HIP-23: Istanbul DeFi Application Patterns v1.1

[Moskyera]

Summary

HIP-23 documents reusable post-Istanbul DeFi composition patterns (P1–P5) for wallets, indexers, and integrators. No consensus fork specification, templates, audit package, and integration tests only.

Status: v1.1 Ready

What's included

• Normative spec: doc/HIP23.md + doc/HIP23_templates.md
• Audit package: threat model, invariants, traceability (26/26 MUST), findings register, external audit brief
• Wallet checklist + indexer dictionary + stable error classifier (tests/common/hip23_errors.rs)
• Cross-implementation test vectors: tests/fixtures/hip23_test_vectors.json
• Test suites: regression, adversarial, stress, production-path, audit-strict, chain integration, TEX replay, proptest, guard error codes
• CI: .github/workflows/hip23.yml (hip23_ + workspace)
• Optional fuzz: fuzz/fuzz_targets/tex_cell_act_parse.rs

Test gate

cargo test hip23_ -- --nocapture
cargo test --workspace

87 named tests + 9 proptest properties (64 cases each).

Patterns

ID	Pattern
P1	Atomic multi-asset TEX swap
P2	Time-boxed guarded payment
P3	BalanceFloor protected transfer
P4	HIP20 issuance + TEX distribution (two-tx)
P5	AST conditional settlement

Not in scope

• Consensus / fork changes
• HIP-25 (separate branch)
• HVM companion contracts (v2 future)

Reviewer notes

• Most tests use fast_sync=true for pattern semantics; production-path + audit-strict use fast_sync=false for sig/duplicate-tx checks.
• TEX signatures are replayable by design wallets MUST pin full composed tx (documented in threat model + wallet checklist).