Skip to content

Session keys with capability scoping #237

@Miracle656

Description

@Miracle656

Background

A scoped key that can only invoke transfer(asset=USDC) for X hours enables agents and bots.

What to build

Store an ACL per session key (target contract, function selector, amount cap, expiry). Enforce in __check_auth.

Key files

  • contracts/wallet/src/session_key.rs (new)

Acceptance criteria

  • ACL fields enforced
  • Expired key rejected
  • Tests for each ACL field

Drips Wave · Complexity: Advanced · 200 points

Metadata

Metadata

Assignees

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions