code/cl8y-wallet-security
Watch
4
0
Fork
You've already forked cl8y-wallet-security
 0
Code Issues 6 Pull requests 1 Projects Releases Packages 3 Wiki Activity

Specify optional delayed first-use recipients with routed-transfer coverage #7

New issue
Open
opened 2026-10-31 02:07:41 +00:00 by PlasticDigits · 0 comments
PlasticDigits commented 2026-10-31 02:07:41 +00:00
Owner

Research follow-up from code/cw20-mintable #8. Existing portal #2 already owns readable security-setting previews; this issue owns an additional opt-in recipient maturity policy, not a duplicate dashboard.

Acceptance:

  • Publish a threat model and exact enforcement location for delayed new recipients and delayed disabling/replacement, with independent old-channel notices and cancel-safe changes.
  • Distinguish UI address book from enforceable authorization. If enforcement is only UI, explicitly disclose direct-contract bypass; do not claim protected transfers.
  • Bind chain/token/recipient and actual final beneficiary for CW20 Send hooks, routers, bridges, contract recipients and delegated debits; unknown destination semantics refuse protected execution or require a documented reviewed route.
  • Preview exact amount, recipient, approvals, message/call scope and protection coverage using exact units; independent recipient check guidance and clear-signing support matrix. Never collect seed/private keys or imply Ledger defect.
  • Concrete compatibility examples for ordinary transfer, router and bridge; boundary/change/cancel checks scoped to implementation selected. No mandatory KYC for ordinary transfers.

Deliver design/acceptance first, coordinate any future contract ABI change with #5/#7; no unreviewed token changes or live deployment under this issue's research parent.

Research follow-up from code/cw20-mintable #8. Existing portal #2 already owns readable security-setting previews; this issue owns an additional opt-in recipient maturity policy, not a duplicate dashboard. Acceptance: - Publish a threat model and exact enforcement location for delayed new recipients and delayed disabling/replacement, with independent old-channel notices and cancel-safe changes. - Distinguish UI address book from enforceable authorization. If enforcement is only UI, explicitly disclose direct-contract bypass; do not claim protected transfers. - Bind chain/token/recipient and actual final beneficiary for CW20 Send hooks, routers, bridges, contract recipients and delegated debits; unknown destination semantics refuse protected execution or require a documented reviewed route. - Preview exact amount, recipient, approvals, message/call scope and protection coverage using exact units; independent recipient check guidance and clear-signing support matrix. Never collect seed/private keys or imply Ledger defect. - Concrete compatibility examples for ordinary transfer, router and bridge; boundary/change/cancel checks scoped to implementation selected. No mandatory KYC for ordinary transfers. Deliver design/acceptance first, coordinate any future contract ABI change with #5/#7; no unreviewed token changes or live deployment under this issue's research parent.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
ops/shared-ops-telegram
ops/offhost-continuation-native-20261101
bb/portal-coolify-isolated-deployment-and-receipts-thr_tj2burwn8b
ops/provider-runtime-release
ops/offhost-backup-proof-20261101
bb/portal-mail-gateway-thr_ywz2dcyd3p
renovate/configure
ops/sealer-runtime-evidence
ops/isolated-backup-sealer
ops/portal-key-and-wallet-evidence
bb/portal-typescript-ui-and-wallet-signing-thr_yc2yevrgcw
bb/portal-notification-provider-enrollment-and-acti-thr_ywz2dcyd3p
ops/portal-runtime-receipts
bb/wallet-security-portal-rust-typescript-postgresq-thr_wur9hgwhec
portal-runtime-hook-b8aa303
portal-profile-launch-e44569e
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
PlasticDigits
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/cl8y-wallet-security#7
No description provided.