Add ERC: Permissioned Pull by recurmj · Pull Request #1401 · ethereum/ERCs

recurmj · 2025-12-11T22:07:09Z

This PR proposes two related ERCs that together define a portable, revocable pull-permission primitive:

Permissioned Authorization Object (PPO)
- EIP-712 typed struct describing bounded, revocable consent to pull tokens.
- Chain-agnostic, portable across executors that adopt the same type.
- Intended as the shared “authorization primitive” layer.
Permissioned Pull Execution Interface
- Standard pull executor interface that consumes a PPO and executes transferFrom under strict rules.
- Defines pull(), nonce & revocation views, canonical events, and normative execution behavior.

Both drafts are aligned with the architectural analysis in RIP-000 / “The One-Shot Authorization Flaw in Digital Value Systems” and the updated RIP-001 thread. Philosophical framing has been removed; these drafts focus purely on:

defining a neutral, reusable EIP-712 Authorization object (PPO), and
a minimal, composable execution interface that can be implemented by any executor.

The intention is for these to serve as the canonical ERC-A / ERC-B split that James and others suggested earlier:

ERC-A: Authorization object (PPO)
ERC-B: Pull execution interface

I’m happy to adapt naming, file layout, or minor spec details to fit current ERC process preferences.

Add ERC-A: Permissioned Authorization Object (PPO)

Add ERC-B: Permissioned Pull Execution Interface

eip-review-bot · 2025-12-11T22:07:38Z

✅ All reviewers have approved.

abcoathup · 2025-12-12T01:23:48Z

@@ -0,0 +1,216 @@
+---
+eip: <to be assigned>


Suggested change

eip: <to be assigned>

eip: 8102

Assigning next sequential EIP/ERC/RIP number.
Numbers are assigned by editors & associates.

Please also update the filename.

abcoathup · 2025-12-12T01:24:28Z

@@ -0,0 +1,216 @@
+---
+eip: <to be assigned>
+title: Permissioned Pull Execution Interface


Suggested change

title: Permissioned Pull Execution Interface

title: Permissioned Pull

Interface seems superfluous in an ERC title. Note: I am not an editor.
Given you used Permissioned Pull in the discussion topic on Eth Magicians, you may want to go with that.

abcoathup · 2025-12-12T01:26:50Z

+title: Permissioned Pull Execution Interface
+description: Standard interface for executing pull-based transfers using Permissioned Authorization Objects (PPOs).
+author: Mats Heming Julner (@recurmj)
+discussions-to: https://ethereum-magicians.org/t/draft-erc-rip-001-permissioned-pull-standard-consented-flow-layer-for-digital-value/25931


Suggested change

discussions-to: https://ethereum-magicians.org/t/draft-erc-rip-001-permissioned-pull-standard-consented-flow-layer-for-digital-value/25931

discussions-to: https://ethereum-magicians.org/t/erc-8102-permissioned-pull/25931

Updated with assigned number and title

abcoathup · 2025-12-12T01:31:20Z

@@ -0,0 +1,217 @@
+---
+eip: <to be assigned>


Suggested change

eip: <to be assigned>

eip: 8103

Assigning next sequential EIP/ERC/RIP number.
Numbers are assigned by editors & associates.

Please also update the filename.

abcoathup · 2025-12-12T01:32:47Z

+title: Permissioned Authorization Object (PPO)
+description: "A portable, revocable EIP-712 authorization struct for bounded pull-based transfers."
+author: "Mats Heming Julner (@recurmj)"
+discussions-to: "https://ethereum-magicians.org/t/draft-erc-rip-001-permissioned-pull-standard-consented-flow-layer-for-digital-value/25931"


Each ERC should have a separate discussions thread

abcoathup · 2025-12-12T01:34:06Z

Please note, ERCs are not for promotion/marketing purposes.

abcoathup · 2025-12-12T01:34:29Z

Suggest splitting each ERC into a separate PR.

recurmj · 2025-12-12T17:44:36Z

Thanks for the guidance.

I’ve split the specification into ERC-8102 (execution) and ERC-8103 (authorization), updated filenames, cross-references, titles, and discussions-to links accordingly.

Let me know if anything else is needed.

