MOI enforces strict wallet separation (packages/wallet-signer/src/index.ts). The Master Owner Wallet and Restricted Agent Wallet are cryptographically distinct accounts with mutually exclusive capabilities.
- Owner Wallet: Retains full custody, signs first-trade authorizations, sets mandates, triggers emergency pauses, and receives invoice settlements.
- Agent Wallet: Holds minimal operational gas, possesses zero withdrawal rights, and can only sign transactions that carry a valid HMAC policy attestation for an approved target reactor.