# Install opengov-cli

cargo install --locked --force --git https://github.com/joepetrowski/opengov-cli
opengov-cli 

Note: even if you already have opengov-cli installed you'll likely need to update as the chains are upgraded

# Kusama

There's a custom build for asset hub due to an overly large wasm blob from the original release which would be rejected for a runtime upgrade.

## add invulnerables

we first want to add three invulnerables to shift the ratio of invuln to permissionless

0x28020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a

needs to be wrapped in an XCM transact from the relay to AH

0x630005000100a10f05082f0000060200a50128020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a

Chopsticks this

npx @acala-network/chopsticks@latest xcm -r kusama -p kusama-asset-hub

Dispatch this from root origin in the [relay js window](https://polkadot.js.org/apps/?rpc=ws://127.0.0.1:8001#/js):

const number = (await api.rpc.chain.getHeader()).number.toNumber()

await api.rpc('dev_setStorage', {
  scheduler: {
    agenda: [
      [
        [number + 1], [
          {
            call: {
              Inline: '0x630005000100a10f05082f0000060200a50128020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a'
            },
            origin: {
              system: 'Root'
            }
          }
        ]
      ]
    ]
  }
})
// Make a block to include the extrinsic
await api.rpc('dev_newBlock', { count: 1 })

Expect to see three invulnerables added and two candidates removed (SiK and Stakeworld are currently permissionless) and check the events in KAH:


All good.

## Create ref

### Build upgrade

❯ opengov-cli build-upgrade --network kusama --relay-version v1.9.1 --additional 0x630005000100a10f05082f0000060200a50128020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a

Downloading runtimes.

Downloading... kusama_runtime-v1009001.compact.compressed.wasm
Downloading... asset-hub-kusama_runtime-v1009001.compact.compressed.wasm
Downloading... encointer-kusama_runtime-v1009001.compact.compressed.wasm
Downloading... bridge-hub-kusama_runtime-v1009001.compact.compressed.wasm
Downloading... people-kusama_runtime-v1009001.compact.compressed.wasm
Downloading... coretime-kusama_runtime-v1009001.compact.compressed.wasm

Generating parachain authorization calls. The runtime hashes are logged if you would like to verify them with srtool.

Kusama Asset Hub Runtime Hash: 0x5a0e93172b7d4f2030a3a31c2f1aff1e170a323373a48f7f2bc44328872616fc
Kusama Encointer Runtime Hash: 0x6b75868e6339e38aa930b244c6cfe45d70401cefab67f8f2a072caf01065e5cd
Kusama Bridge Hub Runtime Hash: 0x27c8f6bfa077825468fe5ab289f7e127fe490205297a64015e07591e1f0d0138
Kusama People Runtime Hash: 0xfada7ce5ee54cdb3aae60c85f9dd72d03ee1538551a93327e876bc31b802841b
Kusama Coretime Runtime Hash: 0xdd8c6a036e0d1f6ddd1db804449222d7492e188c9531f41df611b17a71a3429f

Generating Relay Chain upgrade call. The runtime hash is logged if you would like to verify it with srtool.

Kusama Relay Chain Runtime Hash: 0x9bfa95446bff3c013666fd4c421cb0d8ce16b2e905a6589b58981876abf471d9

### Generate referendum calls

❯ opengov-cli submit-referendum \
          --proposal "./upgrade-kusama-1.9.1/kusama-1.9.1.call" \
          --network "kusama" --track "whitelistedcaller" --at 30406134

Submit the preimage for the Fellowship referendum:
https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fkusama-rpc.dwellir.com#/extrinsics/decode/0x2000882c006f7a8105912a1658724934de54ca4d58bf728e890b1f109356b93158cf17508d

Open a Fellowship referendum to whitelist the call:
https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fkusama-rpc.dwellir.com#/extrinsics/decode/0x17002b0f02f497ba5fd43b67613345245f16f206fef7e2a4d07c0153a93c7654213247025922000000010a000000

Submit the preimage for the public referendum:
https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fkusama-rpc.dwellir.com#/extrinsics/decode/0x2000ed062c0318041c630004000100a10f04082f000006028243473601108800095a0e93172b7d4f2030a3a31c2f1aff1e170a323373a48f7f2bc44328872616fc630004000100a50f04082f00000602030094357701208800096b75868e6339e38aa930b244c6cfe45d70401cefab67f8f2a072caf01065e5cd630004000100a90f04082f0000060202d88c36011088000927c8f6bfa077825468fe5ab289f7e127fe490205297a64015e07591e1f0d0138630004000100b10f04082f000006020210dd350110880009fada7ce5ee54cdb3aae60c85f9dd72d03ee1538551a93327e876bc31b802841b630004000100b50f04082f00000602422c99360110880009dd8c6a036e0d1f6ddd1db804449222d7492e188c9531f41df611b17a71a3429f630005000100a10f05082f0000060200a50128020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a00099bfa95446bff3c013666fd4c421cb0d8ce16b2e905a6589b58981876abf471d9

Open a public referendum to dispatch the call:
https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fkusama-rpc.dwellir.com#/extrinsics/decode/0x15002b0d02ba28e248f5ef201acd3605b04d7f824b84dec155567f0fab7dd35b0656adbafbbb01000000f6f5cf01

