Note

Only include wallet-controlled addresses and the actual staking key when determining required signers and building Ledger Plutus payloads, skipping foreign keys.

• Security/Signer validation:
  • common/signatureUtils.ts:
    • getAddressAddressing: returns null unless wallet controls the address; respects strict (partial=false) mode.
  • tx/ledger/plutus.ts:
    • Filters requiredSigners to include only paths for addresses controlled by the wallet.
  • tx/ledger/signers.ts:
    • Adds staking key path only if the required signer matches the wallet’s staking key hash.
    • For payment key signers, includes addressing only if the constructed base address is wallet-controlled; skips otherwise (throws in strict mode).

^{Written by Cursor Bugbot for commit ae4abe8. This will update automatically on new commits. Configure here.}