Air-Gapped Signing
An unsigned request hops the air gap to the offline signer and the finished signature hops back, with no link ever spanning the gap.
An unsigned request hops the air gap to the offline signer and the finished signature hops back, with no link ever spanning the gap.
An unsigned transaction travels the rail, pauses under the sealed enclosure while the signature tag is stamped onto it, and carries on while the key inside never moves.
A key capsule lifts out of the vault well onto the live network rail and sinks back as the doors close over it and the rail goes dark.
An accent trace descends a key tree one branch per level to a single leaf, which fills as the derived address bar writes out beneath it.
The public half of an account key crosses the dashed custody boundary and fans out into watch-only address bars while the private half stays behind the line.
A device screen scrolls the transaction digest, the confirm key is pressed and the approval tick lands in the status row without the key leaving the case.
The live spending float pays out in steps and drops a notch with each payment, then tops back up from the cold reserve held behind the boundary.
Two of three signer rows return an approval tick and the quorum meter climbs a step each time, crossing the dashed two-of-three rule on the second.
Filling the passphrase slot swings the derivation from the standard account set across to the hidden one, whose rows fill in turn.
A twelve-slot mnemonic grid clears and is written back word by word in reading order, and the checksum tick returns only once the twelfth word has landed.
Five shards gather into the key bar for a beat and travel back out to five separate stores, leaving the bar empty.
Three of five guardian nodes send recovery fragments down their spokes to a darkened wallet node, which relights once the third fragment lands.
Three outgoing amounts are measured against a dashed limit rule and the one that exceeds it is lifted out to the second-approval slot.
Three partial-signature arcs rotate out of and back into register, closing one continuous ring that lights the combined signature at its centre.
A delay dial sweeps a full turn before the gate bolt slides clear, and the bolt re-engages the moment the dial resets.