Repository navigation
Conversation
Collaborator
File
|
…, owner-only, reportHash excludes detail; reference implementation is live
…ller, delegate-unbounded-outflow, delegate-authorizations), not read never false (review: it44)
…t itself and its signature are not another caller); delegate-authorizations reports sameSender and distinctAuthorities (review: it44)
…tober authorizations case), by it44
…n order, in subjectDigest); address.delegation {before, after}; delegate findings read the code after the list, not read when a source cannot apply it, independent of revert (review: Revinand)
abcoathup
reviewed
Nov 1, 2026
abcoathup
reviewed
Nov 1, 2026
abcoathup
reviewed
Nov 2, 2026
…registration-file example formatting; add it44's Foundry delegate vectors to assets/erc-8481 (MIT); delegate-unbounded-outflow is per call, not a bound on total outflow (review: abcoathup, it44)
soli0x
changed the title
This was referenced Nov 2, 2026
Author
|
The HTMLProofer failure looks like a stale Jekyll cache rather than this PR: it flags all.html and erc.html linking to /EIPS/eip-draft_agent_presign_risk_report, which was this file's name before the number was assigned. Nothing in the PR links there; the incremental build restored _site from an earlier run of this PR and did not regenerate the index pages. Could an editor clear the Jekyll cache for this PR or rerun it with a full build? Thanks. |
…f the anchoring (last registry block at or before it, cross-chain), revoked or stolen keys do not erase anchored reports, signers SHOULD sit in a content-addressed registration file (review: douglasborthwick-cry)
eip-review-bot
changed the title
… the anchoring block (same block as step 3); no archive state = not read, not unsigned; test case for a contract signer that rotates its key (review: ted0x)
…ash, matching, diffs) Vectors for the 1810662 list document: account normalization (EVM lowercase hex, bech32 lowercase, base58 exact, CAIP-10 with eip155:*), keccak256 of the RFC 8785 bytes after normalize, sort and dedupe, matching and value as the matching entry or null, not read unavailable/unsupported, conformance with attestation, and diffs between list versions. Includes the FBI 31 Oct 2026 TraderTraitor list as one attested document. Python 3 checker, standard library only. CC0-1.0.
…HOULD), duplicates with different content and invalid accounts (bad EIP-55, mixed-case bech32, leading-zero chain ref) do not conform, exact chain ref wins when two entries match, value is the normalized entry, non-conforming list reads unavailable, extra fields hashed and ignored, criteria verbatim (review: runeclaw)
ERC-8481 assets: on-list list document vectors
eip-review-bot
changed the title
Six of the 7 open cases now follow the draft at 9abaacf: bad EIP-55 checksum, 0X prefix, eip155:01, duplicate account with different content, two entries matching (exact chain reference wins) and a non-conforming list (reads unavailable). The empty list is not ruled in 9abaacf and stays our call (basis: reference, conforms). Also fixes the bad-checksum input of the first version, which was a valid EIP-55 address. No existing hash changes.
…namespaces compared as written; the upstream document hash records what was read (review: runeclaw)
ERC-8481 assets: on-list vectors follow 9abaacf
|
The commit ad9172d (as a parent of 99bc324) contains errors. |
…ncoding, other namespaces as written, document hash fixtures)
…emaining choices)
…58Check is invalid (review: runeclaw)
ERC-8481 assets: vectors follow d21f46e
eip-review-bot
changed the title
…e hashes) so the PR is not classed as a website change
eip-review-bot
changed the title
…ovals (review: Revinand)
…oval-change), intent.match, simulation evidence, call entity; a failed simulation is not read
…x classes from a published pattern set), agent.card and payment.description text fields, test case
Author
|
all checks pass and every review comment is applied. ready for an editor review whenever you have time, thanks |
Author
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds ERC-8481: Agent Pre-Sign Risk Report.
The report a risk source returns about a prepared, not yet signed, transaction or signature request, so an AI agent, a wallet or a policy engine can read it before signing. It binds to the exact request by a digest (including an EIP-7702 authorization list), names its source by an ERC-8004 identity, is EIP-712 signed, and carries typed findings in five groups: tokens (incl. Token Launch Observations readings, copies of an issuer's listed tokens, a pool's deviation from a price feed), approvals, addresses (incl. EIP-7702 delegate facts), payments (x402 payee verification outcomes) and text the agent read. Every finding states its block and evidence and is read or not read, never a silent zero. No score, no verdict: the consumer applies its own policy. It fits the consumer-filled
riskslot of the Prepared Transaction Envelope proposal.assets/erc-8481/IPresignReportAnchor.solandPresignReportAnchor.sol(by ted0x), a minimal anchor that records a report's hash with the block time, so a source's past reports stay attributable after it rotates keys.assets/erc-8481/, contributed in the discussion and run before merging):PreSignDelegateVectors.t.sol(MIT, by it44): Foundry tests for the EIP-7702 delegate findings, including the deployed code of a real Ethereum sweeper delegate.PresignReportAnchor.t.solandHistoricalSignerVectors.t.sol(by ted0x): the anchor, an ArbSys block-number variant, and historical signer checks, including an ERC-1271 key rotation (31 tests).on-list/(by runeclaw): JSON vectors and a dependency-free Python checker foraddress.on-listlist documents (normalization, list hash, matching, not-read reasons, version diffs), including the FBI TraderTraitor address list of 2026-10-31 as one attested document.@tollxyz/guard.Related proposals (same author)
token.observation.payTois bound to the paid agent; read bypayment.payee-binding.