Detect Unnecessarily Deep Authorization Trees

[mijinummi]

🧠 Concept

Detect authorization structures with excessive nesting.

⚠️ Problem

Deep authorization chains increase execution complexity and make security review harder.

📁 Implementation Scope

• packages/rules/soroban/auth/tree/
• packages/analyzers/soroban/auth/

✅ Requirements

• Measure authorization depth
• Define configurable thresholds
• Identify deep paths
• Provide simplification guidance

🎯 Acceptance Criteria

• Authorization depth measured
• Threshold configurable
• Deep trees detected
• Recommendations generated

[dimin4241-svg]

Hi, I’d like to take on #918. I’ve worked with Soroban/Rust analyzers and can add depth tracking that follows nested authorization branches, keeps thresholds configurable, and produces actionable guidance without flagging ordinary trees. I’ll align it with the existing rule/analyzer registration, add focused fixtures and tests, and run the repository checks within 2 days. Please assign it to me through GrantFox.

[oraimoitel]

KINDLY ASSIGN ME THIS ISSUE PLEASE, I AM STILL YET TO BE ASSIGNED

[grantfox-oss]

🦊 GrantFox — @oraimoitel has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #918)
2. Your PR will be reviewed by the MDTechLabs maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!

@oraimoitel's PR #945 was approved and merged by @mijinummi.

🏆 @oraimoitel: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (809 total points). Track your full progress on GrantFox.

👏 Great work, @oraimoitel! Keep contributing to MDTechLabs.