TSR-01 / DETERMINISTIC SIGNER REQUEST, KEY-POLICY + THRESHOLD BINDING, DOMAIN SEPARATION, EXPIRY-REVOCATION & REPLAY REJECTION COURT

Name the policy.
Bind the threshold.
Touch no key.

Signer Request inherits one TUC-01 canonical unsigned payload and binds it to an opaque key policy, opaque signer set, signing scheme, threshold, domain, chain, deadline, revocation state and one-time request nonce.

01OBSERVE
02INHERIT
03BIND
04POLICY
05THRESHOLD
06DOMAIN
07EXPIRE
08REVOKE
09REPLAY
10SEAL
0102030405
FIVE REQUEST PROFILES
ONE KEYLESS POLICY COURT
01 / SIGNER REQUEST WORLDSPOLICY + THRESHOLD + DOMAIN + REPLAY

Every signer request is bounded.
No key becomes visible.

SIGNER REQUEST CONTRACT
PAYLOAD EXACTPOLICY OPAQUETHRESHOLD BOUNDDOMAIN FIXEDREVOCATION LIVEREPLAY CLOSED
02 / REQUEST ASSURANCEAWAITING STATE
COURT DECISION

REQUIRE THE EXACT UNSIGNED PAYLOAD AND AUTHORIZATION CHAIN, ALLOWLISTED SIGNING SCHEME, OPAQUE KEY-POLICY AND SIGNER-SET COMMITMENTS, VALID THRESHOLD, EXACT DOMAIN AND CHAIN, LIVE DEADLINE, CLEAR REVOCATION STATE AND UNUSED REQUEST NONCE.

TSR-01 determines whether declared signer-request evidence is eligible. It cannot discover signers, access or derive keys, issue a signature request, produce a signature, broadcast a transaction, execute code, settle or move assets.

01REQUEST CHAINWAIT
02UNSIGNED PAYLOADWAIT
03CONSTRUCTION RECEIPTWAIT
04AUTHORIZATION ROOTWAIT
05SIGNING SCHEMEWAIT
06KEY POLICYWAIT
07SIGNER SETWAIT
08THRESHOLDWAIT
09DOMAIN + CHAINWAIT
10FRESHNESSWAIT
11REVOCATIONWAIT
12REPLAY BARRIERWAIT
13ZERO AUTHORITYWAIT
SIGNER REQUEST RECEIPTTSR-01AWAITING-EVIDENCE
CONSTRUCTION / TUC-01AUTHORIZATION / TZA-01KEY ACCESS / FALSESIGNATURE / FALSE