Repository navigation
Two-step admin handover with pending_admin slot #231
Description
Problem Statement. Admin is set once at init() and never changed. There is no two-step
rotation, no revocation path for a lost admin key, and no recovery code.
Why it matters. Lost admin keys are an obvious, severe incident. A maintainer must
have a way to rotate the admin without redeploying the Wasm.
Technical Context. KEY_ADMIN is a single value. There is no pending_admin slot.
Expected Outcome.
rotate_admin(new_admin)is callable only by current admin, setsKEY_PENDING_ADMIN.accept_admin()is callable only bypending_admin, replacesKEY_ADMIN, clears
KEY_PENDING_ADMIN, emitsAdminRotatedEvent.- A 7-day bounded
accept_admindeadline enforced (configurable).
Acceptance Criteria.
- New test asserts old admin cannot
pauseafter accepting-rotation is complete. - New test asserts pending_admin does not gain powers until
accept_admin.
Files or modules likely to be affected. src/lib.rs, tests/aid_escrow_tests.rs.
Difficulty. Hard
Estimated effort. M
Backlog item #23 from `docs/maintainer-issue-backlog.md.
Activity
ifygreg01-best commentedon Jul 15, 2026
i will love work on this issue i deliver very timely, i have also worked on project like this
1Judah commentedon Jul 21, 2026
please assign me I have experience as a develoiper
grantfox-oss commentedon Jul 21, 2026
🦊 GrantFox — @1Judah has been assigned to this issue as part of the Official Campaign | FWC26 campaign!
Next steps:
Closes #231)Good luck! Track your progress on GrantFox.
feat(aid_escrow): two-step admin handover with pending_admin slot (#231…
grantfox-oss commentedon Jul 22, 2026
🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign | FWC26 campaign!
@1Judah's PR #409 was approved and merged by @kilodesodiq-arch.
🏆 @1Judah: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (83 total points). Track your full progress on GrantFox.
👏 Great work, @1Judah! Keep contributing to ChainForgee.
feat(aid_escrow): two-step admin handover with pending_admin slot (Ch…