keccak(MAGIC || rlp([chain_id, address, nonce])). An account would need to raw sign over the above hash and submit it as the signedAuthorization input.
Here is a script to construct and sign the 7702 the authorization:
Delegation
Delegate to Otim
Create a new delegation to Otim
The RLP-encoded 7702 authorization is in the following format: