The vault is the half of SAULT that holds money. It is non-custodial: SAULT signs on the builder’s authorisation, and that authorisation can be revoked at any time.Documentation Index
Fetch the complete documentation index at: https://docs.sault.ai/llms.txt
Use this file to discover all available pages before exploring further.
What a vault holds
Each builder gets one vault. It has an EVM address and a Solana address — enough to pay on every chain SAULT supports today. Private keys are generated and held inside a secure enclave. SAULT cannot read them. Agents cannot read them. The builder who owns the vault can export them at any time — non-custodial means it is yours to take. Exporting and revoking are two separate actions. Export gives you your own copy of the key; on its own it does not stop SAULT from co-signing. Revoking the signer authorisation is the action that stops SAULT signing. Do both if you want to fully take the vault out of SAULT’s reach.How signing works
When an agent makes a payment:- SAULT checks the agent’s limits: per-request maximum and daily cap.
- SAULT verifies the vault’s signer is still authorised by the builder. A revoked signer freezes every payment from the vault.
- The backend forwards the signing request to the enclave.
- The enclave signs and returns the credential.
- SAULT submits the signed payment on the rail.
Authorising SAULT as signer
When you open a vault, you authorise SAULT’s enclave as a signer. This is a one-time action. You revoke it from the console at any time, which immediately prevents all payments — agent caps notwithstanding.Who can do what
| Action | Builder | Agent |
|---|---|---|
| View vault address | yes | yes |
| View balances | yes | yes |
| Send funds from the vault | yes (from the console) | — |
| Authorise paid agent requests | — | yes (within policy; the enclave signs) |
| Edit policies | yes | — |
| Revoke signer authorisation | yes | — |
| Export private keys | yes | — |
Security guarantees
- Only the builder can export keys. SAULT and agents cannot. Export is a builder-only action in the console — non-custodial by design.
- Builder controls signing. Revoking authorisation immediately freezes all payments.
- Agent limits enforced before the enclave is touched. Per-request maximum and daily cap are checked first; a violating request never reaches the enclave.
- API keys are hashed at rest. Only a hash is stored, never the key itself. The full key is shown once, at creation.
- Per-agent isolation. Each agent has its own key, its own policy, and its own audit trail.