-
Architecture — System context, operating modes (Base vs Extension), components, trust model, and safety limits. Read this first.
-
Concepts & Glossary — Definitions for all core entities (wallets, policies, extensions, roles, cryptographic primitives). Reference this whenever you encounter unfamiliar terms.
-
Configuration — Environment variables, constants, config server endpoints, and startup sequence.
-
Action Processing — How actions flow from proxy to processor: fetching, validation, routing, signature verification, and threshold checks.
-
Wallet Operations — Key generation, deletion, storage model, and nonce-based replay protection.
-
Backup & Restore — How wallets are backed up and restored: Shamir-based data-provider backup and direct TEE-to-TEE backup (machine-path authorized). Security properties and limitations.
-
XRP Signing — Fee schedules, delayed delivery via goroutines, multisig support, and resource limits.
-
VRF — Verifiable Random Function proof generation and on-chain verification.
-
FDC Proving — Flare Data Connector attestation, signature validation, and threshold rules.
-
TEE Attestation — Registration flow, Google Cloud attestation tokens, and production vs test mode.
-
Extensions — How extension mode works, action forwarding, and the sign/decrypt API available to extensions.
-
Security Model — Trust boundaries, what the proxy can and cannot do, governance & machine-path authorization, replay protection, resource limits, and known edge cases.
-
Cryptography — All algorithms: ECDSA, VRF, ECIES, Shamir secret sharing, additive key splitting, hash functions.
-
Deployment — Building, reproducible Docker images, GCP Confidential Space setup, and running.
-
Package Map — All packages, their purpose, and dependency flow.
-
Testing — Test structure, utilities, and how to write new tests.