fix(contracts): cap fee_bps with a MAX_FEE_BPS sanity ceiling

README.md

@@ -441,9 +441,9 @@ not automated by anything in this repo's scripts today.
   that race requires a structural change (an atomic deploy+init
   constructor) rather than an in-contract check.
 - **Fee mechanics.** `fee_bps` is basis points (1/100 of a percent) out of
-  10000, validated `<= 10000` at `initialize`. It's deducted from the top
-  of every payout (`release`, `release_issue`, `withdraw`) before the
-  remainder is split among recipients — the treasury is paid in the same
+  10000, validated `<= MAX_FEE_BPS` (1000 = 10%) at `initialize`. It's
+  deducted from the top of every payout (`release`, `release_issue`,
+  `withdraw`) before the remainder is split among recipients — the treasury is paid in the same
   transaction as the recipients, so there's no separate "sweep fees"
   step that could be skipped.
 - **Replay / double-spend protection.** Every escrow/milestone-issue

contracts/escrow/src/lib.rs

@@ -57,7 +57,7 @@ impl EscrowContract {
         if env.storage().instance().has(&DataKey::Admin) {
             return Err(Error::AlreadyInitialized);
         }
-        if fee_bps as i128 > BPS_DENOMINATOR {
+        if fee_bps > MAX_FEE_BPS {
             return Err(Error::InvalidFee);
         }
         if treasury == env.current_contract_address() {

contracts/maintenance-pool/src/lib.rs

@@ -53,7 +53,7 @@ impl MaintenancePoolContract {
         if env.storage().instance().has(&DataKey::Admin) {
             return Err(Error::AlreadyInitialized);
         }
-        if fee_bps as i128 > BPS_DENOMINATOR {
+        if fee_bps > MAX_FEE_BPS {
             return Err(Error::InvalidFee);
         }
         if treasury == env.current_contract_address() {

contracts/milestones/src/lib.rs

@@ -60,7 +60,7 @@ impl MilestonesContract {
         if env.storage().instance().has(&DataKey::Admin) {
             return Err(Error::AlreadyInitialized);
         }
-        if fee_bps as i128 > BPS_DENOMINATOR {
+        if fee_bps > MAX_FEE_BPS {
             return Err(Error::InvalidFee);
         }
         if treasury == env.current_contract_address() {