// SETTINGS
Security
Wallet signatures are the current authentication boundary. Each state-changing action uses a scoped, human-readable signed payload.
// NOT ENABLED IN STAGING
Session controls are not live yet
The product does not expose fake device controls while wallet-session storage is still browser-local.
- Connected wallet remains the source of identity.
- Buy, claim, withdraw, chat, and referral actions keep per-action signatures.
- Device revocation will require a server-side session ledger.
- Security alerts stay in the notifications tab until that ledger exists.