Skip to content

Validate role-tagged covenant approvals#3890

Merged
mswilkison merged 1 commit intofeat/psbt-covenant-final-project-prfrom
codex/psbt-covenant-approval-envelope
Mar 13, 2026
Merged

Validate role-tagged covenant approvals#3890
mswilkison merged 1 commit intofeat/psbt-covenant-final-project-prfrom
codex/psbt-covenant-approval-envelope

Conversation

@mswilkison
Copy link

Summary

  • add optional role-tagged artifact approval envelopes to covenant signer requests
  • validate approval payload bindings and required roles by route while keeping legacy artifact signature arrays as the active compatibility contract
  • add focused tests for acceptance, rejection paths, and legacy-array mismatch handling

Testing

  • go test ./pkg/covenantsigner
  • go test ./pkg/tbtc -run CovenantSigner -count=1

Notes

  • stacked on top of codex/psbt-covenant-signer-hardening
  • this is the structural validation slice only; it does not add cryptographic verification of the approvals yet

@mswilkison mswilkison changed the base branch from codex/psbt-covenant-signer-hardening to feat/psbt-covenant-final-project-pr March 12, 2026 16:40
@mswilkison mswilkison force-pushed the codex/psbt-covenant-approval-envelope branch from 54f1297 to a246ad0 Compare March 12, 2026 16:41
@mswilkison mswilkison merged commit 7d4beff into feat/psbt-covenant-final-project-pr Mar 13, 2026
15 checks passed
mswilkison added a commit that referenced this pull request Mar 13, 2026
## Summary
- normalize covenant signer requests before digesting and storing them
- canonicalize artifact approval order and derived legacy signatures
when approvals are present
- add regressions proving equivalent request variants hash the same,
poll successfully, and persist in canonical form

## Testing
- go test ./pkg/covenantsigner
- go test ./pkg/tbtc -run CovenantSigner -count=1

## Notes
- stacked on top of #3890
- this keeps submit/poll matching semantic for approval envelopes
without changing the cryptographic verification model
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant