docs(audits): add audits folder with report and index

[0xisk]

Types of changes

What types of changes does your code introduce to OpenZeppelin Midnight Contracts?
Put an `` in the boxes that apply

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation Update (if none of the other choices apply)

Fixes #531

PR Checklist

• I have read the Contributing Guide
• I have added tests that prove my fix is effective or that my feature works. See GUIDELINES.md#testing for more information.
• I have added documentation for new methods or changes to existing method behavior. See GUIDELINES.md#documentation for more information.
• CI Workflows Are Passing

Further comments

If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution you did and what alternatives you considered, etc...

Summary by CodeRabbit

• Documentation
  • Added audit log documentation detailing the May 2026 security audit for version v0.1.0, including auditor information, audit scope, and reference to audit findings and fixes.

[coderabbitai]

Walkthrough

This PR adds audit report documentation for version v0.1.0. A new audits/README.md file is created with a table entry for the May 2026 OpenZeppelin audit, including version, commit hash, auditor name, audit scope description, and a reference to the audit PDF. A note indicates where audit fix commits were merged.

Changes

Audit Report Documentation for v0.1.0

Layer / File(s)	Summary
Audit Log Entry for v0.1.0 audits/README.md	Introduces audit documentation with a table entry for the May 2026 OpenZeppelin audit of v0.1.0, including audit date, commit reference, auditor, scope, PDF link, and merge reference for audit fixes.

Estimated Code Review Effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A paper trail of care so keen,
Audits logged in May's green sheen,
OpenZeppelin's watchful eye,
Safety sealed, no need to sigh!
v0.1.0 stands proud and tall, 🏛️

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: adding an audits folder with documentation and an index of audit reports.
Linked Issues check	✅ Passed	The PR successfully adds the audit report for v0.1.0 as required by issue #531, including the May 2026 OpenZeppelin audit report and an index.
Out of Scope Changes check	✅ Passed	All changes are within scope: only documentation files (audits/README.md and audit report PDF) were added to fulfill the audit report requirement.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/add-audit-report

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

🧹 Nitpick comments (2)

audits/README.md (2)

5-5: 💤 Low value

Remove extra spacing in the version column.

There are two spaces after v0.1.0 in the version column, which appears to be unintentional formatting.

✨ Proposed fix

-| May 2026 | v0.1.0  | [`d8ee045`](https://github.com/OpenZeppelin/compact-contracts/tree/d8ee045)       | OpenZeppelin | Full library (access, security, token, utils) | [🔗](./2026-05-compact-contracts.pdf) |
+| May 2026 | v0.1.0 | [`d8ee045`](https://github.com/OpenZeppelin/compact-contracts/tree/d8ee045)       | OpenZeppelin | Full library (access, security, token, utils) | [🔗](./2026-05-compact-contracts.pdf) |

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@audits/README.md` at line 5, The version cell in the markdown table contains
an extra space after "v0.1.0" (string "v0.1.0  "); edit the row in
audits/README.md to remove the extra space so the cell reads "v0.1.0" (update
the table row containing "`v0.1.0  | [`d8ee045`]`" to "`v0.1.0 | [`d8ee045`]`").

---

5-5: ⚡ Quick win

Fix request: drop the missing-PDF concern; only a minor README table spacing cleanup remains

• ./2026-05-compact-contracts.pdf is present at audits/2026-05-compact-contracts.pdf.
• d8ee045 is a valid commit in the referenced repository.
• Table formatting has extra spacing after v0.1.0 (cosmetic).

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@audits/README.md` at line 5, Update the table row in audits/README.md to
remove the extra spacing after the version string (`v0.1.0`) and ensure the PDF
link uses the correct relative path (`audits/2026-05-compact-contracts.pdf`)
instead of `./2026-05-compact-contracts.pdf`; leave the commit reference
(`d8ee045`) unchanged and keep the rest of the row content intact.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@audits/README.md`:
- Line 5: The version cell in the markdown table contains an extra space after
"v0.1.0" (string "v0.1.0  "); edit the row in audits/README.md to remove the
extra space so the cell reads "v0.1.0" (update the table row containing "`v0.1.0
| [`d8ee045`]`" to "`v0.1.0 | [`d8ee045`]`").
- Line 5: Update the table row in audits/README.md to remove the extra spacing
after the version string (`v0.1.0`) and ensure the PDF link uses the correct
relative path (`audits/2026-05-compact-contracts.pdf`) instead of
`./2026-05-compact-contracts.pdf`; leave the commit reference (`d8ee045`)
unchanged and keep the rest of the row content intact.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 05f754f7-2f90-422e-9d06-8f164582cc4a

📥 Commits

Reviewing files that changed from the base of the PR and between 78a5c61 and f66583c.

⛔ Files ignored due to path filters (1)

• audits/2026-05-compact-contracts.pdf is excluded by !**/*.pdf

📒 Files selected for processing (1)

• audits/README.md

[pepebndc]

Approved