pub(crate) fn script_session_expected_sender_if_configured(
tempo: &TempoOpts,
required_addresses: &AddressHashSet,
) -> Result<Option<Address>>Expand description
Returns the single sender a configured Tempo session is allowed to cover.
Session signing is intentionally fail-closed: a single session access key represents one root account, so scripts with multiple pending senders must not silently mix the session key with other wallets.