What this pilot does today
The browser asks a compatible Solana wallet to sign a domain-bound, five-minute sign-in message. The message is checked locally and again by the Sig/WebAssembly verifier behind the login service. Signing does not send a transaction or authorize asset movement. The wallet address, challenge, and signature are used to establish a Firebase Auth session; the signature is not retained after verification.
Your client wallet
You may use an external Solana wallet or create a customer-branded client wallet. The client wallet creates its real Solana key locally and saves only an encrypted vault on this device. Export an encrypted wallet backup and keep its passphrase separately. Reload, lock, sign-out, and five minutes of inactivity lock the wallet. The service cannot recover a lost key or passphrase. Unencrypted Solana keypair export is optional and requires confirmation; anyone holding that file controls the key. The client wallet currently signs login messages; transaction sending is not available.
What is saved
A wallet-bound login entity stores your public wallet address. If you create a custom login, the browser encrypts it with your recovery passphrase before saving the profile to Firestore. The service cannot decrypt that profile. Firebase stores login-entity data, short-lived one-use challenges, encrypted profile data, and coupons only. Export your encrypted entity record and keep the recovery passphrase separately.
Infrastructure
Keys and wallet signatures are user-controlled. This deployment uses Firebase Hosting, Firebase Auth/Firestore, and API Gateway for distribution and login/profile availability. It is self-hostable, but these services are centralized infrastructure.
Prototype limitations
This pilot does not offer investment, funding, tokens, or payouts. Coupon issuance, Solana settlement, and the causal-evidence system are not live. Keep your recovery passphrase safe; the service cannot reset it.
Open source
The protocol and application source are released under the MIT License. Review the source before use and do not sign messages you do not understand.