Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Warn about Timing Attacks | Contents | next: Enable Transaction Policies for Signing

Apply Transaction Policies to Signing

Statement of Requirement

Signature Managers MUST enforce any configured policy such as maximum amounts, denylists/allowlists, and velocity controls before creating a transaction.

See it in the specification

Applicability

Purpose

Ensure specific configuration settings for signature are respected by the Signature Manager.

Audit Procedure

Verify that all combinations of configured settings are respected.

Success Criteria

All settings that can be configured are respected by the Signature Manager.

Best Practice

The Signature Manager allows configuring constraints such as requiring multiple parties to sign specific types of transaction, or transactions with a specific value.

Failure Criteria

A configurable setting is not respected by the Signature Manager.

Key Evidence

previous: Warn about Timing Attacks | Contents | next: Enable Transaction Policies for Signing