from their previous ramps to the shared v2 OnRamp. Many other destinations remain on v1.6 or older ramps, so this is coexistence rather than a global replacement. - Expanded the v2 inbound and verifier configuration. The v2 OffRamp added ADI, Optimism, Arbitrum, and Polygon PoS source routes and accepted additional source OnRamps on several existing routes; the deprecated Router registered the same OffRamp for those four sources. The Executor and VersionedVerifierResolver added the corresponding destinations, and the CommitteeVerifier added 9-of-16 committees for ADI, Optimism, Arbitrum, and Polygon PoS while adding one signer to Abstract without changing its threshold of 9. - Added Neox to the USDC siloed lock/release pool. A new Neox-specific lockbox was deployed, the siloed pool registered it as a supported route, and the USDC routing proxy selected LOCK RELEASE for Neox. - Added discovery coverage and templates for the v2 OnRamp, OffRamp, Executor endpoint and implementation, VersionedVerifierResolver, CommitteeVerifier, permissionless TokenPoolFactory, the registered USDC routing graph, and the registered reUSD BurnWithFromMintTokenPool as a non-USDC example of default verifier policy. The reUSD pool has no AdvancedPoolHooks, and direct inbound and outbound getRequiredCCVs reads for its Ink route both return empty. The Ink v2 ramp configurations therefore apply their default VersionedVerifierResolver, which selects the CommitteeVerifier, and configure no additional mandatory CCVs. The USDC proxy currently selects only its CCTP-v1 and siloed lock/release children; its CCTP-v2 and CCTP-through-CCV children are configured but are not selected for any recorded route. The USDC CCTP resolver retains verifier versions 2.0 and 2.1 for inbound messages and selects 2.1 for all six outbound routes. - Permission modeling now follows the source-level caller gates: CapabilitiesRegistry is the only external path into CCIPHome OCR configuration transitions; per-route Routers directly call the v2 OnRamp or select the ramps accepted by the verifiers, reUSD pool, and USDC proxy. AdvancedPoolHooks can require token-specific CCVs; the standard burn/mint pool also invokes preflight and postflight checks, while the CCTP-through-CCV and siloed pools explicitly disable those two hook paths. - Exposed the complete per-route verifier fee, verification-gas, payload-size, allowlist, and Router state. Committee routes charge 0 cents and use 75,000 gas with 582-byte results, except Canton at 100,000 gas and 1,000 bytes; both CCTP verifier versions charge 0 cents and use 200,000 gas with 1,024-byte results. Allowed-finality values are decoded: the Committee, CCTP verifiers, and CCTP-through-CCV pool accept full finality or a block depth of at least one; the Executor additionally accepts the safe head; the siloed pool accepts only full finality. - The main v2 ramps, Executor, Committee verifier path, USDC routing proxy, CCTP-v1 child, CCTP-through-CCV child, and siloed pool are governed by the ARMTimelock. The USDC CCTP-v2 child, current CCTPVerifier 2.1 implementation, its resolver, and the Neox lockbox are instead owned directly by the fee-aggregator EOA. The TokenPoolFactory is permissionless and has no owner. These controls can reconfigure lane, committee, USDC pool, fee, finality, CCV, and lockbox policies; the architecture text now describes v2.0 and v1.6 coexistence. - Updated the latest CCIPHome v1.6 execution ConfigSet records for Ethereum, BSC, Base, Solana, Sonic, Etherlink, Avalanche, Katana, Berachain, TAC, Monad, Stable, and MegaETH. Their LBTC observer configuration removed the Corn source pool and changed the Avalanche and BSC source pools. The Ethereum, BSC, and Base OffRamp execution digests changed consistently. Arc's commit ConfigSet also advanced and replaced one token-feed entry with an 18-decimal token using the same aggregator. - Changed RMN curses by removing Wemix and adding TAC, Sui, and Cronos. Consequently, the tracked legacy Cronos CommitStore became unhealthy while the Wemix CommitStore became healthy. - Raised the AB, Abstract, Cronos, and Robinhood FeeQuoter limits from 30,000 to 32,000 data bytes and from 3M to 8M gas, changed their per-payload-byte gas from 16 to 20, and reduced their default token fee from 50 cents to zero. Added a Mova destination config and a Plasma-specific token transfer fee override. - Removed one signer from ARM Multisig2, reducing its first leaf group from 18 to 17 members and the total signer union from 43 to 42. Its root remains 2-of-3 and its computed minimum remains four signatures. No tracked proxy implementation was upgraded: the new deployments identified here are the immutable v2 OnRamp and Neox USDC lockbox, while the other newly created discovery entries are pre-existing contracts brought into scope.

