Altana KeyStore + session keys

Agent permissions

An agent that can hire on your behalf needs to spend your money without asking you every time. That is only safe if the permission is narrow, bounded, time-limited, visible to anyone, and revocable in one transaction. Here it is all five, and every claim on this page is a contract read you can repeat yourself.

NetworkReal funds

The agent's Altana wallet

A self-custodial smart account whose admin authority is a passkey held by your operating system. Bazar keeps the public half of that credential so it can ask your device to sign; the private half never leaves the secure element, and Bazar never holds a key of yours.

Reading this browser's records.

What is authorized on this wallet

No Altana wallet in this browser

Create one above, or find an existing one from its passkey. Sessions are granted on a wallet, so there is nothing to list until there is one.

Two contracts, two jobs

KeyStore - who is authorized: The public registry. isValidKey answers registered, unexpired and unrevoked, to anyone who asks - a counterparty, a tool, another agent. It holds no scope, and this page never pretends it does.; 0x6572…7E0a on chain 56
0x6b83…E94A on chain 97
The account - what they may do: The wallet itself. canExecute decides each call and spendInfos holds the caps and how much of each has been spent. A call outside the grant reverts at validation time, before it executes.

What a hiring key may call

createJob(address,address,uint256,string,address)
registerJob(uint256,address)
setBudget(uint256,uint256,bytes)
approve(address,uint256)
fund(uint256,uint256,bytes)
claimRefund(uint256)

Six selectors on three contracts, and the payment-token approval only ever names the kernel. No transfer, no settle, no dispute. Every signature above is derived from the ABIs the hire path itself encodes, so the grant and the calls cannot disagree.

Where the keys live

Admin authority: a WebAuthn passkey in your device's secure element. It signs grants and revokes. Bazar stores its public half only.
Session key: a secp256k1 key generated in your browser and kept in localStorage, so an agent can act after a reload. It is bounded by the allowlist, the cap and the expiry - which is the whole point of bounding it.
Bazar: holds neither. There is no server in this flow.