Removed the word “standard” in description

abcoathup · 2025-12-15T03:54:05Z

@@ -0,0 +1,217 @@
+---
+eip: <8103>


Suggested change

eip: <8103>

eip: 8103

abcoathup · 2025-12-15T03:54:49Z

+title: Permissioned Authorization Object (PPO)
+description: "A portable, revocable EIP-712 authorization struct for bounded pull-based transfers."
+author: "Mats Heming Julner (@recurmj)"
+discussions-to: "https://ethereum-magicians.org/t/erc-permissioned-authorization-object/27135"


Suggested change

discussions-to: "https://ethereum-magicians.org/t/erc-permissioned-authorization-object/27135"

discussions-to: https://ethereum-magicians.org/t/erc-8103-permissioned-authorization-object/27135

abcoathup · 2025-12-15T03:55:02Z

+---
+eip: <8103>
+title: Permissioned Authorization Object (PPO)
+description: "A portable, revocable EIP-712 authorization struct for bounded pull-based transfers."


Suggested change

description: "A portable, revocable EIP-712 authorization struct for bounded pull-based transfers."

description: A portable, revocable EIP-712 authorization struct for bounded pull-based transfers.

Fix license link

Fix typo malleability

Added a security consideration line and fixed 8103 link to be consistent

Fixed 8103/8102 reference links for consistency

SamWilsn · 2026-02-02T21:29:43Z

+---
+eip: 8102
+title: Permissioned Pull
+description: Interface for executing pull-based transfers using Permissioned Authorization Objects (PPOs).


Suggested change

description: Interface for executing pull-based transfers using Permissioned Authorization Objects (PPOs).

description: Pull-based transfers using Permissioned Authorization Objects (PPOs).

If we cut out some obvious bits, you have more room for details. What is a PPO, for example.

SamWilsn · 2026-02-02T21:31:12Z

+This EIP defines a standard **pull executor interface** for executing token transfers under a Permissioned Authorization Object (PPO) as specified in [ERC-8103](./eip-8103.md).
+
+It specifies:
+
+- the `Authorization` struct used at execution time,
+- the `pull` function signature,
+- required view functions for nonce and domain separation,
+- canonical events and errors,
+- normative execution rules (validation, revocation, transfer).


This does a good job covering what your proposal is, but doesn't really include the purpose. Doesn't have to be long (that's what the motivation is for), but a sentence or two about why we need this proposal is usually good in the abstract.

SamWilsn · 2026-02-02T21:31:40Z

+
+## Specification
+
+### 1. Interface


Don't number your sections.

SamWilsn · 2026-02-02T21:32:07Z

+
+Compliant contracts MUST implement the following Solidity interface (or an ABI-compatible equivalent):
+
+~~~


