Why architecture matters here

Wallet fails on key loss + phishing. Architecture matters because custody + recovery + access all combine.

Advertisement

The architecture: every piece explained

The top strip is basics. Key material. Custody. Signing service. Recovery.

The middle row is safety. Hardware backing. Multi-sig. Session keys. Access control.

The lower rows are ops. Audit trail. Metrics. Ops — rotation + insurance + IR.

AP2 wallet — key custody + signing + recovery + hardware + auditthe keys that sign agentic paymentsKey materialprivate keyCustodyHSM / secure enclaveSigning serviceauthorized useRecoveryshard + guardian / seedHardware backingphone / deviceMulti-sigM of NSession keysshort-livedAccess controlpolicy + biometricAudit trailevery signing recordedMetricsusage + failed attemptsOps — rotation + insurance + IRrootdistributeephemeralgaterecordmeasuremeasureoperateoperate
AP2 wallet with custody + signing + recovery.
Advertisement

End-to-end flow

End-to-end: user's phone holds hardware-backed key. Signing requires biometric. Session keys issued for automated agent runs; expire. Recovery via 3-of-5 shard scheme. Every signing logged.