Skip to content

feat(covenantsigner): HTTP issuer for SignerApprovalCertificate - #4235

Open
lionakhnazarov wants to merge 1 commit into
threshold-network:feat/covenant-eip712-eth-legfrom
lionakhnazarov:feat/signer-approval-cert-issuer
Open

feat(covenantsigner): HTTP issuer for SignerApprovalCertificate#4235
lionakhnazarov wants to merge 1 commit into
threshold-network:feat/covenant-eip712-eth-legfrom
lionakhnazarov:feat/signer-approval-cert-issuer

Conversation

@lionakhnazarov

Copy link
Copy Markdown
Collaborator

Summary

  • Stacked on feat(covenantsigner): wallet-signed EIP-712 approvals + cooperative REDEEM/RENEW #4169: expose POST /v1/admin/signer-approval-certificates so operators can obtain a real v2 SignerApprovalCertificate for live Submit.
  • Reuses existing threshold-signing issuance (issueSignerApprovalCertificate); request binds walletPublicKeyHash + approvalDigest + endBlock (digest must match the job’s artifact-approval payload).
  • Auth / rate-limit / 5-minute timeout match submit; engines without the issuer interface return 501.

Test plan

  • go test ./pkg/covenantsigner/ -run 'TestServerIssuesSignerApprovalCertificate|TestServerReturns501|TestServerRequiresBearerTokenForCertificateIssuer|TestServerRejectsUnknownFieldsOnCertificateIssuer|TestServerRejectsInvalidCertificateIssuerInput'
  • go test ./pkg/tbtc/ -run 'TestCovenantSignerEngineIssueSignerApprovalCertificate'
  • Sepolia smoke: issue cert for wallet 0x12b3fd… with a real VBA approval digest → Submit REDEEM → Poll; observe whether other ops join the signing round

Made with Cursor

@coderabbitai

coderabbitai Bot commented Aug 7, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 62f0ae3e-2a38-4bde-98aa-7821a54c354f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@lionakhnazarov
lionakhnazarov force-pushed the feat/signer-approval-cert-issuer branch 2 times, most recently from 15fe2ac to 43b0f7c Compare August 7, 2026 09:37
Operators need a production path to obtain the v2 threshold-signed
permission slip that live Submit already requires. Wire the existing
issueSignerApprovalCertificate path through POST
/v1/admin/signer-approval-certificates on top of threshold-network#4169.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant