Repository navigation
Conversation
The signer now serves every operation of the NSpark.RemoteSigner contract that a NodeGuard Spark wallet needs to receive over Lightning, claim and exit on-chain: identity signatures, public keys, leaf FROST signatures, send and claim tweaks and preimage shares. ECIES decryption, private key export, two-phase nonces and adaptor keys stay unserved (404), and leaf signatures with an adaptor key are refused (403). Policy, from the environment: - SPARK_OPERATOR_KEYS / SPARK_THRESHOLD: tweaks and preimage shares are only built for exactly this operator set at this threshold. Without operators every tweak and share is refused. - SPARK_ALLOWED_RECEIVERS: the only identities (the SSP), besides the signer's own, that leaves may be sent to. A malformed policy refuses every request (500) before any seed is decrypted. /spark/info reports the policy so NodeGuard can check it at startup. Tests drive NSpark's RemoteSparkSigner client through the Lambda handler and compare with the in-process signer, and replay every request body pinned in the fork's contract fixtures.
Jossec101
added this pull request to stack #21
October 9, 2026 23:23
Jossec101
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Stack created with GitHub Stacks CLI • Give Feedback 💬