Security model

Bounded authority, independent validation, encrypted storage, and fail-closed evidence.

Security principles

Bounded authorization

Exact position, destination, instructions, signer set, and fee policy.

Independent validation

Decode, simulate, and check before and after signing.

Fail closed

Unknown evidence or transaction mismatch blocks trust.

Program upgrades

A stable program address does not imply stable code. Code change requires quarantine and renewed validation before earlier authorization can remain trusted.

Storage detail

Signed authorization is encrypted at rest where protection enrollment applies. Encryption protects storage; exact-byte validation protects authorization semantics.

Verified against current application contracts · 29 October 2026

Support [email protected] · General [email protected] · X · LinkedIn · Terms · Privacy