Skip to content

[AIP] Account Abstraction#512

Merged
thepomeranian merged 2 commits intoaptos-foundation:mainfrom
lightmark:account_abstraction
Nov 12, 2024
Merged

[AIP] Account Abstraction#512
thepomeranian merged 2 commits intoaptos-foundation:mainfrom
lightmark:account_abstraction

Conversation

@lightmark
Copy link
Contributor

AIP for account abstraction on Aptos

Comment on lines 47 to 50
- Multisig v2 account
- Sandbox or temporary account to isolate assets/risks, etc.
- Restricted permissions granted to trusted applications so users don’t need to sign every transaction.
- Delegation of asset management to a different account (semi-custodial model)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it'd be nice if a bit more detail can be provided here for each item. i'm curious how this can be related to multisig v2 accounts

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

multisig v2 uses MultisigAccount as the account resource.
And the sender of multisig v2 transaction is a normal sender. They could be an AA account. I think basically if you want to migrate an account from multisig v2 to AA account. We have to find a way first to convert multisig account to a normal account with AA auth to seamlessly migrate. I think you are asking about this.

But this^ seems unrelated to AA design itself. It would be worth another AIP to explain this migration option.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enabling AA for an account means registering an account resource that contains a dispatchable auth function, right?

If enabling AA can be done via say a private entry function call, I think there won't be any special treatment needed for multisig v2 accounts. Since multisig v2 accounts are just accounts that happen to have a MulsitigAccount resource, they can just call the AA enabling function like any other accounts.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

at the minimum, other authentication resources (like MulsitigAccount) need to be removed, in order for AA to be able to be registered, right @lightmark ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think they can coexist. Any problem for that. Once you get the master signer in any means, you can opt to remove any auth resources.


- Multisig v2 account
- Sandbox or temporary account to isolate assets/risks, etc.
- Restricted permissions granted to trusted applications so users don’t need to sign every transaction.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be more appropriate to include a provision for resource locks here? I made a similar suggestion in the LightAccount AIP, but I believe this feature could be integrated into this proposal as well.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it should be included in #510

Copy link
Contributor

@igor-aptos igor-aptos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

address comments inline, and land

Comment on lines 47 to 50
- Multisig v2 account
- Sandbox or temporary account to isolate assets/risks, etc.
- Restricted permissions granted to trusted applications so users don’t need to sign every transaction.
- Delegation of asset management to a different account (semi-custodial model)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

at the minimum, other authentication resources (like MulsitigAccount) need to be removed, in order for AA to be able to be registered, right @lightmark ?

@thepomeranian thepomeranian merged commit 54c1344 into aptos-foundation:main Nov 12, 2024
alexfilip2 pushed a commit to bwarelabs/AIPs that referenced this pull request Nov 13, 2024
* [AIP] Account Abstraction

* Update and rename account_abstraction.md to aip-104.md

---------

Co-authored-by: Frances Liu <frances.liu168@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

Comments