feat(server): integrity envelope engine for EVM grants with HMAC verification

This commit is contained in:
CleverWild
2026-04-04 21:52:50 +02:00
committed by hdbg
parent f5eb51978d
commit 4057c1fc12
20 changed files with 889 additions and 32 deletions

View File

@@ -192,3 +192,19 @@ create table if not exists evm_ether_transfer_grant_target (
) STRICT;
create unique index if not exists uniq_ether_transfer_target on evm_ether_transfer_grant_target (grant_id, address);
-- ===============================
-- Integrity Envelopes
-- ===============================
create table if not exists integrity_envelope (
id integer not null primary key,
entity_kind text not null,
entity_id blob not null,
payload_version integer not null,
key_version integer not null,
mac blob not null, -- 20-byte recipient address
signed_at integer not null default(unixepoch ('now')),
created_at integer not null default(unixepoch ('now'))
) STRICT;
create unique index if not exists uniq_integrity_envelope_entity on integrity_envelope (entity_kind, entity_id);