Hey @chrishobcroft, thanks for driving this forward. Reducing the funds at risk on gateways is an important next step for network security, and the recent Inc-node key compromise made that even clearer. The amended proposal, with a cap on what a signing key can commit, is a strong direction.
We just opened a forum post on protocol security to start a broader discussion on security as AI tooling makes attacks faster and cheaper. It references this thread as a next step for the gateway side.
Since the gateway/signer side might change with Livepeer 2.0, it might makes sense to pick this up once the 2.0 litepaper is out. In the meantime, the protocol team is happy to work with you directly to move it forward, so gateways can get the same kind of protection LIP-118 gave orchestrators.