Learn / Wallets

Policies and Covenant Launch

Rules a wallet can't break, intent a jury reads, and the questions only a jury can answer.

Rules are checks any computer runs on the decoded transaction: which programs it may call, how much may leave per transaction and per window, to whom, and on what release schedule. A violation is final.

Intent and judgment are for the jury: what the wallet is for, and questions such as "does this look like a dump on holders?".

Covenant Launch. The creator's share of a new token sits in one visible wallet that may only release it on a published schedule, to published addresses. Buyers read the covenant before they buy. The signer enforces it on every transaction.

Always refused: unreadable transactions, handing over token accounts, removing the signer, lowering the threshold so the humans can pass alone, shortening the time lock, and Squads spending limits.

Status. Built in core (SIGN-002): rules, the three templates (covenant launch, treasury, upgrade authority), tests. Design: VIP-0011.

Related: The Judiciary Signer, Context is evidence