**8 issues found** across 54 files

Prompt for AI agents (unresolved issues)

```text Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately. P1: Seed length validation is hardcoded to `MLDSA65.SEED_LENGTH` (32 bytes) but FN-DSA and SLH-DSA require 48-byte seeds. A witness configured with `pqScheme = FN_DSA` or `SLH_DSA` will fail to start because its valid 96-hex-char seed gets rejected here. The validation should derive the expected length from the configured `pqScheme` (or accept a scheme parameter). P2: Redundant `computeRawHash(transaction)` call: the txid is already computed in `validateStructuredSignature` (line 737) and should be passed as a parameter to `ephemeralPreVerifyChecks` rather than recomputed. This adds an unnecessary SHA-256 hash per ephemeral witness on the transaction validation hot path. P2: The new PQ constants are currently unused and duplicate existing authoritative constants in crypto/capsule classes, creating a second source of truth. P1: Add fork-version gating for the new PQ proposal IDs; they currently bypass activation checks used by other recently added governance params. P2: The added committee config hint uses deprecated key `allowMlDsa`; update it to the current per-scheme keys to avoid operator misconfiguration. P2: Don't swallow unrelated exceptions here; the test can pass without exercising the create-account cap check. P2: `expectedPublicKeyLength` duplicates `PqSignatureRegistry.getPublicKeyLength`; use the registry as the single source of truth. If a new scheme is added to the registry but not to this switch, valid keys will be rejected. Replace the manual switch with a `PqSignatureRegistry.contains` + `getPublicKeyLength` call. (Based on your team's feedback about treating the registry as the single source of truth for allowed schemes.) [FEEDBACK_USED] P2: This stateful test class should not extend `BaseTest`; use `BaseMethodTest` so each test gets an isolated context. ```

_{Reply with feedback, questions, or to request a fix. Tag `@cubic-dev-ai` to re-run a review.}