01Root authority
Your passkey is the key
Root actions are authorized by a signature your device makes and the chain verifies. The account is designed so no single hot key can drain it.
Warden · smart-account wallet for Solana
Not ready yet.Here’s exactly how far.
Warden is a Solana wallet where a passkey holds root authority, everyday signing runs on scoped session keys, and the rules protecting your funds are enforced by an on-chain program — not by the interface asking you to click. It isn’t live. The receipt here is the real build ledger, printed from the repository.
building in the opennot livenot externally audited
Counts taken from the repository’s invariant and review ledgers at the commit shown. A number that goes down is as publishable as one that goes up.
What we’re building
A default keypair wallet is one signature from empty.
One hot key signs everything, every approval is all-or-nothing, and the only thing between a dApp and your balance is a popup you’ve learned to click through. Warden moves custody into the place the funds actually live.
02Everyday signing
Session keys that expire
Routine activity runs on scoped keys with their own limits and lifetime, so a compromised session is a bounded loss instead of the whole balance.
03Enforcement
Policy lives on-chain
Spending limits and refusals are enforced by the program itself. An interface can promise anything; a program has to be argued with in code.
Root → session → program. Each layer is enforced by the one below it, never by the popup.
No waitlist · nothing to sign up for
Watch it get built.
The repository, the invariant ledger, and every review round are public — the same evidence we use to decide whether it’s ready.
Invariant ledger
100 rows · 66 test-covered · 32 unimplemented · 2 llm-asserted — a correct primitive is not a satisfied invariant.
docs/security/INVARIANTS.mdReview runs
142 adversarial rounds — zero-finding rounds are recorded too, because silence on a seeded invariant is a failure, not a pass.
docs/security/REVIEW-RUNS.jsonlFindings scorecard
286 rulings · 16 critical · every one adjudicated by a human ruling or an independent artefact, never by the model’s own claim.
docs/security/REVIEW-SCORECARD.jsonlThreat model & release integrity
What we defend against, and how a shipped build proves it is the one that was reviewed.
docs/security/THREATMODEL.md