No seed phrases, ever. Ghost OS never asks for them, in-app or anywhere else.
Keys never reach the browser. Ghost Wallet keys are encrypted at rest and sign server-side; export is rate-limited, audit-logged, and requires a fresh login.
Deterministic validation. A typed parser — not a language model — decides what executes. Contract addresses are never truncated, guessed, or re-cased.
Policy checks before signing. Balance, route, slippage, spend limits, and risk gates run before any broadcast; an emergency pause halts everything instantly.
Real hashes only. Success is defined as a verifiable onchain transaction hash. Ghost OS never fakes a confirmation.
Rate limiting and audit trails on sensitive routes, with no secrets in logs.
