feat: Add Task Template for Switching Base to a Permissioned Game and Retiring Existing Dispute Games

[jjtny1]

This PR introduces a way for us to switch base to a permissioned game and retire existing dispute games.

This will require signatures from the OP security council

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/2	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 2 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 2 2 1 if commit is unverified 0 Sum 2

[jackchuma]

Can you update the root readme with instructions on using this template similar to how the other templates are introduced?

[jackchuma]

It'd be ideal if this could integrate with the task signer tool as well. Can see an example here: https://github.com/base/contract-deployments/tree/jack/task-signer-tool-demo/mainnet/2025-11-03-test-upgrade

[leopoldjoy]

There must be an empty validations/ directory added to the root of this task sub-directory, otherwise this error occurs when running make gen-validation:

119 |   const sdc = new StateDiffClient();
120 |   const { result } = await sdc.simulate(opts.rpcUrl, forgeCmdParts, workdir);
121 | 
122 |   if (opts.out) {
123 |     const outPath = path.resolve(process.cwd(), opts.out);
124 |     writeFileSync(outPath, JSON.stringify(result, null, 2) + '\n');
          ^
ENOENT: no such file or directory, open '/Users/user/contract-deployments/mainnet/2025-11-07-switch-to-permissioned-game/validations/op-signer.json'
    path: "/Users/user/contract-deployments/mainnet/2025-11-07-switch-to-permissioned-game/validations/op-signer.json",
 syscall: "open",
   errno: -2,
    code: "ENOENT"

      at main (/Users/user/contract-deployments/mainnet/2025-11-07-switch-to-permissioned-game/signer-tool/scripts/genValidationFile.ts:124:5)

Suggested change

	cd $(SIGNER_TOOL_PATH); \
	mkdir validations; \
	cd $(SIGNER_TOOL_PATH); \

[leopoldjoy]

Lines 19 and 20 need to switch order (as in my example above), since the validations/ sub-directory must exist at the task's root.

Approved review 3428335944 from jackchuma is now dismissed due to new commit. Re-request for approval.

[leopoldjoy]

Suggested change

	1. Run `mmake setup-switch-to-permissioned-game network=<network>` and go to the folder that was created by this command.
	1. Run `make setup-switch-to-permissioned-game network=<network>` and go to the folder that was created by this command.

[leopoldjoy]

Suggested change

	### 4. Send signature to facilitator
	### 4. Send signature to facilitator
	You may now kill the Signer Tool process in your terminal window by running `Ctrl + C`.

[leopoldjoy]

Lines 19 and 20 need to switch order (as in my example above), since the validations/ sub-directory must exist at the task's root.

[leopoldjoy]

Since we already created the RPC_URL variable in this file:

Suggested change

	bun run scripts/genValidationFile.ts --rpc-url $(L1_RPC_URL) \
	--workdir .. --forge-cmd 'forge script --rpc-url $(L1_RPC_URL) \
	bun run scripts/genValidationFile.ts --rpc-url $(RPC_URL) \
	--workdir .. --forge-cmd 'forge script --rpc-url $(RPC_URL) \

[leopoldjoy]

Where is this EXPECTED_VERSION variable used?