Security & Intent Model
How PASS enforces safety: cryptographic owner control, non-custodial escrow, and strict boundaries preventing AI from executing arbitrary transactions.
Strict AI Separation of Powers
AI models are inherently probabilistic and can hallucinate. In PASS, AI NEVER signs transactions or directly controls money. The AI serves exclusively as a parser to convert unstructured intent into structured parameters, which the user must review and approve. Final enforcement is purely deterministic and executed on-chain via Anchor smart contracts.
Non-Custodial PDA Architecture
PASS does not hold user private keys, seed phrases, or custodial databases of user funds. Tokens are locked in isolated Program Derived Address (PDA) vaults on Solana Devnet derived from the creator’s wallet and pass ID. Only authorized recipient payments or the owner's revocation can trigger token withdrawals.
Owner Revocation Rights
If a recipient attempts unauthorized spending or a business arrangement ends early, the creator can revoke the PASS at any second. Any remaining unspent balance is returned immediately to the owner's token account.