Security model

• No seed phrases, ever. Ghost OS never asks for them, in-app or anywhere else.
• Keys never reach the browser. Ghost Wallet keys are encrypted at rest and sign server-side; export is rate-limited, audit-logged, and requires a fresh login.
• Deterministic validation. A typed parser — not a language model — decides what executes. Contract addresses are never truncated, guessed, or re-cased.
• Language output is untrusted. Multilingual interpretation produces only a candidate command. Critical entities are protected before model processing, restored byte-for-byte, and checked for provenance before typed validation.
• Policy checks before signing. Balance, route, slippage, spend limits, and risk gates run before any broadcast; an emergency pause halts everything instantly.
• Real hashes only. Success is defined as a verifiable onchain transaction hash. Ghost OS never fakes a confirmation.
• Rate limiting and audit trails on sensitive routes, with no secrets in logs.