gnosis / zodiac-modifier-roles / 40580028160
0%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 0
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 0.0%. Remained the same
40580028160

push

github

web-flow 
feat(sdk): permissionHazards, and docs on what signatures authorize and settlement (#526)

* feat(sdk): permissionHazards flags permissions that grant more than they appear to

Delegatecall to whole targets or unknown targets' functions, signMessage
without pinned messages, typed-message permissions that leave the types or
the domain open, and calls to the Roles Modifier itself.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DvEkN8jKo5TwdxzerGzeoG

* docs: what a signature authorizes, and settlement after execution

Signing permissions grant whatever the signature authorizes wherever the
Safe's EIP-1271 signature counts. Settlement writes after execution, so
role configuration calls should not be mixed with calls through a role in
the same transaction. End-to-end tests with real Safes pin both down.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DvEkN8jKo5TwdxzerGzeoG

* fix(sdk): permissionHazards checks the domain's chainId and verifyingContract

Each must be pinned on every passing branch, found by the domain layout of
the pinned types. Typed messages of type RoleTx, SafeTx or SafeMessage are
flagged: they authorize the avatar elsewhere.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DvEkN8jKo5TwdxzerGzeoG

* fix(sdk): permissionHazards requires the domain to have chainId

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DvEkN8jKo5TwdxzerGzeoG

* fix(sdk): permissionHazards counts a pin only in the parameter's encoding

An EqualTo read as a word at the position of a bytes parameter pins its
offset, not the message.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DvEkN8jKo5TwdxzerGzeoG

* fix(sdk): permissionHazards follows a Matches only with the arguments' offse... (continued)

0 of 0 relevant lines covered (NaN%)

0.0 hits per line

Jobs
ID Job ID Ran Files Coverage
1 40580028160.1 0
0.0
GitHub Action Run
Source Files on build 40580028160
Detailed source file information is not available for this build.