- Reconfigured three ARM governance signer trees without changing their computed minimum signature counts. ARM Multisig4 moved from 72 to 69 signers and replaced its root's (1,4,5) branches with (1,18,19) while retaining an 8-signature minimum. ARM Multisig3 moved from 72 to 69 signers and expanded its root from 1-of-2 to 1-of-3 while retaining a 2-signature minimum. ARM Multisig1 moved from 43 to 42 signers, with its root still 2-of-3 and its minimum still 4 signatures. These remain tree quorums, not flat M-of-N multisigs. - Removed one signer from each RMN governance tree without changing their computed minimum signature counts or root quorums. RMN Multisig1 moved from 41 to 40 signers, RMN Multisig2 from 70 to 69, and RMN Multisig3 from 41 to 40. The affected leaf groups moved from 2-of-17 to 2-of-16, 2-of-41 to 2-of-40, and 2-of-17 to 2-of-16, respectively. - Added Mova (chain selector 4215185756725900654 ) to CCIPHome with separate 16-node commit and execution configurations, each using F=5, and enabled both Ethereum-to-Mova and Mova-to-Ethereum routes. RMN verification is disabled for inbound Mova roots on the Ethereum OffRamp, so its OCR commit quorum is the root signer gate. - Rotated one TON commit/execution oracle tuple, including its p2p identity, signer and transmitter keys, offchain public key, peer ID and shared-secret encryption material. The TON commit and execution config digests and versions changed accordingly, and the same old p2p identity was replaced in the TON and Aptos reader sets. - Added dynamic permissions for the OnRamp and OffRamp callers that advance shared nonce state and for per-token TokenAdminRegistry administrators, and completed the owner permissions and chain-neutral descriptions of the v1.6 ramp/router templates. No contract implementation, proxy, source or ABI changed in this refresh.

- Migrated the Ethereum ARM proxy from the legacy RMNRemote 1.6.0 to RMN 2.1.0 . The new RMN keeps global and route-specific curse checks, but removes the legacy root-blessing signer path: its compatibility isBlessed() always returns true and getVersionedConfig() returns an empty version-0 signer config. The legacy RMN timelock remains the owner and can curse or uncurse subjects and manage authorized curse callers. - Added a separate zero-delay curse-governance stack authorized by the new RMN: an RBAC timelock administered by the existing ARM timelock, a permissionless executor proxy, and three 1-of-7 ManyChainMultiSigs for proposing, cancelling and bypassing operations. The existing ARM/RMN multisig signer trees did not rotate; their permission diffs only reflect the newly discovered governance relationships and the old RMNRemote no longer being the ARM proxy target. - Preserved the existing Taiko, Corn and Wemix curses during the RMN migration, then cursed Cronos zkEVM and Superseed. The Cronos zkEVM and Superseed legacy CommitStores now fail their unpaused-and-not-cursed health check. - Added Arc, Cronos, AB, Abstract and Robinhood as accepted source chains on Ethereum router 0x3237... , all routed through the same OffRamp 2.0.0 contract. This exposes a required interop-plugin follow-up: CCIP 2.0 uses new CCIPMessageSent and ExecutionStateChanged event ABIs that the current v1.5/v1.6 parsers do not decode. - Increased the GHO Ethereum token pool's total bridge limit from 150M to 200M GHO. No per-lane rate-limit configuration changed. - Rotated one Aptos/Sui DON node and its OCR keys in the Aptos commit and execution configs and Sui reader set. The Aptos commit config now also explicitly records evmGasLimit: 0 and populateTxHashEnabled: false , while the execution config explicitly records the latter default. The Avalanche and Monad execution configs only received new versions/digests and positional reshuffling; their node/key sets and decoded plugin parameters are unchanged. - Canonicalized each CCIPHome OCR3 oracle as one p2pId-sorted tuple spanning the node, offchain public key, peer id and shared-secret encryption. This removes Avalanche and Monad's permutation-only array churn from watched changes while preserving the positional relationships required by libOCR; the one-time representation migration appears under config/verification-related changes.

- Rotated CCIPHome commit and execution OCR configurations for 45 chains and reader sets for 43 chains. Most configurations replace one DON node, rotate the associated OCR public keys, peer IDs and shared-secret material, and produce new config digests. The tracked Arbitrum, Base, BSC, Ethereum, Optimism and Polygon PoS OffRamps now expose the corresponding commit signer/transmitter rotations and new commit and execution digests. - Updated OCR reporting-plugin inputs: token-data observer configurations changed on 15 execution DONs, including CCTP and LBTC source-pool addresses; BSC, Optimism and Sonic commit configs now set donBreakingChangesVersion to 1; the Shibarium token feed changed; and several configs now explicitly set evmGasLimit or populateTxHashEnabled defaults. - Rotated the signer trees of all seven ARM/RMN ManyChainMultiSig contracts without changing their computed minimum signature counts. ARM multisig member counts changed from 38 to 43 or 67 to 72; RMN multisig member counts changed from 41 to 41, 67 to 70 and 40 to 41, with their subgroup layouts updated. - Increased the GHO Ethereum token pool's Arbitrum inbound and outbound rate-limit capacity from 1.5M to 5M GHO, its refill rate from 300 to 1,000 GHO/s, and its total bridge limit from 100M to 150M GHO. - Added an RMN curse for Wemix. The corresponding legacy Wemix CommitStore now reports that it is not unpaused and curse-free. - Increased the Base USDC token-transfer destination gas overhead in the FeeQuoter from 180,000 to 220,000.