update safe call filter

[xlc]

For Acala liquid crowdloan DOT redemption, we need to XCM transact with proxy.proxy to control the crowdloan vault account, which is a pure proxy.

The complexity of all the proxy call is O(1) + n whereas n is the complexity of the inner call. The filter is applied to inner call as well and therefore it is safe to whitelist proxy calls.

In additional to that, I synchronized the filters between Kusama and Polkadot just so they are as similar as possible. We had enough issues caused by mismatch behaivour in those runtimes and I want to reduce the surprising factor.

Changes:

• Add proxy to both Kusama and Polkadot.
• Add whitelist_call to Kusama. This is already included in Polkadot.
• Remove Gov1 related call from Polkadot. They are abstained in Kusama.
• Add OpenGov related call to Polkadot. They are included in Kusama.

[ggwpez]

The docs of this filter state:

/// 2. Cannot lead to another call being made;

I guess in this case it should be fine since the proxy pallet routes all calls through this filter again?

/// 3. Have a defined proof size weight, e.g. no unbounded vecs in call parameters.

Proxy::proxy does accept call: Box<<T as Config>::RuntimeCall>, so this is not given.

[KiChjang]

Yes, but we actually still allow Utility::as_derivative which is an extrinsic that itself contains a Call, in order to allow use cases on both Moonbeam and Acala to still work as intended, so allowing Proxy::proxy is also based on the same logic.

In principle however, the 2nd rule may not be necessary, as it's impossible to create an infinitely recursive extrinsic call -- the chain would have thrown an error during decoding as there is a max decoding depth of 10 in the SCALE codec.

[KiChjang]

bot merge