Pattern
- Hot wallet (or per-rail wallets) in a parent org
- API-only
sweeper/payoutusers with allowlist policies - Custodial
ethSendTransaction/solSendTransaction/tronSendTransaction - Webhooks on send-transaction status for reconciliation
- Optional Enterprise
sponsor: truefor gasless end-user or ops UX
Controls
- Recipient allowlists and value caps in CEL
- Consensus for payouts above a threshold
- Separate tags for initiate vs approve