CMSP: Bounded-Consent Primitive for Non-Custodial Recurring Payments (Design Proposal)

This post introduces CMSP (Capped Mandate Subscription Protocol) , a design-complete primitive for non-custodial recurring payments, shared for technical feedback within the Cosmos ecosystem. CMSP models recurring transfers as explicit, bounded mandates enforced by smart contracts (CosmWasm). The focus is on deterministic risk bounds, explicit consent, and safe failure modes . This is not a product, not an on-chain governance proposal yet, and does not assume execution guarantees. Motivation Many subscription-like patterns in Cosmos still use custodial escrow contracts or rely on off-chain automation with unbounded risk. CMSP avoids: • pooled custody, • unlimited approvals, • implicit trust in execution. Key Properties • Zero custody — contracts never hold user value long-term • Mandatory expiration — no indefinite mandates • Hard per-period caps — explicit worst-case loss • Permissionless execution — executor authority not required CosmWasm Considerations The reference implementation uses: • message atomicity • CW20 transfers • signature-bound nonces No pooled balances and clean failure semantics. Reference • Repository: GitHub…

Excerpt (1199 of 1708 characters). Read the whole post on the forum ↗