Vana Custody
Changes what the runtime signer is allowed to do. Takes effect immediately once approved — the next runtime transaction is checked against the new rules, not the old ones.
eth_signTransactionThe method that moves funds. Every condition below constrains calls to this method only.
All checked conditions must hold — they are ANDed onto one ALLOW rule.
= 1000000000000000000 wei

Set both to pin down “this function, on this contract.” Either alone is weak: settle() exists on any contract.

Generated rules — exactly what this proposal sends
[
  {
    "name": "allow-settle-under-limit",
    "method": "eth_signTransaction",
    "action": "ALLOW",
    "conditions": [
      {
        "field_source": "ethereum_transaction",
        "field": "value",
        "operator": "lte",
        "value": "1000000000000000000"
      }
    ]
  }
]
Glossary
quorum
The 5 approvers. Any 3 can authorise a change.
passkey
Your device's fingerprint, face, or security-key check.
Privy
The outside service holding the wallet keys.
policy
The rules deciding which transactions the runtime signer may sign.
runtime signer
The automated key for everyday transactions. Not a person.