I have no idea if our renderer will support this syntax. Best to stick with the traditional:

```solidity // ... ```

SamWilsn · 2026-02-02T21:35:53Z

+- Nonce marking MUST follow checks-effects-interactions; state changes MUST precede external calls.
+- Implementations MUST consider token quirks (fee-on-transfer, non-standard return values) and SHOULD document behavior with such tokens.
+- Time windows reduce exposure of leaked signatures; however, key security is still critical.
+- Malicious grantees cannot exceed `maxPerPull` in a single call, but they MAY call `pull` multiple times if the authorization semantic allows. Systems requiring cumulative caps SHOULD implement them in higher layers or registries.
+- Implementations MUST reject malleable signatures by enforcing [EIP-2](./eip-2.md) rules (low-`s` values and valid `v`), as specified in ERC-8103.


Requirements necessary to make a secure implementation should be included in the specification section, but do discuss their implications here.

recurmj · 2026-02-09T20:08:28Z

Appreciate the guidance here, thank you. Updates applied; happy to iterate further.

Co-authored-by: Sam Wilson <57262657+SamWilsn@users.noreply.github.com>

eip-review-bot

All Reviewers Have Approved; Performing Automatic Merge...

eip-review-bot

All Reviewers Have Approved; Performing Automatic Merge...

eip-review-bot

All Reviewers Have Approved; Performing Automatic Merge...

github-actions · 2026-07-01T21:51:52Z

The commit 7867c0f (as a parent of 0583229) contains errors.
Please inspect the Run Summary for details.

eip-review-bot

All Reviewers Have Approved; Performing Automatic Merge...

recurmj added 2 commits December 11, 2025 22:52

Create erc-ppo-authorization-object.md

dabf664

Add ERC-A: Permissioned Authorization Object (PPO)

Create erc-permissioned-pull-executor.md

e0d9d46

Add ERC-B: Permissioned Pull Execution Interface

recurmj requested a review from eip-review-bot as a code owner December 11, 2025 22:07

github-actions Bot added c-new s-draft t-erc labels Dec 11, 2025

github-actions Bot added the w-ci label Dec 11, 2025

eip-review-bot added e-consensus e-review labels Dec 11, 2025

eip-review-bot changed the title ~~ERC: Permissioned Authorization Object (PPO) & Permissioned Pull Execution Interface~~ Add ERC: Permissioned Pull Execution Interface Dec 11, 2025

abcoathup reviewed Dec 12, 2025

View reviewed changes

recurmj added 2 commits December 12, 2025 18:23

Update and rename erc-ppo-authorization-object.md to erc-8103.md

b41aca8

Update and rename erc-permissioned-pull-executor.md to erc-8102.md

214bbd0

eip-review-bot changed the title ~~Add ERC: Permissioned Pull Execution Interface~~ Add ERC: Permissioned Pull Dec 12, 2025

Rename erc-8103.md to erc-8103.md

048fb18

github-actions Bot added w-ci and removed w-ci labels Dec 12, 2025

Update erc-8102.md

4c1d55a

Removed the word “standard” in description

abcoathup reviewed Dec 15, 2025

View reviewed changes

Update erc-8103.md

44c4ff4

github-actions Bot removed the w-ci label Dec 15, 2025

recurmj added 3 commits December 15, 2025 09:03

Update erc-8102.md

096fbdf

Update erc-8102.md

b328ff6

Fix license link

Update erc-8103.md

16aea74

Fix license link

github-actions Bot added the w-ci label Dec 15, 2025

recurmj added 3 commits December 15, 2025 09:38

Update erc-8102.md

ecd24f1

Update erc-8103.md

2e0496a

Update erc-8102.md

98004fe

github-actions Bot removed the w-ci label Dec 15, 2025

recurmj added 3 commits December 15, 2025 11:53

Update erc-8103.md

323023e

Fix typo malleability

Update erc-8102.md

4ec4150

Added a security consideration line and fixed 8103 link to be consistent

Update erc-8103.md

e76e48b

Fixed 8103/8102 reference links for consistency

recurmj requested a review from abcoathup December 25, 2025 20:35

SamWilsn reviewed Feb 2, 2026

View reviewed changes

recurmj added 2 commits February 9, 2026 21:01

Update erc-8102.md

840b79c

Update erc-8103.md

d295277

github-actions Bot added the w-ci label Feb 9, 2026

SamWilsn reviewed Jul 1, 2026

View reviewed changes

Comment thread ERCS/erc-8103.md Outdated

Comment thread ERCS/erc-8103.md Outdated

Comment thread ERCS/erc-8103.md Outdated

Comment thread ERCS/erc-8102.md Outdated

Comment thread ERCS/erc-8102.md Outdated

Apply suggestions from code review

7867c0f

Co-authored-by: Sam Wilson <57262657+SamWilsn@users.noreply.github.com>

SamWilsn approved these changes Jul 1, 2026

View reviewed changes

eip-review-bot enabled auto-merge (squash) July 1, 2026 21:43

eip-review-bot approved these changes Jul 1, 2026

View reviewed changes

SamWilsn disabled auto-merge July 1, 2026 23:09

hilljessica8787-dot approved these changes Jul 2, 2026

View reviewed changes

eip-review-bot enabled auto-merge (squash) July 2, 2026 13:19

eip-review-bot approved these changes Jul 2, 2026

View reviewed changes

	title: Permissioned Pull Execution Interface
	title: Permissioned Pull

	discussions-to: https://ethereum-magicians.org/t/draft-erc-rip-001-permissioned-pull-standard-consented-flow-layer-for-digital-value/25931
	discussions-to: https://ethereum-magicians.org/t/erc-8102-permissioned-pull/25931

	discussions-to: "https://ethereum-magicians.org/t/erc-permissioned-authorization-object/27135"
	discussions-to: https://ethereum-magicians.org/t/erc-8103-permissioned-authorization-object/27135

	description: "A portable, revocable EIP-712 authorization struct for bounded pull-based transfers."
	description: A portable, revocable EIP-712 authorization struct for bounded pull-based transfers.

	description: Interface for executing pull-based transfers using Permissioned Authorization Objects (PPOs).
	description: Pull-based transfers using Permissioned Authorization Objects (PPOs).


		Compliant contracts MUST implement the following Solidity interface (or an ABI-compatible equivalent):

		~~~

Uh oh!

Conversation

recurmj commented Dec 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

eip-review-bot commented Dec 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

abcoathup Dec 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

abcoathup commented Dec 12, 2025

Uh oh!

abcoathup commented Dec 12, 2025

Uh oh!

recurmj commented Dec 12, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

recurmj commented Feb 9, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

eip-review-bot left a comment

Choose a reason for hiding this comment

Uh oh!

eip-review-bot left a comment

Choose a reason for hiding this comment

Uh oh!

eip-review-bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

eip-review-bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

recurmj commented Dec 11, 2025 •

edited

Loading

eip-review-bot commented Dec 11, 2025 •

edited

Loading

abcoathup Dec 12, 2025 •

edited

Loading