Security model
The app treats wallet, evidence, RPC, and cache boundaries as separate trust zones.
Rules
- No private key or server signing wallet exists in the frontend.
- Evidence URLs are untrusted metadata: no iframe, HTML injection, or arbitrary server fetch.
- Wallet writes require chain 61997 and user approval.
- Canonical state is chain-derived; cached projections are labeled and rebuildable.
Contract truth
Contract URL validation and GenVM web restrictions protect resolver fetches. Browser validation is UX preflight only.
Integration note
Validate inputs, escape text, use safe external links, and redact wallet/RPC details from logs.