WATCH ONLY
YES
WALLET / SECURITY
AENET Wallet Security
AENET Wallet security — external signing and private-key isolation. Watch-only architecture with no online private keys and a separate external signer.
The wallet's public security posture is watch-only: no online private keys, no online signing, mainnet blocked during development, and a strict public/private boundary.
ONLINE SIGNING
DISABLED
PRIVATE KEYS
EXTERNAL
MAINNET
BLOCKED
PUBLIC WALLET CONTROL
NONE
Watch-only architecture
The wallet observes and prepares intents but never signs. Online signing is disabled by design.
No online private keys
Private keys are stored outside the online wallet domain. The public side never sees, derives or touches them.
External signer separation
Signing happens only on an external hardware signer across the signing boundary. The online domain produces unsigned PSBT intents.
Mainnet blocked during development
Mainnet settlement is blocked during development; testing runs on a private regtest network.
Localhost private runtime
The wallet runtime is local and private, never exposed on the public side.
Audit hash-chain and durable state
Durable state and an audit hash-chain support verification of public-safe records without disclosing wallet internals.
Public/private boundary
AENET Cloud publishes only sanitized snapshots. There is no path from the public web to the wallet runtime.