Issues

Per-proposer viable-proposal quota for Guardian-executable proposals (FR-016)

OpenZeppelin/guardian#572 · opened

on Oct 22, 2026

Check at startup that the transaction prover serves the configured network

OpenZeppelin/guardian#571 · opened

on Oct 22, 2026

Remove or wire ProposalExecutor::chain_tip

OpenZeppelin/guardian#570 · opened

on Oct 22, 2026

Guardian execution: decode once and verify signatures off the async request path

OpenZeppelin/guardian#569 · opened

on Oct 22, 2026

Guardian server: per-signer signature schemes (mixed Falcon + ECDSA accounts)

OpenZeppelin/guardian#563 · opened

on Oct 20, 2026

miden-multisig-client (Rust): update-signers rewrites every approver's scheme on a mixed-scheme account

OpenZeppelin/guardian#549 · opened

on Oct 12, 2026

miden-multisig-client: per-approver signature schemes (mixed Falcon + ECDSA signer sets)

OpenZeppelin/guardian#539 · opened

on Oct 9, 2026

Keep a superseded recoverable row instead of deleting it on a push at its nonce

OpenZeppelin/guardian#519 · opened

on Oct 3, 2026

Require delta.nonce to equal the applied account nonce

OpenZeppelin/guardian#518 · opened

on Oct 3, 2026

Serve the candidate queue tail to cosigners

OpenZeppelin/guardian#517 · opened

on Oct 3, 2026

MultisigClient::get_deltas omits replay entries, so its rebuilt state never matches the chain

OpenZeppelin/guardian#514 · opened

on Oct 2, 2026

Use AccountPatch to update and synchronize account state

OpenZeppelin/guardian#502 · opened

on Sep 29, 2026

2

GUARDIAN sync never adopts an equal-nonce state that matches the chain

OpenZeppelin/guardian#501 · opened

on Sep 29, 2026

1

executeProposal skips the switch delta push and new GUARDIAN registration when the local apply fails after submit

OpenZeppelin/guardian#500 · opened

on Sep 29, 2026

[Placeholder]: Post-mainnet unplanned issues

OpenZeppelin/guardian#482 · opened

on Sep 18, 2026

· Guardian #02 - M2

GET /pubkey and GetPubkey silently serve the Falcon identity for an unrecognized scheme

OpenZeppelin/guardian#480 · opened

on Sep 17, 2026

Deferred: account creation-block anchor for bounded recovery scans

OpenZeppelin/guardian#418 · opened

on Aug 19, 2026

Make ECDSA the primary signature scheme for new Miden multisig accounts

Feature

OpenZeppelin/guardian#397 · opened

on Aug 12, 2026

1

M2 · 8. Product features / later

OpenZeppelin/guardian#396 · opened

on Aug 12, 2026

· Guardian #02 - M2

M2 · 6. Performance & scalability

OpenZeppelin/guardian#395 · opened

on Aug 12, 2026

· Guardian #02 - M2

multisig-client: move `nonce` into the options object of proposal-creation APIs

Task

OpenZeppelin/guardian#387 · opened

on Aug 11, 2026

Decouple the production runtime from AWS and support pluggable secret and signer backends

Feature

OpenZeppelin/guardian#372 · opened

on Aug 4, 2026

Archive/unarchive for pending proposals (reversible retraction) — phase 2 of #337

Feature

OpenZeppelin/guardian#351 · opened

on Jul 23, 2026

Per-account proposal handshake cost grows with interleaved proposal traffic (send + consume) — +128–153% over 300 ops

Task

OpenZeppelin/guardian#320 · opened

on Jul 15, 2026

· Guardian #02 - M2

4

Define and reach Guardian scalability target: 100k guarded accounts, 100 concurrent transacting users, 20k concurrent state readers

Task

OpenZeppelin/guardian#317 · opened

on Jul 10, 2026

· Guardian #02 - M2

3

Navigation Menu

Repository navigation

Issues

Per-proposer viable-proposal quota for Guardian-executable proposals (FR-016)

Check at startup that the transaction prover serves the configured network

Remove or wire ProposalExecutor::chain_tip

Guardian execution: decode once and verify signatures off the async request path

Guardian server: per-signer signature schemes (mixed Falcon + ECDSA accounts)

miden-multisig-client (Rust): update-signers rewrites every approver's scheme on a mixed-scheme account

miden-multisig-client: per-approver signature schemes (mixed Falcon + ECDSA signer sets)

Keep a superseded recoverable row instead of deleting it on a push at its nonce

Require delta.nonce to equal the applied account nonce

Serve the candidate queue tail to cosigners

MultisigClient::get_deltas omits replay entries, so its rebuilt state never matches the chain

Use AccountPatch to update and synchronize account state

GUARDIAN sync never adopts an equal-nonce state that matches the chain

executeProposal skips the switch delta push and new GUARDIAN registration when the local apply fails after submit

[Placeholder]: Post-mainnet unplanned issues

GET /pubkey and GetPubkey silently serve the Falcon identity for an unrecognized scheme

Deferred: account creation-block anchor for bounded recovery scans

Make ECDSA the primary signature scheme for new Miden multisig accounts

M2 · 8. Product features / later

M2 · 6. Performance & scalability

multisig-client: move `nonce` into the options object of proposal-creation APIs

Decouple the production runtime from AWS and support pluggable secret and signer backends

Archive/unarchive for pending proposals (reversible retraction) — phase 2 of #337

Per-account proposal handshake cost grows with interleaved proposal traffic (send + consume) — +128–153% over 300 ops

Define and reach Guardian scalability target: 100k guarded accounts, 100 concurrent transacting users, 20k concurrent state readers