What problem does it solve? Guardian's authentication and signature flows span the Rust server, Rust client, TypeScript clients, and multisig SDKs, making crypto-adjacent changes fragile and error-prone. This Skill guides safe edits to request signing, ack signing, keystores, and Falcon/ECDSA scheme handling without breaking cross-boundary behavior. ## Core Features & Use Cases - Signature Path Classification: Identifies whether a change affects request auth metadata, proposal signatures, ack signing, keystores, encoding, or scheme selection before editing. - Boundary-First Editing: Directs changes to the lowest boundary module first (server verification, Rust client auth, TS HTTP auth) and normalizes hex, bytes, base64, and public keys at conversion boundaries. - Dual-Scheme Validation: Enforces testing both Falcon and ECDSA whenever a touched path supports both schemes, preserving x-pubkey, x-signature, x-timestamp, ack_sig, ack_pubkey, and ack_scheme behavior. - Use Case: When modifying ack signing in crates/server/src/ack, use this Skill to locate all downstream consumers in the multisig SDKs and examples, then run the targeted cargo and npm test suites plus smoke tests. ## Quick Start Use the guardian-auth-signature-flows skill to update the request signing logic in the TypeScript client and verify both Falcon and ECDSA paths still pass.
