Merge branch 'governor_limit_lowering_aug_2024' of https://github.com…

…/wormhole-foundation/wormhole into governor_limit_lowering_aug_2024

node/pkg/processor/message.go

@@ -95,6 +95,10 @@ func (p *Processor) handleMessage(k *common.MessagePublication) {
 	// Broadcast the signature.
 	ourObs, msg := p.broadcastSignature(v.MessageID(), k.TxHash.Bytes(), digest, signature, shouldPublishImmediately)
 
+	// Indicate that we observed this one.
+	observationsReceivedTotal.Inc()
+	observationsReceivedByGuardianAddressTotal.WithLabelValues(p.ourAddr.Hex()).Inc()
+
 	// Get / create our state entry.
 	s := p.state.signatures[hash]
 	if s == nil {

whitepapers/0009_guardian_key.md

@@ -14,10 +14,16 @@ The Guardian Key is used to:
 
 1. Sign gossip messages
    1. heartbeat
-   2. governor config and governor status
-   3. observation request
-2. Sign Observations
+   1. governor config and governor status
+   1. observation request
+1. Sign Observations
    1. Version 1 VAAs
+1. Sign Guardian identification
+   1. Wormchain account registration
+1. Sign Accountant observations
+   1. Token Bridge
+   1. NTT
+1. Sign Query responses
 
 ## Detailed Design
 
@@ -35,3 +41,24 @@ Rationale
 
 - Gossip messages cannot be confused with other gossip messages because the message type prefix is prepended.
 - Gossip messages cannot be confused with observations because observations utilize a double-Keccak256 and the payload is enforced to be `>=34` bytes.
+
+## Prefixes Used
+
+<!-- cspell:disable -->
+
+```go
+acct_sub_obsfig_000000000000000000| // token bridge accountant observation
+ntt_acct_sub_obsfig_00000000000000| // ntt accountant observation
+governor_config_000000000000000000| // gossip governor config
+governor_status_000000000000000000| // gossip governor status
+heartbeat|                          // gossip heartbeat
+signed_observation_request|         // gossip signed observation request
+mainnet_query_request_000000000000| // query request (mainnet, not signed by guardian)
+testnet_query_request_000000000000| // query request (testnet, not signed by guardian)
+devnet_query_request_0000000000000| // query request (devnet, not signed by guardian)
+query_response_0000000000000000000| // query response
+query_response_0000000000000000000| // query response
+signed_wormchain_address_00000000|  // wormchain register account as guardian
+```
+
+<!-- cspell:enable -->