Registered authority
The public wallet address authorized to request containment and release for the device.
TETRA CONTROL
Wallet-authorized containment.
Enforced at the endpoint.
A registered wallet authorizes a defined security response. The local agent verifies the request and applies supported containment actions.
View the Request Lifecycle ↗
PURPOSE
Connect cryptographic authority
to device state.
Wallet cryptography and endpoint enforcement perform different functions.
Tetra Control is designed to connect them through a constrained local agent. The agent accepts structured authorization requests and executes only the predefined containment actions supported by its implementation.
It is a security-enforcement component, not a general-purpose AI assistant.
SYSTEM COMPONENTS
A defined role
for each component.
Signed request
A structured message specifying the requested action, device identifier, nonce, timestamp, and expiration.
Local verification
The checks that determine whether the request is authentic, authorized, fresh, and valid.
Containment engine
The local component responsible for applying the predefined security response.
Audit record
The local history of authorization attempts and enforcement outcomes.
REQUEST LIFECYCLE
Verification precedes
enforcement.
Follow the proposed containment flow. Every transition has a defined authority.
AUTHORIZATION RECORDILLUSTRATIVE
No device is connected. No signature is requested.
STATE MODEL
Two states.
Separately authorized transitions.
Normal
The endpoint is outside containment. Its registered authority may submit a signed containment request.
Contained
The endpoint has applied its supported containment restrictions. A new valid signed release is required to return to Normal.
The design requires containment to persist across reboot until released. This is an implementation requirement to validate before launch.
PROPOSED CONTAINMENT ACTIONS
A predefined
security response.
Network restriction
Restrict supported network interfaces or connectivity.
Session revocation
Revoke supported active sessions.
Application freeze
Suspend supported application activity.
System lock
Lock the endpoint through a supported operating-system mechanism.
SCOPE
Limited execution.
Documented support.
Action availability and behavior depend on the operating system and implementation. The proposed action set is not a statement of current platform compatibility.
The containment MVP uses wallet-signed messages. It does not require an onchain transaction or smart contract.
The model excludes remote shells, arbitrary commands, surveillance capabilities, and centralized overrides.
Review Trust Assumptions and Limitations ↗