Skip to main content
Treasury teams need deny-by-default policies and human consensus without slowing automation for low-risk paths.

​
Pattern

  1. Cold / warm wallets as HD wallets in the parent org
  2. Operator passkeys tagged ops-team
  3. Policies with consensus: approvers.filter(...).count() >= 2 for high value
  4. Dashboard Activities for “votes remaining” and 24h expiry
  5. Audit export / webhook stream for compliance

​
Controls

  • Root quorum for org membership and policy admin changes
  • Separate automation keys that cannot move treasury (no allow policy)
  • Import/export only through HPKE channels with dual control