Struct AuthGuardedMultisig 

pub struct AuthGuardedMultisig { /* private fields */ }

An AccountComponent implementing multisig authentication integrated with a state guardian.

It enforces a threshold of approver signatures for every transaction, with optional per-procedure threshold overrides. When a guardian is configured, multisig authorization is combined with guardian authorization, so operations require both multisig approval and a valid guardian signature. This substantially mitigates low-threshold state-withholding scenarios since the guardian is expected to forward state updates to other approvers.

Fees

Before authenticating, auth_tx_guarded_multisig pays the transaction fee: it creates a public TX_FEE note (see TxFeeNote) funded from the account’s vault, so on fee-charging chains the account must hold a sufficient balance of the native fee asset. The conversion info is committed to via the transaction’s auth args (see FeeConversionInfo and commit_fee_conversion_info). On chains with a zero verification base fee no note is created. The fee note is created before the transaction summary, so it is covered by the approver and guardian signatures; the auth args word continues to serve as the summary salt, and the uniqueness replay protection relies on originates from the caller-chosen salt.

The conversion rate is host-supplied, and guardian key rotation authenticates without a guardian signature and can be thresholded below the account’s spending quorum. The component therefore bounds the payment: it must be in the native fee asset and at most twice the computed fee (fee::assert_fee_bound), so a rotation authorized below that quorum can at most overpay the fee, not move arbitrary value out of the account.

Rotation requires that the transaction create no notes beyond the fee note, so it works on a fee-charging chain — but it does require the vault to fund the fee. Rotation also forbids input notes, and assets can only enter a vault through an input note, so the funding transaction must be a separate one, and being a separate one it takes the ordinary path and needs a guardian signature. A guarded account on a fee-charging chain must therefore keep a standing balance of the native fee asset while its guardian key still works: a lost guardian key combined with an unfunded vault cannot be recovered.

Privacy

Approvers and the guardian using AuthScheme::EcdsaK256Keccak disclose their public key and signature at proving time and therefore do not get public-key privacy; those using Falcon512Poseidon2 do. See Approver for details.

Implementations

impl AuthGuardedMultisig

pub const NAME: &'static str = "miden::standards::auth::guarded_multisig"

The name of the component.

pub const fn name() -> AccountComponentName

Returns the canonical AccountComponentName of this component.

pub fn code() -> &'static AccountComponentCode

Returns the AccountComponentCode of this component.

pub fn new( config: AuthGuardedMultisigConfig, ) -> Result<AuthGuardedMultisig, AccountError>

Creates a new AuthGuardedMultisig component from the provided configuration.

pub fn threshold_config_slot() -> &'static StorageSlotName

Returns the StorageSlotName where the threshold configuration is stored.

pub fn approver_public_keys_slot() -> &'static StorageSlotName

Returns the StorageSlotName where the approver public keys are stored.

pub fn approver_scheme_ids_slot() -> &'static StorageSlotName

pub fn executed_transactions_slot() -> &'static StorageSlotName

Returns the StorageSlotName where the executed transactions are stored.

pub fn procedure_thresholds_slot() -> &'static StorageSlotName

Returns the StorageSlotName where the procedure thresholds are stored.

pub fn guardian_public_key_slot() -> &'static StorageSlotName

Returns the StorageSlotName where the guardian public key is stored.

pub fn guardian_scheme_id_slot() -> &'static StorageSlotName

Returns the StorageSlotName where the guardian scheme IDs are stored.

pub fn threshold_config_slot_schema() -> (StorageSlotName, StorageSlotSchema)

Returns the storage slot schema for the threshold configuration slot.

pub fn approver_public_keys_slot_schema() -> (StorageSlotName, StorageSlotSchema)

Returns the storage slot schema for the approver public keys slot.

pub fn approver_auth_scheme_slot_schema() -> (StorageSlotName, StorageSlotSchema)

pub fn executed_transactions_slot_schema() -> (StorageSlotName, StorageSlotSchema)

Returns the storage slot schema for the executed transactions slot.

pub fn procedure_thresholds_slot_schema() -> (StorageSlotName, StorageSlotSchema)

Returns the storage slot schema for the procedure thresholds slot.

pub fn guardian_public_key_slot_schema() -> (StorageSlotName, StorageSlotSchema)

Returns the storage slot schema for the guardian public key slot.

pub fn guardian_auth_scheme_slot_schema() -> (StorageSlotName, StorageSlotSchema)

Returns the storage slot schema for the guardian scheme IDs slot.

pub fn component_metadata() -> AccountComponentMetadata

Returns the AccountComponentMetadata for this component.

Trait Implementations

impl Debug for AuthGuardedMultisig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl From<AuthGuardedMultisig> for AccountComponent

fn from(multisig: AuthGuardedMultisig) -> AccountComponent

Converts to this type from the input type.