Skip to main content

Wallet Roles and Policies

Wallets in Fased are not interchangeable. Each wallet has a permanent purpose, a policy lane, and a different automation boundary. The recommended operating model is:
Agent wallet  = normal approved work, Marketplace order actions, skills, sends
Mining wallet = Satcoin mining actions and mining/operator proof
Vault wallet  = protected storage and optional Fased Network bond authority
External addr = read-only balance checks or send destination, never a local source

Role map

RoleUse it forDo not use it for
AgentChat sends, Marketplace order actions, invoices, skill/plugin wallet actions, small working balances, reviewed wallet actionsSatcoin mining, Vault storage, bond authority
MiningSatcoin mining start/stop/fund/commit/withdraw paths and mining historyMarketplace buying, ordinary chat sends, skills, invoices
VaultManual-first storage, higher-value balances, recovery separation, optional Fased Network bond assignmentRoutine automation, Marketplace order actions, mining
External Solana addressRead-only SOL/SPL balance checks or destination address for manual/approved sendsLocal signing source
Bond is not a fourth wallet purpose. Fased Network bond authority is an assignment that must point to a Vault wallet.

How to enable

Use onboarding, wallet CLI, or the Wallets page:
  1. Create or import an Agent wallet.
  2. Set one Agent wallet as the primary Agent fallback if you want approved actions to have a default.
  3. Create or import the singleton Mining wallet before SAT mining.
  4. Create or import a Vault wallet for protected storage or Fased Network bond.
  5. Enable chains and token caps in wallet runtime policy.
  6. Enable protected custody or split-key/passkey flows for wallets that require stronger unlock.
  7. Keep the Agent wallet funded only for the amount of work it is allowed to do.
The primary Agent wallet is only a fallback. Exact wallet requests should use the handle.
@wallet:agent
@wallet:agent-1
@wallet:mining
@wallet:vault

Chat behavior

Chat wallet requests should be precise. Use exact local handles:
Show all balances for @wallet:agent.
Show SOL and SPL assets for @wallet:agent-1.
Show all balances for @wallet:mining.
Show the vault SOL balance for @wallet:vault.
Read-only wallet actions can target Agent, Mining, or Vault handles. They should not fall back to solana-1 or any other default when a handle is present. External Solana addresses are read-only balance targets:
Show SOL and SPL balances for 4ey8zYsSo9...nfXWVg5g.
Risky actions are narrower:
  • prepare and send require an Agent wallet source
  • advanced wallet actions, recurring wallet-action plans, and scheduled sends use the Agent-only wallet_action tool
  • Mining and Vault wallets are rejected as chat automation sources
  • destination can be a raw address or a receive handle like @wallet:vault
  • policy still checks chain, token, amount, direct signing, skill permission, custody state, and approval path
Example:
Send 0.1 SOL from @wallet:agent to @wallet:vault.
This resolves the Agent wallet as the source and the Vault wallet as the receive address. It does not make the Vault wallet an automation source.

Manual send in Wallets

The Wallets page should be treated as the operator control surface. Use it when you need:
  • a visible source wallet selector
  • balances per wallet handle
  • manual review before a send
  • destination as @wallet:<id> or an external address
  • custody unlock prompts
  • transaction records and approval state
Manual send can pick from local wallet handles. External addresses remain valid destinations. For chat and channel examples, see Wallet Chat and Channels.

Marketplace use

Marketplace order actions use the Agent wallet. Buyer flow:
  1. Buyer starts checkout from a Marketplace listing.
  2. No funds move at checkout start.
  3. Buyer clicks Pay.
  4. Agent wallet sends to the seller payee address under wallet policy.
  5. Order records tx, invoice, receipt, order evidence, delivery, and result.
  6. Seller Sales receives the inbound order envelope and validates evidence.
Seller flow:
  1. Seller publishes an offer backed by a real manual or automated service path.
  2. Seller Agent wallet or configured payee receives the order funds.
  3. Seller Sales shows invoice, receipt, order evidence, and delivery state.
  4. Reviews or disputes reference saved evidence.
Mining wallets and Vault wallets are not Marketplace order-action wallets.

