Implement Multisig Owner Removal Safety

[thlpkee20-wq]

Description

Develop and harden the Multisig Owner Removal Safety capability with production-grade behavior, explicit security assumptions, and deterministic test coverage.

Requirements and context

• Must be secure, tested, and documented.
• Should be efficient and easy to review.
• Keep scope focused on contracts code only.

Suggested execution

• Fork the repo and create a branch.
• git checkout -b feature/contracts-020-multisig-owner-removal-safety
• Implement changes.
• Write implementation: Revora-Contracts/src/lib.rs
• Write comprehensive tests: Revora-Contracts/src/test.rs
• Add documentation: Revora-Contracts/docs/multisig-owner-removal-safety.md
• Include NatSpec-style or equivalent developer-focused comments where relevant.
• Validate security assumptions and abuse/failure paths.

Test and commit

• Run targeted tests and full suite before merge.
• Cover edge cases, auth boundaries, and invalid inputs.
• Include test output and security notes in PR updates.

Example commit message

feat: implement multisig-owner-removal-safety

Guidelines

• Minimum 95 percent test coverage.
• Clear documentation.
• Timeframe: 96 hours.

[Vibeofkd]

@Vibeofkd has applied to work on this issue as part of the Stellar Wave Program's 3rd wave.

I can quickly understand the issue and deliver a clean, reliable solution. I focus on identifying the root cause, fixing it efficiently, and ensuring the result is stable and easy to maintain.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Vibeofkd to this issue.

[drips-wave]

@thlpkee20-wq Vibeofkd could not be assigned to this issue because they have reached the maximum of 4 accepted assignments per organization in the current wave of the Stellar Wave Program.

The assignee has been removed. Please choose a different contributor.

[Escelit]

@Escelit has applied to work on this issue as part of the Stellar Wave Program's 3rd wave.

Hi 👋, I’d like to take on this issue.

I’m particularly interested in secure smart contract design, and multisig owner management is a critical area where safety guarantees and edge-case handling are essential. Owner removal, if not carefully implemented, can introduce risks like accidental lockout or unauthorized control shifts, so I’d approach this with a strong focus on correctness and security.

For this task, I’d design safeguards around owner removal to ensure proper authorization, prevent invalid states (e.g., removing the last owner or dropping below a required threshold), and enforce clear invariants throughout the contract. I’ll also explicitly define and document security assumptions, including potential abuse scenarios and failure paths.

On the testing side, I’ll implement comprehensive and deterministic tests covering edge cases such as threshold boundaries, repeated removal attempts, invalid inputs, and authorization checks. I’ll aim for the required 95%+ coverage while keeping tests readable and maintainable.

I’ll keep the implementation efficient and scoped to the contracts layer, add clear developer-facing documentation, and ensure the changes are easy to review.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Escelit to this issue.

[drips-wave]

Congratulations, @Escelit! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on March 30, 2026.

🧑‍💻 @Escelit: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