Migrate multicast group allowlist into AccessPass for scalable subscription and publication

[juan-malbeclabs]

Currently, multicast groups rely on an allowlist to manage which users can subscribe and publish. This approach does not scale well, as the allowlist has limitations in both size and maintainability.

To improve scalability and align multicast access control with the existing DoubleZero model, we will migrate the multicast group allowlist into the AccessPass system. This ensures consistent account-based access control, leverages existing validation mechanisms, and provides a path for future extensibility (e.g., integration with Passport and Revenue Distribution).

Goals

• Replace the static allowlist mechanism in multicast groups with AccessPass authorization.
• Ensure that both subscription and publication are managed via AccessPass.
• Maintain compatibility with current user flows during migration.
• Validate correctness through unit and e2e tests.

Acceptance Criteria

• Multicast subscription is authorized using AccessPass.
• Multicast publication is authorized using AccessPass.
• Legacy allowlist logic is removed from the smart contract.
• Updated unit tests cover AccessPass authorization logic.
• e2e tests verify subscription and publication flows at scale.

Notes

• This change is a prerequisite for scaling beyond current allowlist limits.
• Owners of multicast groups (e.g., Jito or similar entities) will continue to manage who can publish, but through AccessPass accounts rather than static lists.