{
  "tool_id": "art-614-eip7702-authorization-tuple-decoder",
  "note": "golden_hash filled by `node golden-parity.test.mjs --update`. Every recovered-signer vector was independently generated by a from-scratch oracle script (hand-authored RLP + a direct import of the vendored noble secp256k1/keccak bundle, NOT this kernel's own compute()) that (1) RLP-encodes [chain_id, address, nonce] per the Ethereum Yellow Paper, (2) keccak256(0x05 || rlp) per EIP-7702 'Signature validity', (3) signs the digest with a known test private key, (4) independently derives that key's address the same way (keccak256(uncompressed pubkey)[-20:]). This kernel's own compute() output was then diffed byte-for-byte against the oracle for every vector before being pinned here -- so a bug shared between the kernel and this fixture file would have to be a bug shared with the independent oracle script too, not a self-referential round-trip. Test private keys: vectors 1-2 use 0x4c0883a69102937d6231471b5dbb6204fe5129617082792ae468d01a3f362318 (well-known small test scalar, no funds); vectors 3-4 use private key 0x000...002 (address independently re-derivable by any secp256k1 implementation).",
  "vectors": [
    {
      "name": "mainnet-basic-yparity-0",
      "policy_parameters": {
        "chainId": 1,
        "address": "0x1234567890123456789012345678901234567890",
        "nonce": 0,
        "r": "0xbcc0abd2b842f32cc9c8844ec50c0d5c9b41563f825ef1a143ad93428fb23ad8",
        "s": "0x12678a935e15a1d1fae421fa00abd642222fb4db4aaf4f95a894ba0e38eebbae",
        "yParity": 0
      },
      "output_payload": {
        "verdict": "AUTHORIZATION_RECOVERED",
        "reasons": [],
        "chain_id": 1,
        "cross_chain_authorization": false,
        "delegate_address": "0x1234567890123456789012345678901234567890",
        "nonce": 0,
        "authorization_tuple_hash": "0x27ccda78a68e39a3fdf515a1b312fe1e3a5d766597579ca1a4973f586950b6e2",
        "recovered_signer": "0x2c7536e3605d9c16a7a3d7b1898e529396a65c23",
        "recovery_id": 0,
        "recovery_id_source": "yParity",
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "0372215a522f12ef2160b0cf40a3447ed3df954b52b73f6d5e812a40375a250a"
    },
    {
      "name": "l2-chainid-nonzero-nonce-yparity-1",
      "policy_parameters": {
        "chainId": 8453,
        "address": "0xabcdefabcdefabcdefabcdefabcdefabcdefabcd",
        "nonce": 7,
        "r": "0x56cd500299c4992793edb7e4e22107bf4edda0c333845e5136ada93a92396a8c",
        "s": "0x4ef1b0f490b47ff488ff730d5bb5c7958838e8576cb9b6bc12a70ad2ca27aab9",
        "yParity": 1
      },
      "output_payload": {
        "verdict": "AUTHORIZATION_RECOVERED",
        "reasons": [],
        "chain_id": 8453,
        "cross_chain_authorization": false,
        "delegate_address": "0xabcdefabcdefabcdefabcdefabcdefabcdefabcd",
        "nonce": 7,
        "authorization_tuple_hash": "0xdbbd0860628b133d6933d40f38c176c3d87bd97f681014457da6b41b8ef7c1fe",
        "recovered_signer": "0x2c7536e3605d9c16a7a3d7b1898e529396a65c23",
        "recovery_id": 1,
        "recovery_id_source": "yParity",
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "6acdf16862046874bbc5241856857476aacbb636eb0596ae95a7ce7ac0ffd008"
    },
    {
      "name": "chainid-zero-cross-chain-disclosure",
      "policy_parameters": {
        "chainId": 0,
        "address": "0x1111111111111111111111111111111111111111",
        "nonce": 0,
        "r": "0xc7821e49fe78450aa065ab20fae30ebf9e07652a8c4c8eac0038d8ceffdefb2b",
        "s": "0x080893c40df59f6e1a11c5b0dd332e78281063eae2bcd9fb8c36d4e6cbf092a7",
        "yParity": 1
      },
      "output_payload": {
        "verdict": "AUTHORIZATION_RECOVERED",
        "reasons": [],
        "chain_id": 0,
        "cross_chain_authorization": true,
        "delegate_address": "0x1111111111111111111111111111111111111111",
        "nonce": 0,
        "authorization_tuple_hash": "0xbce043d2be6b6a6257ca659ae30d27657722aeedb466b2256c750e0de08654ba",
        "recovered_signer": "0x2b5ad5c4795c026514f8317c7a215e218dccd6cf",
        "recovery_id": 1,
        "recovery_id_source": "yParity",
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "7dcba999f895011b8ad3e92d0a0043625dffe136b734619156896e4713f8b87f"
    },
    {
      "name": "nonzero-nonce-chain-137",
      "policy_parameters": {
        "chainId": 137,
        "address": "0xfeedfacefeedfacefeedfacefeedfacefeedface",
        "nonce": 42,
