Add Chainlink PoR rule

.github/workflows/test.yml

@@ -40,6 +40,33 @@ jobs:
           forge test -vvv
         id: test
 
+      # The vendored ERC-3643 `Token.sol` pins `pragma solidity 0.8.30` exactly, so it cannot share
+      # a compilation unit with our 0.8.36. `test/ERC3643Real/**` is in the default profile's `skip`
+      # list and is built by `[profile.erc3643]` instead, which means the step above does NOT run it.
+      # Both commands are required — see the Toolchain section of AGENTS.md / CLAUDE.md.
+      - name: Run Forge tests (ERC-3643 profile)
+        env:
+          FOUNDRY_PROFILE: erc3643
+        run: |
+          forge test -vvv
+        id: test-erc3643
+
+      # `forge build` compiles the deployment scripts but never executes them, and the unit tests
+      # call deploy() directly rather than run(), so neither exercises the broadcast context. That
+      # gap let three scripts revert on every real deployment while CI stayed green
+      # (CLAUDE_ANALYSIS_SCRIPT.md S-1/S-2). A test cannot cover this: Foundry refuses to combine a prank
+      # with a broadcast, so `forge script` itself is the only faithful harness. No key or RPC is
+      # needed -- without --broadcast this is a local simulation.
+      - name: Run deployment scripts (dry run)
+        run: |
+          for s in script/*.s.sol; do
+            name=$(basename "$s" .s.sol)
+            echo "::group::$name"
+            forge script "$s:$name"
+            echo "::endgroup::"
+          done
+        id: scripts
+
       - name: Setup NodeJS 20.5.0
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4.4.0
         with:

.gitignore

@@ -30,3 +30,9 @@ FEEDBACK.md
 *.dtmp
 
 
+
+# LibreOffice lock files
+.~lock.*#
+
+# Artifacts from the erc3643 Foundry profile
+out-erc3643/

.gitmodules

@@ -13,3 +13,12 @@
 [submodule "lib/openzeppelin-contracts-upgradeable"]
 	path = lib/openzeppelin-contracts-upgradeable
 	url = https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable
+[submodule "lib/ERC-3643"]
+	path = lib/ERC-3643
+	url = https://github.com/ERC-3643/ERC-3643/
+[submodule "lib/chainlink-doc"]
+	path = lib/chainlink-doc
+	url = https://github.com/smartcontractkit/documentation.git
+[submodule "lib/chainlink-ace"]
+	path = lib/chainlink-ace
+	url = https://github.com/smartcontractkit/chainlink-ace.git

doc/FOUNDRY.md

@@ -8,13 +8,13 @@ Here are the settings for [Hardhat](https://hardhat.org) and [Foundry](https://g
 
 - `hardhat.config.js`
 
-  - Solidity [v0.8.34](https://docs.soliditylang.org/en/v0.8.34/)
+  - Solidity [v0.8.36](https://docs.soliditylang.org/en/v0.8.36/)
   - EVM version: Prague (Pectra upgrade)
   - Optimizer: true, 200 runs
 
 - `foundry.toml`
 
-  - Solidity [v0.8.34](https://docs.soliditylang.org/en/v0.8.34/)
+  - Solidity [v0.8.36](https://docs.soliditylang.org/en/v0.8.36/)
   - EVM version: Prague (Pectra upgrade)
   - Optimizer: true, 200 runs
 
@@ -24,13 +24,13 @@ Here are the settings for [Hardhat](https://hardhat.org) and [Foundry](https://g
 
   - Forge std [v1.12.0](https://github.com/foundry-rs/forge-std/releases/tag/v1.12.0)
 
-  - OpenZeppelin Contracts (submodule) [v5.6.1](https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.6.1)
+  - OpenZeppelin Contracts (submodule) [v5.7.0](https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.7.0)
 
-  - OpenZeppelin Contracts Upgradeable (submodule) [v5.6.1](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/releases/tag/v5.6.1)
+  - OpenZeppelin Contracts Upgradeable (submodule) [v5.7.0](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/releases/tag/v5.7.0)
 
-  - CMTAT [v3.3.0-rc1](https://github.com/CMTA/CMTAT/releases/tag/v3.3.0-rc1)
+  - CMTAT [v3.3.0-rc3](https://github.com/CMTA/CMTAT/releases/tag/v3.3.0-rc3)
 
-  - RuleEngine [v3.0.0-rc4](https://github.com/CMTA/RuleEngine/releases/tag/v3.0.0-rc4)
+  - RuleEngine [v3.0.0-rc5](https://github.com/CMTA/RuleEngine/releases/tag/v3.0.0-rc5)
 
 ## Toolchain installation