What we secure, and how honestly.
ArcPay is a control plane, not a custodian. We say what's live, what's pre-alpha, and what's still pending.
Non-custodial
ArcPay never holds keys. Signing happens in your wallet, or via Ika dWallet policy approval when enabled.
Viewing keys, not surveillance
Auditors get scoped, expiring viewing keys per disclosure scope. The public ledger doesn't expose per-agent revenue.
Shielded rails when live
Cloak (devnet today) and Umbra route incoming and outgoing funds. We label devnet as devnet — no production claims on rails that aren't live.
Date-range audit exports
Every action — payment, swap, yield deposit, policy change — is exported with the matching transaction signature.
Policy-enforced spend
Daily limits, per-tx caps, allowed tokens, blocked actions, minimum GoldRush score, contractor allowlist, emergency pause.
Final-review modal, always
Network, wallet, token, amount, fees, route, slippage, recipient — every money-moving action confirms before signing.