feat(standards): Add DelayedExecution (Timelocked Accounts) to AuthMultisigSmart

CHANGELOG.md

@@ -189,6 +189,7 @@
 - Added trace row counts to `bench-tx.json` ([#2794](https://github.com/0xMiden/protocol/pull/2794)).
 - [BREAKING] Renamed `set_attachment` to `add_attachment`, `set_word_attachment` to `add_word_attachment`, and `set_array_attachment` to `add_array_attachment` in `miden::protocol::output_note` ([#2795](https://github.com/0xMiden/protocol/pull/2795), [#2849](https://github.com/0xMiden/protocol/pull/2849)).
 - Added foundations for `AuthMultisigSmart` ([#2806](https://github.com/0xMiden/protocol/pull/2806)).
+- Extended `AuthMultisigSmart` with a `DelayedExecutionPolicy` and a `delayed_execution` module that exposes a timelock-controlled propose/cancel/execute flow, surfaced through `update_delayed_execution_policy`, `propose_transaction`, `cancel_transaction_proposal`, `cancel_and_propose_new_transaction`, and `execute_proposed_transaction` ([#3044](https://github.com/0xMiden/protocol/pull/3044)).
 - Added `tx::get_tx_script_root` kernel procedure returning the root of the executed transaction script (empty word if no script was executed) ([#2816](https://github.com/0xMiden/protocol/pull/2816)).
 - Added `AuthNetworkAccount` auth component that rejects transactions which execute a tx script or consume input notes outside of a fixed allowlist of note script roots ([#2817](https://github.com/0xMiden/protocol/pull/2817)).
 - Added basic blocklist transfer policy with owner-managed admin (`block_account`/`unblock_account`) and runtime policy switching via the protocol-reserved asset callback slots ([#2820])(https://github.com/0xMiden/protocol/pull/2820).

crates/miden-protocol/asm/kernels/transaction-core/src/tx.masm

@@ -65,6 +65,11 @@ pub use {get_tx_script_root} from miden::tx_kernel_core::memory
 #!
 #! Where:
 #! - block_height_delta is the desired expiration time delta (1 to 0xFFFF).
+#!
+#! Panics if:
+#! - block_height_delta is not a valid `u32` (`ERR_TX_INVALID_EXPIRATION_DELTA`).
+#! - block_height_delta is zero (`ERR_TX_INVALID_EXPIRATION_DELTA`).
+#! - block_height_delta is greater than 0xFFFF (`ERR_TX_INVALID_EXPIRATION_DELTA`).
 pub proc update_expiration_block_delta
     # Ensure block_height_delta is between 1 and 0xFFFF (inclusive)
     dup neq.0 assert.err=ERR_TX_INVALID_EXPIRATION_DELTA

crates/miden-protocol/asm/protocol/src/tx.masm

@@ -297,6 +297,11 @@ end
 #! Where:
 #! - block_height_delta is the desired expiration time delta (1 to 0xFFFF).
 #!
+#! Panics if:
+#! - block_height_delta is not a valid `u32`.
+#! - block_height_delta is zero.
+#! - block_height_delta is greater than 0xFFFF.
+#!
 #! Annotation hint: is not used anywhere
 pub proc update_expiration_block_delta(block_height_delta: u16)
     push.TX_UPDATE_EXPIRATION_BLOCK_DELTA_OFFSET

crates/miden-standards/asm/components/auth/multisig_smart/multisig_smart.masm

@@ -10,6 +10,9 @@ pub use {get_signer_at} from miden::standards::auth::multisig
 pub use {is_signer} from miden::standards::auth::multisig
 pub use {set_procedure_policy} from miden::standards::auth::multisig_smart
 pub use {update_signers_and_threshold} from miden::standards::auth::multisig_smart
+pub use {update_delayed_execution_policy} from miden::standards::auth::multisig_smart::delayed_execution
+pub use {propose_transaction} from miden::standards::auth::multisig_smart::delayed_execution
+pub use {cancel_transaction_proposal} from miden::standards::auth::multisig_smart::delayed_execution
 
 #! Authenticate a transaction using multisig smart-policy rules.
 #!

crates/miden-standards/asm/standards/auth/multisig.masm

@@ -530,6 +530,29 @@ proc get_current_threshold_and_num_approvers
     # => [default_threshold, num_approvers]
 end
 
+#! Verifies the configured approver signatures over `MSG` and returns how many of them are valid.
+#!
+#! Thin wrapper over [`signature::verify_signatures`] that supplies this component's approver
+#! public-key and scheme-id storage slots, so callers don't need to know the slot layout. It does
+#! not enforce any threshold, the caller compares the returned count against the required threshold.
+#!
+#! Inputs:  [num_of_approvers, MSG]
+#! Outputs: [num_verified_signatures, MSG]
+#!
+#! Invocation: exec
+pub proc verify_signatures
+    # => [num_of_approvers, MSG]
+
+    push.APPROVER_PUBLIC_KEYS_SLOT[0..2]
+    # => [pub_key_slot_suffix, pub_key_slot_prefix, num_of_approvers, MSG]
+
+    push.APPROVER_SCHEME_ID_SLOT[0..2]
+    # => [scheme_id_slot_suffix, scheme_id_slot_prefix, pub_key_slot_suffix, pub_key_slot_prefix, num_of_approvers, MSG]
+
+    exec.::miden::standards::auth::signature::verify_signatures
+    # => [num_verified_signatures, MSG]
+end
+
 #! Returns the current threshold and num_approvers from `THRESHOLD_CONFIG_SLOT`.
 #!
 #! Inputs:  [pad(16)]