[Tyreenn]

closes #69
closes #81
closes #82
closes #86

Summary

• Vault configuration mutability and admin setters (vault: decide whether VaultConfig gets admin setters for the compliance binding and supply cap #69):
  • Record the field-by-field mutability decision and rationale for every VaultConfig field (plus decimals) in docs/architecture/006-vault.md under Decision and Consequences.
  • Add admin-authorized set_compliance(compliance, min_level) to rebind or clear compliance screening at runtime and emit ComplianceSet, enforcing min_level <= MAX_COMPLIANCE_LEVEL (3, matching compliance::MAX_LEVEL) in both __constructor and set_compliance with VaultError::InvalidComplianceLevel (16).
  • Add admin-authorized tighten-only set_max_share_supply(max_share_supply) matching rwa-asset (Let the admin tighten a supply cap but never raise it #54 / IR-02), rejecting negative, loosening, or below-supply caps with VaultError::InvalidSupplyCap (17) and emitting MaxShareSupplySet.
  • Keep lockup_secs, underlying, exchange_rate, decimals, name, and symbol immutable.
  • Amend ADR-002, ADR-003, and ADR-004 for the vault authorization map, error discriminant allocations (VaultError 1-17), and screened operations.
  • Add unit and integration test coverage for all new entry points, events, authorization checks, and refused transitions.
• Devcontainer configuration (Add a devcontainer with Rust, stellar-cli and Node preinstalled #81):
  • Add .devcontainer/devcontainer.json pinned to rust-toolchain.toml (1.98.1, wasm32v1-none, rustfmt, clippy), stellar-cli 27.1.0 (verified by SHA-256 matching .github/workflows/contracts-ci.yml), and Node.js 22, running npm ci in sdk/ on creation.
• VS Code tasks (Add a VS Code tasks.json for build, test and lint #82):
  • Add .vscode/tasks.json with tasks for make build, make lint, make test, and npm test grouped as build and test tasks, documented in CONTRIBUTING.md.
• Toolchain verification target (Add a make doctor target that checks the toolchain #86):
  • Add make doctor and scripts/doctor.sh to check rustc, wasm32v1-none, stellar-cli, node, and npm against expected versions and exit non-zero on any missing or mismatched dependency.

Verification

• cargo fmt --all -- --check
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo test --all --features testutils

[drips-wave]

@Tyreenn Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[OrderStream]

Architecturally sound vault mutability controls and developer ergonomics:

• Security controls: Enforcing tighten-only semantics on set_max_share_supply prevents malicious or accidental supply cap inflation.
• Event emission: Emitting ComplianceSet and MaxShareSupplySet ensures off-chain indexers stay synchronized with contract state mutations.
• DX consistency: Adding .devcontainer and scripts/doctor.sh guarantees new contributors match the exact compiler target (wasm32v1-none) and CLI versions.
• Minor note: Verify �dmin.require_auth() is called at the very entry of set_compliance prior to reading storage keys to save metering execution units on failed authorizations.