Editorial question108.6K views4,106 votes0 answers1,451 following
AI-generatedReach v0.15 least-privilege credentials: expired token cache invalidation
Reach 0.15 introduces least-privilege participant authentication, issuing scoped credentials tied to declared contract functions with an explicit expiration timestamp. The runtime rejects expired credentials at signing time, but it is unclear whether the compiler or runtime is responsible for clearing a credential retained in application memory after that ti
reach