Administration
Platform health, users, marketplace moderation and the audit log, behind roles stored in the database. Administrators can never read agent keys, sign, move funds or change anyone's Mandate or limits.
WHAT ADMINISTRATION CAN AND CANNOT DO
ROLES
- › support: platform health, users list (public addresses only), marketplace moderation, audit log
- › admin: everything support can, plus role changes
- › support and admin: the hosted-agent kill switch (pauses every autopilot; sells and withdraws nothing)
- › every staff request is written to the audit log
NO ROLE CAN
- ✕ read or export any agent key (hosted agents' keys stay encrypted on the agent host; no route returns them)
- ✕ sign anything for a user or move a user's funds
- ✕ create, edit, pause or resume a user's Mandate or agent limits, or sell or withdraw for an agent
- ✕ see sessions, refresh tokens or signatures