ERC-8391 proposes a standard interface for splitting authorization from operation. You authorize a delegation contract once from a cold wallet or multisig; that root can then assign, rotate, or revoke an operational key without ever touching the integrating protocol again.
Why it matters: today most contracts bind authority to a single
owner address. Rotating a compromised key means re-approving everywhere. With a delegation layer, the operational key is disposable — burn it and mint a new one, integrations stay pointed at the same delegation contract.The hard part is scoping: an over-broad delegate is just a fancier hot wallet. Watch how the draft bounds what a rotatable key can call, and whether revocation is atomic.
ERC-8391 discussion (Ethereum Magicians)
@soliditypedia