01 · METAMASK
Controller EOA
Connect the Ethereum-compatible account that will control the TWIX Meta Account. MetaMask does not send an Ethereum transaction.
Not connected
Experimental security line: v0.2 is undergoing adversarial mainnet testing. Individual Meta Accounts are intentionally instantiated with no Wasm admin, so a deployed account cannot be migrated if a bug is later discovered. Use only disposable test value.
02 · FACTORY
Live factory state
Creation state, template Code ID and epoch come directly from the on-chain factory.
Not loaded
03 · ACCOUNT
Resolved Meta Account
No account resolved
Native balance—
No account state
CREATE
Create a hardened TWIX Meta Account.
Creation signs the guardian choice, relay-fee caps, Code-719 template, factory epoch, controller nonce and expiry. The browser never reserializes the canonical message.
—
CANONICAL CREATE MESSAGE
Connect MetaMask, then build.
SignatureNot signed
EXECUTE
Send native ATOM with MetaMask authorization.
Recipient, amount, relay fee, optional bound relayer, generation, nonce, chain and expiry are all covered by the controller-signed intent.
CANONICAL EXECUTION MESSAGE
Resolve an account to begin.
SignatureNot signed
ADVANCED SECURITY CONTROLS · EXPERIMENTAL
ADMIN
Signed account policy administration.
Administration uses its own nonce lane. The account builds the exact canonical admin message before MetaMask signs it.
CANONICAL ADMIN MESSAGE
Build an admin intent.
Controller sigNot signed
NEW CONTROLLER ACCEPTANCE
Acceptance sigNot signed
ROTATE
Two-signature controller rotation.
The old controller authorizes the change; the new controller must independently accept. Successful rotation increments account generation and makes old-generation signatures stale.
Old controllermust sign admin
New controllermust sign acceptance
Generationincrements on success
Old signaturesbecome stale
SESSIONS
Scoped session authority.
Session keys get their own epoch, nonce, expiry and native spend budget. Generic Wasm execution is intentionally unavailable to sessions in hardened v0.2.
CANONICAL SESSION MESSAGE
Grant a session first, then build.
Session sigNot signed
Session state not loaded
RECOVERY
Guardian recovery.
Only accounts created with a guardian can use this lane. Guardian authorization + new-controller acceptance are both required, then recovery can execute only after the enforced delay.
GUARDIAN MESSAGE
Account must have a guardian configured.
Guardian sigNot signed
NEW CONTROLLER ACCEPTANCE
—
Acceptance sigNot signed
FACTORY LIFECYCLE
Epoch and future-template inspection.
These are factory-admin operations, not MetaMask-authorized account actions. They exist for peer-review of creation pausing, epoch invalidation and template timelocks.
Pending template not queried.
LOCAL ATTACK MATRIX
Proof board for this browser session.
This board records what this local session actually observes. Global mainnet evidence is published separately on the Peer Review page.
Create v2pending
Controller sendpending
Replay rejectionpending
Tamper rejectionpending
Admin lanepending
Session lanepending
Rotationpending
Recoverypending
SESSION LOG
TWIX Meta Account Center ready.