Skip to content

docs: require migration before attaching Safe Unified Account to a deployed Safe - #83

Open
Sednaoui wants to merge 2 commits into
mainfrom
docs/safe-unified-account-deployed-migration
Open

docs: require migration before attaching Safe Unified Account to a deployed Safe#83
Sednaoui wants to merge 2 commits into
mainfrom
docs/safe-unified-account-deployed-migration

Conversation

@Sednaoui

@Sednaoui Sednaoui commented Jul 28, 2026

Copy link
Copy Markdown
Member

Summary by CodeRabbit

  • Documentation
    • Clarified that changing Safe account versions can produce a different derived address.
    • Added migration guidance for already-deployed accounts before switching implementations or EntryPoints.
    • Documented the required migration transaction process for deployed v0.7 accounts moving to the newer account version.

The migration note was folded into the "account address changes" bullet,
which framed it as an addressing detail. For a Safe already deployed
through SafeAccountV0_3_0 it is a prerequisite: the v0.9 module must be
enabled and installed as the fallback handler before the account works on
EntryPoint v0.9, and the migration batch has to be sent from the v0.7
account itself.

Give deployed accounts their own bullet, and say so on the Safe Account
index too.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@vercel

vercel Bot commented Jul 28, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
developer-docs Ready Ready Preview, Comment Jul 28, 2026 7:53am

Request Review

@coderabbitai

coderabbitai Bot commented Jul 28, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

You’ve reached a temporary PR review limit under our Fair Usage Limits Policy.

Your recent review volume is higher than typical usage, so adaptive limits are currently applied.

Next review available in: 20 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 619767c8-9f81-4873-957b-322a85642c2e

📥 Commits

Reviewing files that changed from the base of the PR and between 118ae59 and 9c3c088.

📒 Files selected for processing (2)
  • docs/wallet/abstractionkit/13-safe-unified-account.mdx
  • docs/wallet/abstractionkit/6-safe-account.mdx
📝 Walkthrough

Walkthrough

Safe Account documentation now distinguishes address changes for new account versions from module migration requirements for deployed accounts, including the migration path to SafeMultiChainSigAccountV1 on EntryPoint v0.9.

Changes

Safe account versioning and migration

Layer / File(s) Summary
Versioning and migration guidance
docs/wallet/abstractionkit/6-safe-account.mdx, docs/wallet/abstractionkit/13-safe-unified-account.mdx
Clarifies that account versions derive different addresses and that deployed Safes require module migration before another version or EntryPoint can operate on them. Includes the v0.7-to-v1 migration batch requirement.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

Poem

A bunny read the Safe docs bright,
Two address paths now shine with light.
Deployed S afe? Migrate first,
Then v0.9 can quench its thirst.
Clearer guidance—hop, hooray! 🐇

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly matches the main documentation change about requiring migration before attaching the Safe Unified Account to a deployed Safe.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/wallet/abstractionkit/13-safe-unified-account.mdx`:
- Line 83: Update the migration guidance in the paragraph beginning “Deployed
accounts must be migrated first” to describe enabling the v0.9 module and
updating the Safe’s fallback handler as separate configuration steps. Preserve
the existing migration command, UserOperation flow, and attachment instructions,
but remove wording that says the module is installed as the fallback handler.

In `@docs/wallet/abstractionkit/6-safe-account.mdx`:
- Line 46: Update the compatibility paragraph around the “Each version derives a
different account address” statement to limit that claim to counterfactual
address derivation for new or undeployed accounts. Explicitly preserve that an
already-deployed Safe keeps its existing address and requires only module and
fallback-handler migration before another version’s class operates on it.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 15b7771b-4820-418c-b106-6d927d863e0c

📥 Commits

Reviewing files that changed from the base of the PR and between 6d11e84 and 118ae59.

📒 Files selected for processing (2)
  • docs/wallet/abstractionkit/13-safe-unified-account.mdx
  • docs/wallet/abstractionkit/6-safe-account.mdx

Comment thread docs/wallet/abstractionkit/13-safe-unified-account.mdx Outdated
Comment thread docs/wallet/abstractionkit/6-safe-account.mdx Outdated
Enabling the v0.9 module and updating the Safe's fallback handler are two
distinct configuration changes; the previous wording ran them together.

Also scope the differing-address claim to counterfactual derivation. An
already-deployed Safe keeps its address across a migration — all three
migration MetaTransactions target the existing account address — so the
unqualified statement wrongly implied the address moves.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sednaoui added a commit to candidelabs/abstractionkit that referenced this pull request Jul 28, 2026
Enabling the v0.9 module and repointing the Safe's fallback handler are two
distinct configuration changes; the wording ran them together. Also note
that a deployed Safe keeps its address across the migration — the differing
address applies to counterfactual derivation for new accounts only.

Mirrors candidelabs/developer-docs#83.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
sherifahmed990 pushed a commit to candidelabs/abstractionkit that referenced this pull request Jul 28, 2026
…unt (#228)

* docs: clarify SafeMultiChainSigAccountV1 works as a single-chain account

The class doc opened with "Safe account variant that supports multi-chain
signatures via Merkle trees" and never mentioned single-chain use, and both
single-op signing methods were documented as signing "for multi-chain".
Read cold, that says a normal single-chain signature is not available from
this class.

It is: the single-op path signs the leaf SafeOp hash directly rather than a
Merkle root, and the multi-chain flag only selects the signature encoding.
An integrator evaluating EntryPoint v0.9 concluded from these comments that
adopting this class meant "different signature machinery, a separate
integration" rather than selecting a different account class.

Lead with the single-chain case, state the API compatibility with
SafeAccountV0_3_0 explicitly, note that the multi-op methods are additive,
and flag the one thing that does change — the derived account address.
No behaviour change.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs: require migration before attaching this class to a deployed Safe

The previous wording covered only counterfactual addresses, so "selecting
this class targets EntryPoint v0.9" could be read as sufficient for an
already-deployed Safe. It is not: a Safe deployed through
SafeAccountV0_3_0 has neither the v0.9 module enabled nor installed as its
fallback handler, and UserOperations sent before the migration batch lands
will fail.

Separate API compatibility (real) from account interchangeability (not
real), and point at
createMigrateToSafeMultiChainSigAccountV1MetaTransactions, noting its batch
must be sent from the v0.7 account itself. Also qualify the constructor
doc, whose "existing or new account" is where this mistake would be made.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs: separate the two migration steps in the account docs

Enabling the v0.9 module and repointing the Safe's fallback handler are two
distinct configuration changes; the wording ran them together. Also note
that a deployed Safe keeps its address across the migration — the differing
address applies to counterfactual derivation for new accounts only.

Mirrors candidelabs/developer-docs#83.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant