Feature gate permissioned signer

[runtian-zhou]

Description

Adds support for permissioned signer functionality in the Aptos framework by introducing a new feature flag PERMISSIONED_SIGNER. This change enables controlled access to signer capabilities through permission checks. The implementation includes feature flag assertions in the permissioned signer module to ensure the feature is enabled before use.

How Has This Been Tested?

The feature flag implementation follows established patterns used for other feature flags in the system. Testing is enforced through the existing feature flag testing infrastructure.

Key Areas to Review

• Feature flag integration in permissioned_signer.move
• New permission checks added to signer_from_permissioned_handle and signer_from_storable_permissioned_handle
• Feature flag constant definition and helper functions in features.move

Type of Change

• New feature
• Aptos Framework

Which Components or Systems Does This Change Impact?

• Move/Aptos Virtual Machine
• Aptos Framework

Checklist

• I have read and followed the CONTRIBUTING doc
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation

[trunk-io]

⏱️ 35m total CI duration on this PR

Job	Cumulative Duration	Recent Runs
rust-move-tests	14m	🟩
rust-move-tests	13m	🟩
rust-cargo-deny	3m	🟩 🟩
check-dynamic-deps	2m	🟩 🟩
general-lints	58s	🟩 🟩
semgrep/ci	57s	🟩 🟩
file_change_determinator	32s	🟩 🟩
permission-check	10s	🟩 🟩
permission-check	6s	🟩 🟩
check-branch-prefix	1s	🟩

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}

[runtian-zhou]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• Add another flavor of permission api #15609
• Create object with permissioned signer #15707
• Feature gate permissioned signer #15622 👈 (View in Graphite)
• Create benchmark #14916
• permission for framework #14605
• add perimission checks to object #14582
• Add permission check to account #14535
• add permissions for fungible assets operation #14567
• create permissioned signer example #14469
• [feature] Add permissioned signer functionality #14521
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[graphite-app]

The feature flag name in the yaml should be permissionedSigner to match the enum variant defined in FeatureFlag. Feature flag names must match exactly between the yaml configuration and the enum definition to ensure proper functionality.

Spotted by Graphite Reviewer

Is this helpful? React 👍 or 👎 to let us know.