Security

The state of your vault as the enclave sees it. Every value here can be confirmed independently with the verifier.

Verify independently
root quorumLocked
2 of 3

Any two of your three credentials authorise an approval. Vault holds none of them. Our key was removed from this quorum when your vault was created and cannot be added back.

sub-organisation

b4c2f8a1-7d3e-4f92-a1c5-8e6d4b2a9f13

Record this. The verifier prints it back so nobody can point you at a decoy vault.

Root credentials

root

Device

MacBook Pro · Touch ID

Added
Last used
root

Second factor

fz@example.com · one-time code

Added
Last used
root

Recovery

YubiKey 5C · offline

Added
Last usednever

Read-only credentials

read-only

Verifier

Generated in your browser

Added
Last used

Policies in the enclave

Shown exactly as stored. The verifier returns the same strings.

6 / 100 slots
ALLOWApproval — Ledger Nano 12.5 SOLpol_8f3a2c
solana.tx.recent_blockhash == 'EkSnNWid2cvwEVnVx9aBqawnmiCNiDgp3gUdkDPTKN1N' && solana.tx.instructions.count() == 3 && solana.tx.address_table_lookups.count() == 0 && solana.tx.transfers.all(t, (t.to == '7bXgN4mKpQvR2sT8uY1wZ3aB5cD6eF7gH8iJ9kL0mN1o' && t.amount == 12125000000) || (t.to == 'FEEwa11etVaU1t9K3nqRp7sZq2xW8yG4hJ5kL6mN7oP8' && t.amount == 375000000))
ALLOWApproval — Coinbase windowpol_2b91ff
solana.tx.instructions.count() == 3 && solana.tx.address_table_lookups.count() == 0 && solana.tx.transfers.all(t, t.to == '3kL9mN2oP4qR6sT8uV1wX3yZ5aB7cD9eF1gH3iJ5kL7m' && t.amount <= 25000000000)
DENYGuard — no credential mutationpol_guard1
activity.resource == 'CREDENTIAL' || activity.resource == 'USER'
ALLOWGuard — policy cleanup onlypol_guard2
activity.resource == 'POLICY' && activity.action == 'DELETE'