        "r": "0xc9021cfbbc8afef4564103ad05dee535db7594f8de38fe058b00c08a456c0953",
        "s": "0x2e06332ebdacb6885fa595109c81f87e679a70c056ff9c877909ac27a71fe8c4",
        "yParity": 0
      },
      "output_payload": {
        "verdict": "AUTHORIZATION_RECOVERED",
        "reasons": [],
        "chain_id": 137,
        "cross_chain_authorization": false,
        "delegate_address": "0xfeedfacefeedfacefeedfacefeedfacefeedface",
        "nonce": 42,
        "authorization_tuple_hash": "0x1edeae27193679772075d4234e7c3a17cc1196d06105d544182dce39d90fd095",
        "recovered_signer": "0x2b5ad5c4795c026514f8317c7a215e218dccd6cf",
        "recovery_id": 0,
        "recovery_id_source": "yParity",
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "3fc3d34db72f8f51be1d8245b901a21023bd3adc430b4c6fdfaa0d4ab0b428ec"
    },
    {
      "name": "malformed-signature-never-throws",
      "policy_parameters": {
        "chainId": 1,
        "address": "0x1234567890123456789012345678901234567890",
        "nonce": 0,
        "signature": "0xdeadbeef"
      },
      "output_payload": {
        "verdict": "INDETERMINATE",
        "reasons": [
          "signature must be 64 bytes (r||s) or 65 bytes (r||s||v) hex, got 4 bytes"
        ],
        "chain_id": 1,
        "cross_chain_authorization": false,
        "delegate_address": "0x1234567890123456789012345678901234567890",
        "nonce": 0,
        "authorization_tuple_hash": null,
        "recovered_signer": null,
        "recovery_id": null,
        "recovery_id_source": null,
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "2aa7f62f6ad79e2023f8cd2db28d73e7b6faf1f7755f191bb71398d141676b7f"
    },
    {
      "name": "missing-everything-indeterminate",
      "policy_parameters": {},
      "output_payload": {
        "verdict": "INDETERMINATE",
        "reasons": [
          "chainId is required (0 is valid and means a cross-chain authorization, replayable on any chain per EIP-7702)",
          "address is required and must be a 20-byte hex value (the delegate the EOA is authorizing)",
          "nonce is required (a non-negative integer)",
          "r is required and must be a 32-byte hex value when signature is not supplied",
          "s is required and must be a 32-byte hex value when signature is not supplied"
        ],
        "chain_id": null,
        "cross_chain_authorization": null,
        "delegate_address": null,
        "nonce": null,
        "authorization_tuple_hash": null,
        "recovered_signer": null,
        "recovery_id": null,
        "recovery_id_source": null,
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "67f4925005f1ea23447eb808c31795bca76b95d6269627a1db8b6ef8f0acbbf3"
    },
    {
      "name": "wrong-recovery-bit-yields-different-signer",
      "policy_parameters": {
        "chainId": 1,
        "address": "0x1234567890123456789012345678901234567890",
        "nonce": 0,
        "r": "0xbcc0abd2b842f32cc9c8844ec50c0d5c9b41563f825ef1a143ad93428fb23ad8",
        "s": "0x12678a935e15a1d1fae421fa00abd642222fb4db4aaf4f95a894ba0e38eebbae",
        "yParity": 1
      },
      "output_payload": {
        "verdict": "AUTHORIZATION_RECOVERED",
        "reasons": [],
        "chain_id": 1,
        "cross_chain_authorization": false,
        "delegate_address": "0x1234567890123456789012345678901234567890",
        "nonce": 0,
        "authorization_tuple_hash": "0x27ccda78a68e39a3fdf515a1b312fe1e3a5d766597579ca1a4973f586950b6e2",
        "recovered_signer": "0x5495d90119e4803fb79b5f578cdab00300a2be26",
        "recovery_id": 1,
        "recovery_id_source": "yParity",
        "scope_note": "Recomputes the EIP-7702 authorization-tuple hash from declared (chain_id, address, nonce) fields, recovers the ECDSA signer from the caller-supplied signature, and reports the address the recovered signer is authorizing as its delegate. Proves that a private key produced a valid signature over the exact tuple supplied -- it does NOT judge the delegate contract's code, does not confirm the authorization was ever submitted or applied on-chain, and does not confirm the recovered signer's account nonce matches the declared nonce at any block. An authorization is not a settlement, and a recovered delegate address is not a safety verdict. Zero network calls; never a facilitator, proxy, or settlement relay."
      },
      "golden_hash": "6a4ddf2a0677e0f02f18b1c26a0f2e2fa392f1a173792b9dd188c7f1e07dfa52"
    }
  ]
}