fix(approvals): correctness + tighter gates + bindings v0.11.1 (#121)

Two correctness fixes on the unified `approveService(ApprovalParams)`
entrypoint, plus the bindings regen that exposes them.

ServicesApprovals.sol
- TEE root SSTORE is now gated on `p.teeCommitments.length > 0` directly,
  not on `keccak256(...) != bytes32(0)`. The prior gate relied on the
  cryptographic property "any non-empty hash is non-zero" instead of the
  shape we actually mean. Functionally equivalent today, theoretically
  brittle, harder to read.
- `effectiveStakingPercent` now mirrors what was actually committed,
  including the auto-fill case. Previously, when an operator omitted
  commitments and the contract auto-filled at the default-TNT
  requirement's `minExposureBps`, the manager hook still received `100`.
  It now receives `requirements[0].minExposureBps / 100`.
- Cached `hasTeeCommitments` / `registeringBls` booleans up front so the
  whole function reads off explicit shape rather than recomputing.

MockBSM + ServicesApprovalTest
- MockBSM_V1 records `approveStakingPercent[requestId][operator]` so the
  manager-hook stakingPercent value is observable in tests (it had no
  coverage at all before — the existing tests asserted call counts only).
- Two regression tests pin the manager-hook value:
  - `test_managerStakingPercent_reflectsAutoFilledDefault` (the bug fix)
  - `test_managerStakingPercent_reflectsSuppliedCommitment` (counterpart)

bindings v0.11.1
- Cargo.toml bumped 0.11.0 → 0.11.1
- CHANGELOG documents both fixes plus the storage-layout note (greenfield
  N/A) and the Rust API breaking change (`approve_service(request_id)`
  lost its `restaking_percent` arg in 0.11.0; surfaced louder here).
- Full regen against tnt-core HEAD (95323ea, includes #118 slashing fixes).

Verification
- `forge test --match-contract ServicesApprovalTest` — 17/17 ✅
- The new test FAILS without the `effectiveStakingPercent` fix (asserts
  10 != 100), confirming it actually catches the regression.

Author: drewstone

Cargo.lock

@@ -7,6 +7,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.11.1] - 2026-05-05
+
+### Fixed
+
+- `approveService` correctness: the TEE root SSTORE is now gated on
+  `p.teeCommitments.length > 0` directly, not on `keccak256(...) != bytes32(0)`.
+  The prior gate relied on cryptographic happenstance (any empty hash being
+  non-zero) instead of input shape, which is the property we actually mean.
+- `approveService` manager-hook fidelity: when an operator approves a request
+  with the protocol-default TNT requirement and supplies no explicit
+  commitments, the contract auto-fills at the requirement's `minExposureBps`.
+  The `IBlueprintServiceManager.onApprove` hook now receives the value that
+  was actually committed (`minExposureBps / 100`), not the prior `100`
+  fallback. New tests in `ServicesApprovalTest` (`test_managerStakingPercent_*`)
+  pin this behavior.
+
+### Notes
+
+- Storage layout: `_serviceTeeCommitments` mapping (legacy
+  `TeeAttestationCommitment[]` value) was retired in 0.11.0 in favor of
+  `_serviceTeeCommitmentRoot` (`bytes32` value). Same head-slot count, different
+  shape at keyed slots — safe for greenfield deploys; live-proxy upgrades would
+  require explicit migration of orphaned data, which is N/A pre-mainnet.
+- Rust API: `TangleClient::approve_service(request_id)` lost its
+  `restaking_percent: u8` parameter at 0.11.0 because the contract derives the
+  effective exposure on-chain. Direct callers of the convenience method on
+  `tangle-tools-clients-tangle` must drop the second argument; the unified
+  builder `approve_service_with_params(ApprovalParams)` is also available.
+
 ## [0.11.0] - 2026-05-05
 
 ### Changed (BREAKING)
@@ -268,7 +297,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Raw ABI JSON exports via `abi` module
 - `TNT_CORE_VERSION` constant for commit tracking
 
-[Unreleased]: https://github.com/tangle-network/tnt-core/compare/bindings-v0.10.9...HEAD
+[Unreleased]: https://github.com/tangle-network/tnt-core/compare/bindings-v0.11.1...HEAD
+[0.11.1]: https://github.com/tangle-network/tnt-core/compare/bindings-v0.11.0...bindings-v0.11.1
+[0.11.0]: https://github.com/tangle-network/tnt-core/compare/bindings-v0.10.9...bindings-v0.11.0
 [0.1.0]: https://github.com/tangle-network/tnt-core/releases/tag/bindings-v0.1.0
 [0.4.1]: https://github.com/tangle-network/tnt-core/compare/bindings-v0.4.0...bindings-v0.4.1
 [0.4.2]: https://github.com/tangle-network/tnt-core/compare/bindings-v0.4.1...bindings-v0.4.2

bindings/CHANGELOG.md

@@ -1,6 +1,6 @@
 [package]
 name = "tnt-core-bindings"
-version = "0.11.0"
+version = "0.11.1"
 edition = "2021"
 rust-version = "1.81"
 description = "Rust bindings for TNT Core Solidity contracts (Tangle staking protocol)"

bindings/Cargo.toml

@@ -1 +1 @@
-5c28b2584adca992067a2b0fe695be61806086b0
+95323ea3c3973a48df48a8a9b4dafd9b0ddc380a