docs(exposure-seam): record O1-a on-chain execute-approval gate (code-landed dormant, live in Slice-1b)#32
Merged
Merged
Conversation
…-landed dormant, live in Slice-1b) The arbitrary-tx handle (core #72) removed the un-gated PreviewSend/ExecuteSend; the only on-chain execute path is ExecuteTransaction, fail-closed unless it carries a valid user approval bound to preview_id (transitively to the immutable signed bytes), verified before the signer and before the one-shot take. Prod ships no issuer -> always rejects; the accept path is under an off-by-default test-approval feature and a CI guard proves the release binary lacks the literal rustok-test-approval: (durable invariant). The issuer is the initData approval channel = Slice-1b (the un-gate). Scope: this is the on-chain execute surface; O1's 'approval code-gate on the decoded order' (off-chain swap-SIGN via request_swap -> SignTypedData over the UniswapX order) is a separate, not-yet-built surface (lock #2). Cross-link in lock #1 disambiguated to match. Also: preview simulation extended to revert tri-state + 7-variant decode with explicit field presence (B1, core #73).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Docs-only. Records the durable threat-record fact before entering the dangerous Slice-1b: the on-chain execute-approval code-gate is code-landed but dormant.
What
docs/EXPOSURE-SEAM.mdafter the "Three F5 locks" block: On-chain execute-approval code-gate (O1-a) — CODE-LANDED in Slice-1, fail-closed-DISABLED.ExecuteTransactionis the only on-chain execute path; rejects fail-closed unless it carries a valid user approval bound topreview_id, verified before the signer and before the one-shot take.test-approvalfeature; CI guard proves the release binary lacks the literalrustok-test-approval:(durable invariant;approval-guardjob = current mechanism).initDataapproval channel = Slice-1b (the un-gate).request_swap→SignTypedDataover the UniswapX order) is a separate, not-yet-built surface (lock docs: standards map and v1 codebase analysis #2). Cross-link in lock ci: hardened CI/CD with best practices #1 updated to match.core#73).Anchors
Facts verified against merged
core#72 (482251b) +core#73 (77fc225).Scope
docs-only, 1 file (+27/−2). No code. Meta CI (
validate) touches compose/Caddyfile/observability only — unaffected.