Guardian & recovery
Key changes are never instant. Each one waits 24h, and a specific account can veto it.
Reading guard state from chain...
What the guardian can and can't do. The guardian can veto a pending policy change, veto a normal guardian change, start an owner recovery, and start an emergency sweep to the fixed exit account. It cannot pause or edit an active policy: only the owner can tighten or disable one.
owner
...
guardian
...
agent
...
exitimmutable
...
Guardian change
...
Owner recovery
...
Propose a new guardian
Owner or guardian. Activates after 24h unless the current guardian vetoes.
Cold-key guardian replacement
Exit (cold) account only. For when the guardian key itself is lost or stolen. Supersedes any pending guardian change; only the owner can veto.
Recover the owner
Guardian only. For a lost owner key. 24h delay; the current owner can veto.
Who can do what
Read from the contract source. The contract enforces every cell; the buttons above only save you a failed signature.
| Action | Owner | Guardian | Exit | Agent | Anyone |
|---|---|---|---|---|---|
| Tighten caps / remove recipients | instant | - | - | - | - |
| Loosen caps / add recipients | propose (24h) | - | - | - | - |
| Cancel a pending policy change | yes | veto | - | - | - |
| Activate a matured policy change | - | - | - | - | yes |
| Disable a token's policy | instant | - | - | - | - |
| Pause an ACTIVE policy | disable it | no | - | - | - |
| Propose new guardian (normal) | propose (24h) | propose (24h) | - | - | - |
| Veto a normal guardian change | no | veto | - | - | - |
| Propose new guardian (cold key) | - | - | propose (24h) | - | - |
| Veto a cold-key guardian change | veto | no | - | - | - |
| Propose owner recovery | - | propose (24h) | - | - | - |
| Veto owner recovery (starts 24h cooldown) | veto, any time | - | - | - | - |
| Activate a matured identity change | - | - | - | - | yes |
| Emergency sweep (to fixed exit only) | yes | yes | - | - | - |
| Pay inside caps | - | - | - | runner only | - |