Composability: authorization-zone intents for third-party keepers (resolve/claim/create-next)

[josephchimebuka]

Summary

Add a secure intent/keeper framework so third parties can execute permissioned operational actions (resolve with supplied payload, claim on behalf with user signature, create-next from template) under explicit scopes and nonces.

Why this is complex / high impact

Cross-contract/keeper execution needs capability security: scoped auth, replay nonces, expiry, and abuse resistance—without weakening user custody assumptions.

Where to work

• new intents.rs / auth helpers
• admin/oracle/user flows
• bindings helpers for keepers
• security tests

Architecture requirements

1. Typed intents with expiry+nonce.
2. Scope enumeration (RESOLVE, CLAIM, CREATE_NEXT).
3. Signature/auth verification model appropriate for Soroban.
4. Rate limits / pause respect.
5. Events for keeper execution.

Acceptance Criteria

• Expired/replayed intents rejected
• Scope cannot escalate privileges
• User funds movement still user-authorized where required
• Keeper happy paths tested
• Threat model documented

Difficulty

advanced

[Bigmehelen]

I would like to work on this issue, kindly assign me to this issue. thank you

[kimanicode]

I have experience building capability-based security systems with typed intents, replay protection, and nonce management in smart contract environments. I've reviewed the requirements and see this is an intent/keeper framework that must support permissioned actions (resolve, claim, create-next) under explicit scopes without weakening user custody. My approach: implement typed intents with expiry + nonce, scope enumeration (RESOLVE, CLAIM, CREATE_NEXT), signature verification appropriate for Soroban, rate limits and pause enforcement, events for keeper execution, and security tests covering expired/replayed intents, privilege escalation prevention, and user-authorized fund movement. I'll document the threat model alongside the implementation. Please assign this to me

[AbuJulaybeeb]

Hi Maintainer, haven reviewed the description of the issue, and well experienced with Js Library,
I would like to hop on the issue and sure to deliver at ETA 2hrs

[grantfox-oss]

🦊 GrantFox — @AbuJulaybeeb has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #370)
2. Your PR will be reviewed by the TevaLabs maintainers

Good luck! Track your progress on GrantFox.