feat(multichain): HyperEVM token-owner Safe pin plumbing (RAI-1511)

.github/workflows/rainix-sol-scheduled.yaml

@@ -21,4 +21,5 @@ jobs:
       RPC_URL_BASE_SEPOLIA_FORK: ${{ secrets.RPC_URL_BASE_SEPOLIA_FORK }}
       RPC_URL_ETHEREUM_FORK: ${{ secrets.RPC_URL_ETHEREUM_FORK }}
       RPC_URL_FLARE_FORK: ${{ secrets.RPC_URL_FLARE_FORK }}
+      RPC_URL_HYPEREVM_FORK: ${{ secrets.RPC_URL_HYPEREVM_FORK }}
       RPC_URL_POLYGON_FORK: ${{ secrets.RPC_URL_POLYGON_FORK }}

.github/workflows/rainix-sol.yaml

@@ -9,4 +9,5 @@ jobs:
       RPC_URL_BASE_SEPOLIA_FORK: ${{ secrets.RPC_URL_BASE_SEPOLIA_FORK }}
       RPC_URL_ETHEREUM_FORK: ${{ secrets.RPC_URL_ETHEREUM_FORK }}
       RPC_URL_FLARE_FORK: ${{ secrets.RPC_URL_FLARE_FORK }}
+      RPC_URL_HYPEREVM_FORK: ${{ secrets.RPC_URL_HYPEREVM_FORK }}
       RPC_URL_POLYGON_FORK: ${{ secrets.RPC_URL_POLYGON_FORK }}

src/lib/LibSafeInvariants.sol

@@ -213,6 +213,15 @@ library LibSafeInvariants {
     /// the L1 `Safe` singleton while Base runs the L2 `SafeL2`).
     address internal constant STOX_TOKEN_OWNER_SAFE_ETHEREUM = 0x3840aeDaEc8e82f79d8F6a8F6ADCa271E13E0329;
 
+    /// @notice The ST0x token-owner Safe on **HyperEVM** (chain id 999).
+    ///
+    /// Deliberately the SAME address as Ethereum's Safe: created through the
+    /// canonical Safe proxy factory with the same initializer, so the CREATE2
+    /// address matches across chains. Still a per-chain deployment (its own
+    /// proxy, its own state), asserted against the shared policy by
+    /// `assertTokenOwnerSafePolicy` exactly like every other chain's Safe.
+    address internal constant STOX_TOKEN_OWNER_SAFE_HYPEREVM = 0x3840aeDaEc8e82f79d8F6a8F6ADCa271E13E0329;
+
     /// @notice The current expected threshold for `STOX_TOKEN_OWNER_SAFE`:
     /// 3-of-6 against the post-rotation owner roster. Scripts and the
     /// prod-state invariant pin treat this as the canonical current truth
@@ -477,6 +486,9 @@ library LibSafeInvariants {
         if (chainId == ETHEREUM_CHAIN_ID) {
             return STOX_TOKEN_OWNER_SAFE_ETHEREUM;
         }
+        if (chainId == HYPEREVM_CHAIN_ID) {
+            return STOX_TOKEN_OWNER_SAFE_HYPEREVM;
+        }
         revert UnsupportedChainForTokenOwnerSafe(chainId);
     }
 

test/src/concrete/deploy/HyperEvmTokenOwnerSafeParity.t.sol

@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: LicenseRef-DCL-1.0
+// SPDX-FileCopyrightText: Copyright (c) 2020 Rain Open Source Software Ltd
+pragma solidity =0.8.25;
+
+import {Test} from "forge-std-1.16.1/src/Test.sol";
+import {IGnosisSafe} from "../../../../src/interface/IGnosisSafe.sol";
+import {LibSafeInvariants} from "../../../../src/lib/LibSafeInvariants.sol";
+import {LibStoxDeployNetworks} from "../../../../src/lib/LibStoxDeployNetworks.sol";
+
+/// @title HyperEvmTokenOwnerSafeParityTest
+/// @notice The HyperEVM ST0x token-owner Safe (deliberately the same
+/// CREATE2 address as Ethereum's, created through the canonical Safe proxy
+/// factory — a per-chain deployment with its own state) must carry the
+/// chain-agnostic token-owner policy: the same owner SET
+/// (order-insensitive), threshold, and v1.4.1 identity as every other
+/// chain's Safe. Mirrors `EthereumTokenOwnerSafeParityTest`.
+contract HyperEvmTokenOwnerSafeParityTest is Test {
+    /// The pinned HyperEVM Safe carries the shared token-owner policy in
+    /// every way that matters, at the same address as Ethereum's Safe —
+    /// the canonical Safe proxy factory with the same initializer yields
+    /// the same CREATE2 address on both chains.
+    function testHyperEvmSafeMatchesSharedPolicy() external {
+        address hyperevmSafe = LibSafeInvariants.STOX_TOKEN_OWNER_SAFE_HYPEREVM;
+
+        vm.createSelectFork(LibStoxDeployNetworks.HYPEREVM);
+        LibSafeInvariants.assertTokenOwnerSafePolicy(IGnosisSafe(hyperevmSafe));
+    }
+}