feat: add contract execution policy, audit trails, and witness validation - #537
Merged
Just-Bamford merged 1 commit intoAug 30, 2026
Merged
Conversation
…it trail, and witness validation - Add ContractCallExecutionPolicy with timeout, abort signal, and recovery strategies (Sorokit#509) - Add key rotation audit tracking with history query and suspicious pattern detection (Sorokit#511) - Add contract invocation audit trail with query, pagination, and JSON/CSV export (Sorokit#516) - Add transaction witness validation for multi-signature verification (Sorokit#510)
|
@oomokaro1 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits. You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #509, Closes #511, Closes #516, Closes #510
Type of Change
Summary
This PR adds four new features to the Sorokit SDK:
Contract Call Execution Policy (Implement contract call timeout, cancellation, and recovery controls #509) - Adds
withExecutionPolicy()for configurable timeouts, AbortSignal support, and recovery strategies (fail/retry/cache/fallback) for contract calls.Key Rotation Audit (Implement account key rotation auditing and historical security tracking #511) - Adds
recordKeyRotation(),getKeyRotationHistory(), anddetectSuspiciousRotationPattern()for tracking and auditing account key rotation events.Contract Audit Trail (Implement Soroban contract audit trail with query and export capabilities #516) - Adds
recordContractInvocation(),queryContractAuditLog(), and export utilities (JSON/CSV) for structured contract invocation audit logging.Transaction Witness Validation (Implement transaction witness validation and multi-signature verification #510) - Adds
verifyTransactionSignatures()for cryptographic signature verification with multi-signature threshold support.Motivation / Context
These features address security, compliance, and reliability requirements:
All features include comprehensive tests and are exported through the main SDK entry point.
Closes #509, Closes #511, Closes #516, Closes #510