A draft ERC for Ethereum proposes short-lived, revocable tokens that limit accounts to specific operations, aiming to reduce risks from broad permissions that can remain active over time.
The broader Secure Transaction Verification and Authorization (STVA) draft names fund transfers, implementation upgrades and module installations as examples of actions that may receive separate authorization. Each token in the scoped-capability design would have a validity window, and its issuer could revoke it.
A token could identify the authorized account and target, and set a limit on transaction value. A verifier would check whether a proposed transaction falls within those terms. The design supports signatures using EIP-712 typed data or ERC-1271, and could tie an authorization to a transaction simulation.
Revocation could be managed through a revocation list or an on-chain registry. The draft also discusses off-chain lists.
The proposal presents narrower permissions as a response to risks associated with broad, long-lasting approvals. It remains a draft, with open questions about how to represent an action’s scope and how strongly to link authorization to simulation results.
