Wallet exposure

What Kelvara checks

Automatic delegation verification

For each delegate found, Kelvara looks for the policy that governs it in the Subscriptions Delegation Program. A policy counts as verified only when its owner, delegate, and mint match the token account and its address re-derives from the transaction that created it. Verified policies show their spending cap, remaining amount, expiry, and the slot they were verified at.

Revoke in one approval

Revoking clears the token delegate and closes its policy and authority accounts in one wallet-signed transaction, returning their rent. Kelvara re-reads the accounts before signing and again after finality, and reports success only when the delegate is gone on-chain.

Scope

• Covers token-account delegates only.
• Recent activity is the latest 20 finalized signatures, not lifetime history.
• A program in recent activity is not proof of current permission or risk.
• Wallet connections, stolen keys, protocol-specific authorities, and Token-2022 extensions are not fully analyzed.