For all except spawn, we can infer one of the ship arguments to be the
"from" ship. This reduces repetition in the batches, which shortens txs
by 4 bytes each (except spawn), and eliminates the need to assert the
same ship is used in both places.
To prevent replay across chains, eg from ropsten to mainnet.
Additionally, this introduces a version number, so we won't have to
worry about future signature formats being accidentally compatible with
this one.
Also switches everything to ropsten by default, including ivory pill.
Batches work on ropsten now.
Also adds +tx as a hacky development tool to create text for metamask to
sign and then turn that into a batch. A useful reference for bridge and
aggregator work.
Before this change, signatures were verified according to the owners at
the beginning of batch, which is wrong. Now we do it per wrap, but this
is *also* wrong because they should actually be verified per tx, in case
the owner changes within a wrap.
Also introduces the roll/wrap terminology.
Pull-hook side of the previous change to push-hook
(479fbfd798). Noop on unsupported
unversioned marks, waiting for the publisher to upgrade and kick. Same
tradeoffs as previous change apply.
Mainnet is currently experiencing undue load due to a watch-kick loop.
If the watch is unsupported, it will be kicked due to a mark mismatch,
which will be interpreted by the unversioned hooks as a network pressure
kick, prompting a resub and continuing the loop. Instead, we now no-op
on unversioned, unsupported watches, waiting for the subscriber to
rewatch after it processes the versioning OTA. This will silently break
groups for the subscriber until the reach the latest OTA, but is
preferable to nacking, and kicking them permanently
