[Revinand]

Summary

• Safes can act as auditors: owners sign shares, and signer combine produces signed-result.json. For contract roles held by a Safe, the admin console exports Transaction Builder batches and checks permissions per contract.
• The console and API support partial and full burns against Minted records, including auditor packages, signed-result uploads and wallet submission. Burn accounting tracks reservations and remaining amounts; indexed Burned events update status.
• Optional Asset Profile legal descriptors cover wrapper type, issuer LEI, holder rights, hash-pinned redemption terms and rating references, and maturity date. The server and signer validate them; the console edits them and the investor app displays them.
• Server approvals support an optional cap on Allowed wallets and an operator-maintained sanctions list. KYC monitoring raises alerts by default, with automatic blocking available by configuration.

Upgrade the server and signer together before using legal; older versions reject it. Changing admin_address invalidates existing admin sessions after restart, and /auth/session now requires a nonce. MongoDB adds a burns collection and nonce-keyed admin challenges; old challenges expire through TTL. Holder caps and burn reservations are not coordinated across server replicas.