Account Abstraction

When to Use

• Reviewing account contract validation and execution paths.
• Designing session-key policy boundaries.
• Validating nonce and signature semantics.

When NOT to Use

• General contract authoring not involving account semantics.

Quick Start

1. Confirm __validate__ enforces lightweight, bounded checks.
2. Confirm __execute__ enforces policy and selector boundaries.
3. Verify replay protections (nonce/domain separation) for all signature paths.
4. Add regression tests for each fixed session-key or policy finding.
5. Run cairo-auditor for final AA/security pass before merge.