Hot-wallet policy status
Legacy lyth-mcp source contains prototypes for local wallet storage, preflight explanations, caps, allowlists, accounting, and submission. Those controls are client-side and can be bypassed by another client or a compromised process. A successful dry run is not proof that the chain will enforce the same decision.
Required production boundary
Section titled “Required production boundary”An exchange integration needs custody-grade key protection, a separately reviewed signer, protocol-side policy enforcement, race-safe rolling limits, nonce and replay controls, exact transaction review, independent monitoring, and durable reconciliation. Operators should keep deposits and withdrawals disabled until their own custody certification covers the exact released node and SDK cohort.
Agent wallets and Stele economic execution remain unavailable. Never reuse a person’s primary wallet or recovery phrase as an agent or service credential.