Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Apply Transaction Policies to Generation | Contents | next: Log All Signature Requests

Enable Transaction Policies for Generation

Statement of Requirement

Producers MUST provide a mechanism to configure policies covering

• designating sensitive transactions to require multi-signature, generation in hardened sandboxed environments or timelocks, and
• acceptable gas/fee limits

See it in the specification

Applicability

• Producers

Purpose

Enable configurations relevant to the specific requirements for Producers.

Audit Procedure

Verify that the Producer enables settings for

• identifying sensitive transactions that require Multisig authorization, generation in hardened sandboxed environments, or timelocks, and
• acceptable gas/fee limits

Success Criteria

The Producer provides a mechanism to configure necessary settings for transactions

Best Practice

The Producer provides a mechanism to configure controls including

• Maximum values for transactions, and rate and transaction volume limits for specified time periods
• Requirements for Application Transactions such as restricting the behaviour allowed, passing specific security reviews, etc.
• Allowlists and Denylists for access.

Failure Criteria

There is no mechanism to configure the required settings for transactions

Key Evidence

• User documentation
• User Interfaces
• Reperformance

previous: Apply Transaction Policies to Generation | Contents | next: Log All Signature Requests