Wallet consent
SIWE establishes a short-lived session. CSRF protects session mutations. Sensitive hosted changes additionally require a fresh signature bound to the exact action and payload.
DIN Console / DIN Protocol
Anryton · Chain 130 Registration proves a record. It does not prove legal identity.
WORKSPACE / DIN PROTOCOL
DIN Protocol
Identity, control, and evidence. Independently verifiable.
DIN PROTOCOL
Explicit authority and assurance boundaries
Wallet control, platform roles, credential trust and factual truth are separate checks.
Least privilege
Platform roles cannot transfer on-chain identities. Auditors cannot read private activity payloads, and support staff can read only tickets assigned to them.
Evidence and recovery
Hash-linked audit events have independent chain checkpoints. Human handover and delayed guardian recovery require destination consent. Controller epochs invalidate stale grants and webhook subscriptions.
Report a problem
Open a private support request using the security category. Do not include wallet private keys, seed phrases or government identification. Public reports should avoid details that expose another user’s records.