Skip to content

host: sign and broadcast a host-signed submission behind the guard #109

Description

@mfw78

Problem. videre's requires-signing(unsigned-tx) path ends at the description: the adapter describes an unsigned transaction, and no host verb signs, broadcasts, or returns a receipt. identity.rs is a stub (sign returns Unsupported), and ChainMethod is a closed read-only enum whose docs call it the structural ceiling, with eth_sendRawTransaction denied by test. Completing the path breaches that ceiling on purpose, so it is a design decision before it is an implementation task.

Scope. Under the #57 guard epic: a host-signed submission class that takes a module-described unsigned transaction through policy, signs at the identity checkpoint (#34), broadcasts, and returns the receipt to the requesting module. The verb is generic host-signed submission, not a venue concept, per the repo boundary.

Context. The videre milestone "Venue neutrality proven" no longer blocks on this: the second-venue proof closes on the conformance kit (nullislabs/videre-nexum-module#28), and this issue tracks the executed-settlement half.

Dependencies. #34, #57.

AI Assistance: Claude Fable filed this from the videre #28 split decided with mfw78 (2026-08-06).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions