[Audit L-03] Core runtime bytecode has dangerously little release headroom

[hmzakhalid]

Finding

Severity: Low

Confirmed against baseline commit d4277510d. Several core contracts were close to the EIP-170 runtime limit, leaving future releases vulnerable to becoming undeployable without an enforced budget.

Full audit report

Required remediation

Add an exact-build runtime-size budget and CI gate for the core contracts, retaining explicit EIP-170 headroom.

The dedicated fixing commit and remediation PR will be linked in a follow-up comment.

[hmzakhalid]

Fixed by commit fce545f487a2e35a8c65d974f0abde3dd4a37dd0 in PR #1727.

[hmzakhalid]

Supersedes the earlier remediation reference after the cleanup of PR #1727. Fixed by commit b87c6d8 (L-03): CI enforces the runtime bytecode budget for core contracts.

[hmzakhalid]

Confirmed fixed in final commit 6983f8f. CI now enforces the EIP-170 budget; the reviewed build leaves Interfold at 24,058 runtime bytes (518 bytes headroom).

[hmzakhalid]

Final remediation in PR #1727: 6983f8f enforces the core contract runtime-size budget in CI.