Batch to submit on Kusama Relay Chain:
https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fkusama-rpc.dwellir.com#/extrinsics/decode/0x1804102000882c006f7a8105912a1658724934de54ca4d58bf728e890b1f109356b93158cf17508d17002b0f02f497ba5fd43b67613345245f16f206fef7e2a4d07c0153a93c7654213247025922000000010a0000002000ed062c0318041c630004000100a10f04082f000006028243473601108800095a0e93172b7d4f2030a3a31c2f1aff1e170a323373a48f7f2bc44328872616fc630004000100a50f04082f00000602030094357701208800096b75868e6339e38aa930b244c6cfe45d70401cefab67f8f2a072caf01065e5cd630004000100a90f04082f0000060202d88c36011088000927c8f6bfa077825468fe5ab289f7e127fe490205297a64015e07591e1f0d0138630004000100b10f04082f000006020210dd350110880009fada7ce5ee54cdb3aae60c85f9dd72d03ee1538551a93327e876bc31b802841b630004000100b50f04082f00000602422c99360110880009dd8c6a036e0d1f6ddd1db804449222d7492e188c9531f41df611b17a71a3429f630005000100a10f05082f0000060200a50128020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a00099bfa95446bff3c013666fd4c421cb0d8ce16b2e905a6589b58981876abf471d915002b0d02ba28e248f5ef201acd3605b04d7f824b84dec155567f0fab7dd35b0656adbafbbb01000000f6f5cf01

## Test ref
We can fork the network with chopsticks and check that we can upgrade the chain without error.

npx @acala-network/chopsticks@latest xcm -r kusama -p kusama-asset-hub -p kusama-people -p kusama-coretime -p encointer-kusama -p kusama-bridge-hub

Upload the preimage for the referendum on localhost:8005 (kusama relay) using the call from opengov-cli
https://polkadot.js.org/apps/?rpc=ws://127.0.0.1:8005#/extrinsics/decode/0x2000ed062c0318041c630004000100a10f04082f000006028243473601108800095a0e93172b7d4f2030a3a31c2f1aff1e170a323373a48f7f2bc44328872616fc630004000100a50f04082f00000602030094357701208800096b75868e6339e38aa930b244c6cfe45d70401cefab67f8f2a072caf01065e5cd630004000100a90f04082f0000060202d88c36011088000927c8f6bfa077825468fe5ab289f7e127fe490205297a64015e07591e1f0d0138630004000100b10f04082f000006020210dd350110880009fada7ce5ee54cdb3aae60c85f9dd72d03ee1538551a93327e876bc31b802841b630004000100b50f04082f00000602422c99360110880009dd8c6a036e0d1f6ddd1db804449222d7492e188c9531f41df611b17a71a3429f630005000100a10f05082f0000060200a50128020c15056610a5024c2a5db3d02056d4344d120ec7be283100d71a6715f09275167e4f38150500c703a1cde92ffaf1f8312c1fdb3a81140f7e76789d55ae1f0683025c4286491505da9f7fd3d9612a68d2ead69dde53297b172b7db514d0d261e7c5be987df7f32a00099bfa95446bff3c013666fd4c421cb0d8ce16b2e905a6589b58981876abf471d9

Also upload the preimage for the fellowship whitelist on the relay using the call from opengov-cli
https://polkadot.js.org/apps/?rpc=ws://127.0.0.1:8005#/extrinsics/decode/0x2000882c006f7a8105912a1658724934de54ca4d58bf728e890b1f109356b93158cf17508d

Dispatch the whitelisted call from the fellows origin using the same Lookup hash and length from the fellowship referendum output by opengov-cli (check the referendum call to find the in the [js window](https://polkadot.js.org/apps/?rpc=ws://127.0.0.1:8005#/js):

// Grab the block number of the current head
// api is already imported, no need to add anything but the following.
const number = (await api.rpc.chain.getHeader()).number.toNumber()

// use chopsticks dev_setStorage to inject the call into the scheduler state for the next block.
await api.rpc('dev_setStorage', {
  scheduler: {
    agenda: [
      [
        [number + 1], [
          {
            call: {
              Lookup: {
                hash: '0xf497ba5fd43b67613345245f16f206fef7e2a4d07c0153a93c76542132470259',
                len: 34
              }
            },
            origin: {
              Origins: 'Fellows'
            }
          }
        ]
      ]
    ]
  }
})
// Make a block to include the extrinsic
await api.rpc('dev_newBlock', { count: 1 })

Dispatch the public referendum call manually from the whitelistedcaller origin in the [js window](https://polkadot.js.org/apps/?rpc=ws://127.0.0.1:8005#/js):

// Grab the block number of the current head
// api is already imported, no need to add anything but the following.
const number = (await api.rpc.chain.getHeader()).number.toNumber()

// use chopsticks dev_setStorage to inject the call into the scheduler state for the next block. The value of `Inline` is just the call data. Crucially with this call we can set the origin to `Root`
await api.rpc('dev_setStorage', {
  scheduler: {
    agenda: [
      [
        [number + 1], [
          {
            call: {
              Lookup: {
                hash: '0xba28e248f5ef201acd3605b04d7f824b84dec155567f0fab7dd35b0656adbafb',
                len: 443
              }
            },
            origin: {
              Origins: 'WhitelistedCaller'
            }
          }
        ]
      ]
    ]
  }
})
// Make a block to include the extrinsic
await api.rpc('dev_newBlock', { count: 1 })

Then check the `system->authorizedUpgrade` hash in state against the hash of the Kusama relay runtime in the fellows release. You should be able to upload with the `system->applyAuthorizedUpgrade` extrinsic and submit unsigned. You can also do this for all system parachains on localhost:{8000..8004} and upload the relevant wasm there

Asset hub:


we see the invulnerables being added and the permissionless removed, and the correct hash is in