[PROPOSAL] RFP-001 — Admin Authority Library

[bristinWild]

Applicant

GitHub: https://github.com/bristinWild

Track record:

• LP-0012 winner (merged) — Structured Event System for LEZ Programs
• LP-0013 submitted — Token Program Improvements: Authorities (PR [PROPOSAL] RFP-002 — Freeze Authority Library #56, validation passed)

---

Relevant Experience

• Built lez-authority — a standalone, program-agnostic authority library for LEZ
  as part of LP-0013. Already implements all 4 hard functionality requirements of RFP-001.
• Deep familiarity with the LEZ/nssa codebase — ProgramOutput, AccountWithMetadata,
  is_authorized, guest program patterns.
• Integrated lez-authority into the LEZ token program as a real production use case.
• Experience with SPEL from LP-0013 IDL generation work.

---

Proposed Solution

What's Already Built

The core library lez-authority is fully implemented and battle-tested as part of LP-0013:

• Authority set at initialization — AuthoritySlot::new(key)
• Transfer to new signer — slot.set(signer, Some(new_key))
• Revoke permanently — slot.set(signer, None)
• Gate privileged instructions — slot.check(signer) used in real production token program

Repository: https://github.com/bristinWild/logos-execution-zone
Crate: lez-authority/src/lib.rs
video demo link - https://www.youtube.com/watch?v=fJWbhobNIFM

All 4 hard requirements already satisfied. 7 unit tests passing. CI green.

Remaining Work for Full RFP-001 Compliance

1. SPEL framework integration — annotation/macro support so programs can enable
   admin authority with minimal boilerplate
2. Standalone sample program — dedicated LEZ program demonstrating full lifecycle
3. Documentation — step-by-step SPEL integration guide
4. Transaction overhead measurement — document additional bytes on gated instructions

---

Architecture

lez-authority/ (already built, production-tested)
├── src/lib.rs — AuthoritySlot, AuthorityError
└── tests — 7 unit tests, all passing

admin-authority-program/ (new standalone sample program)
├── core/src/lib.rs — AdminState PDA, Instruction enum
├── src/ — handlers: init, transfer, revoke, set_config
└── methods/guest/src/main.rs — guest binary

spel-authority/ (SPEL integration)
├── src/lib.rs — #[admin_authority] macro/annotation
└── examples/ — end-to-end usage example

---

Implementation Plan

1. Standalone admin-authority LEZ program using lez-authority — all 4 instructions,
   deployed on devnet, tests passing (Week 1)
2. SPEL framework integration — minimal boilerplate for consumer programs (Week 2)
3. Documentation, transaction overhead measurement, sample program, CI green (Week 3)

---

Tech Stack

• Rust (LEZ guest program + lez-authority crate)
• logos-scaffold for local development and deployment
• SPEL framework for IDL and annotation integration
• LEZ wallet CLI for integration testing

---

Timeline

3 weeks

---

Budget

$5,000 USD

Milestone breakdown:

• Milestone 1 (Week 1): Standalone admin-authority program + tests + devnet deployment — $2,000
• Milestone 2 (Week 2): SPEL framework integration — $2,000
• Milestone 3 (Week 3): Documentation + overhead measurement + sample program — $1,000

---

Why Choose This Proposal

• Core library already exists and is production-tested — the hardest part is done.
• Real integration proof — lez-authority gates real token minting in LP-0013.
• Established credibility — LP-0012 winner, LP-0013 submitted and validated.
• Faster delivery — Milestone 1 can ship in days, not weeks.

---

License

MIT + Apache-2.0

---

Open Source

Yes, fully open source on GitHub.

[bristinWild]

Unlike other proposals that start from a standalone PoC, lez-authority is already integrated into the LEZ token program handling real production token minting authority , reviewed and approved by the Logos team as part of LP-0013 (PR #56, validation passed).

Repository showing production integration:
https://github.com/bristinWild/logos-execution-zone/blob/main/lez-authority/src/lib.rs

[bristinWild]

Implementation Update -

Working implementation now available:
Repository: https://github.com/bristinWild/spel/tree/feat/rfp-001-admin-authority
What's delivered so far:

spel-admin-authority - standalone authority library with AdminState, assert_admin(), transfer_admin(), revoke_admin() - 9 unit tests passing
spel-admin-authority-sample - complete SPEL program demonstrating all 4 instructions (initialize, set_config_value, transfer_admin, revoke_admin) - 8 integration tests passing
Full workspace compiles clean against current SPEL main

All 4 hard functionality requirements from RFP-001 are satisfied:

1. Admin authority set at initialization
2. Transfer admin to new signer
3. Revoke admin permanently
4. Privileged instructions gated by admin authority (set_config_value)

Next: SPEL macro integration (#[require_admin] annotation) - in progress.

[bristinWild]

Implementation Update #2 - SPEL Macro Integration Complete

#[require_admin] annotation is now working in spel-framework-macros.

Branch: https://github.com/bristinWild/spel/tree/feat/rfp-001-admin-authority
Usage - single annotation gates any instruction:

rust#[instruction]
#[require_admin(config)]
pub fn set_config_value(
#[account(mut, pda = literal("config"))]
config: AccountWithMetadata,
#[account(signer)]
admin: AccountWithMetadata,
new_value: u64,
) -> SpelResult {
// Admin check injected automatically - no boilerplate
}

Full workspace tests passing:

spel-admin-authority: 9 tests ✅
spel-admin-authority-sample: 8 tests ✅
All existing SPEL tests: 78 + 39 + 77 passing ✅
Zero regressions

All 4 hard functionality requirements satisfied + SPEL integration complete.

[bristinWild]

Implementation Update #3 - Draft PR open on logos-co/spel

Draft PR: logos-co/spel#212
The PR adds spel-admin-authority, spel-admin-authority-sample, and #[require_admin] macro integration to spel-framework-macros.
All 17 tests passing, 0 regressions across the full SPEL workspace.