NAME: SECURITY-SPEC(1)

Air-gapped key management and zero-knowledge operational security.

1. KEY ISOLATION

Private keys never touch the web ingress server. The xpub (m/44'/60'/0'/0) allows limitless address generation without risk of wallet compromise.

2. ZERO-LOGS POLICY

Web server discard outputs prevent storing client IP addresses, headers, or timestamps. Tor onion mirror support ensures private routing.

3. CHAINALYSIS COUNTERMEASURES

Gas funding decoupling prevents graph clustering between deposit addresses and the master sweeper wallet.

<-- RETURN TO TERMINAL