Skills, plugins, and automation

Skills and plugins may request wallet actions, but policy decides what is allowed. Current policy boundary:
  • skills can see wallet tools only through the selected Agent’s tool surface
  • risky wallet actions require a wallet action manifest or explicit allowlist
  • skill origin and registry allowlists can reject wallet access
  • wallet policy caps still apply even when a skill is approved
  • disabled skills cannot use wallet tools
  • skills can request optional route actions, schedule plans, scheduled sends, and trigger-order actions only when their wallet action grant includes those actions
  • custom, workspace, and catalog-installed skills cannot use Mining or Vault wallets; only the built-in Satcoin mining runtime and bundled SAT mining skill use the @wallet:mining path
Target behavior for future personas:
  • skills inherit wallet access only through an approved persona or tool policy
  • each persona can define allowed wallets, assets, routes, max spend, cadence, data sources, and approval requirements
  • personas should make wallet authority easier to reason about, not broader than the current Agent-only wallet action grants
  • data skills can inform a wallet action, but they do not bypass wallet policy

Advanced and scheduled wallet actions

Advanced and scheduled wallet work should use the Agent wallet and clear policy. Supported action shapes:
  • reviewed sends
  • autonomous sends when Agent policy allows them
  • invoice or order action
  • scheduled sends
  • Marketplace order action
  • skill/plugin wallet task with manifest permissions
  • inspected token-action routes
  • reviewed trigger-order actions when configured
  • recurring wallet-action plans through Tasks and wallet_action.schedule_plan
  • event-triggered wallet actions under explicit policy
Maturing action shapes:
  • persona-reviewed wallet plans
  • recurring Marketplace subscriptions
Required policy for automation:
  • allowed wallet role: Agent
  • allowed chain and asset
  • max amount per action and period
  • allowed destination or venue
  • approval mode
  • schedule or trigger source
  • receipt storage
  • emergency stop

Mining use

Mining uses the Mining wallet, the Mining page, and the dedicated chat handle:
@mining
Supported command examples:
Check @mining status and readiness.
Start @mining with @wallet:mining.
Stop @mining.
Deposit 1 SOL into @mining capital.
Set @mining commit to 0.5 SOL.
Claim @mining for cycle 123.
Ask @mining to analyze strategy from my history.
Scheduled and conditional mining uses isolated Task agent turns. The scheduled message can ask the agent to read mining status/history and then call the mining tool when thresholds match. Examples:
Stop @mining if pool capital is above 100 SOL and miner count is above 10.
Start @mining when miner count drops below 10.
Every cycle, analyze @mining history and set the best strategy before submit.
See Mining Chat and Automation for the full action map.

Vault and split-key custody

Vault is the protected lane. Use Vault for:
  • higher-value balances
  • manual-first storage
  • recovery separation
  • optional Fased Network bond authority
  • receiving funds from the Agent wallet
Split-key or passkey custody can lock a wallet until the required unlock flow is completed. A locked split-key Agent wallet cannot pay Marketplace orders until custody is unlocked. A locked Vault should not be silently downgraded into a normal automation wallet. Good error behavior is explicit:
Wallet is locked by split-key custody.
Unlock the selected wallet and retry.
No funds were moved.

Scenario guide

ScenarioWalletSurface
Ask for all balancesAny local handle or external Solana addressChat or Wallets
Manual sendAgent source; local handle or external destinationWallets page
Marketplace purchaseAgentMarketplace or chat-assisted checkout
Seller receiptSeller Agent/payeeMarketplace Sales
Skill wallet actionAgent, with skill wallet policyChat, skill, or schedule
SAT miningMiningMining page and @mining chat tools
Fased Network bondVault assignmentFased Network page
Vault storageVaultWallets page/manual flows
Advanced wallet actionsAgentChat/channel wallet_action plus Tasks
External Solana balanceExternal addressChat read-only