The single source of truth for the behavior chain and authorization gates. Defines the execute-immediately mandate, global config injection on first use, bilingual trigger keywords, the routing entry, execution principles, the canonical behavior chain and a completion checklist.

In this repository you can find semgrep rules that look for patterns of vulnerabilities in smart contracts based on actual DeFi exploits as well as gas optimization rules that can be used as a part of the CI pipeline. The rules are part of the semgrep registry under p/smart-contr. Use it to ground design choices in named patterns, trade-offs and examples.