[DOCS] Mainnet TaskManager address and the ACL grant trust model

[haimbj1]

Fixes two issues from external feedback on the docs.

1. Wrong TaskManager address on mainnet (bug).
verify-commitments gave the testnet TaskManager as "the same address on every supported chain".
That address has no code on Ethereum or Arbitrum One.

• The table now gives the CoFHEAddressBook address, which is the same on every chain. getTm(1) returns that chain's TaskManager.

• The cast example reads the TaskManager from the address book, as FHE.sol does. To use another chain, the reader changes only RPC.

• task-manager says how to find the TaskManager: getTm(1) on the address book. It also tells readers not to hard-code the address.

• overview lists the CoFHEAddressBook with the other onchain contracts.

2. Missing trust model for grants (docs gap).
The docs did not say what a contract can do with a handle it has access to.

• New short section in access-control: access is full access, so pass a handle only to a contract you trust.
• Replaced the "Clean Up When Possible" card. It suggested revoking grants, and the ACL has no revoke.
• acl (Deep Dive) links its grant tiers to the new section.

Checked against cofhe-contracts ACL.sol and onchain eth_getCode.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
fhenix	🟢 Ready	View Preview	Oct 13, 2026, 2:04 PM