Keys and safety
The Station is not audited, and it is on devnet. The SOL is play money. Treat the program as unfinished.
Your key, in a browser
When you first open the game, a key is made in your browser. It never leaves.
| Where it lives | In the browser's own storage for enter.the-station.xyz |
| Can it be exported | No. The browser will sign with it and will not reveal it. |
| What can use it | Only pages served from that address |
| How it is lost | Clearing the site's data, or losing the browser profile |
So a browser key is a pocket, not a vault. Keep in it what you mean to play with, and /sweep or /send the rest somewhere you hold the words for.
The game is served from an address of its own for this reason. The website at the-station.xyz is a different address and cannot reach a key.
Your key, on a Seeker
The app keeps nothing of value in the app. It uses the Seed Vault.
| Key | Where it lives | What it does |
|---|---|---|
| Game wallet | The Seed Vault | Pays, and signs every money move. Each one is a prompt you approve. |
| Voice | The app | Signs what you say, and nothing else. It holds no SOL. |
There are two ways to have a game wallet.
| A new one | One you already have | |
|---|---|---|
| What it is | A seed of its own, made for the Station | An account on one of your own seeds |
| What the app can ask to sign with | That seed only | That seed, which also holds your other accounts |
| Funded by | You, with what you mean to play with | Its own balance |
Either way, nothing is signed without your approval in the Seed Vault's own screen. The Seed Vault's prompt does not show what is being signed, so the app shows the cost and asks first.
Before you sign
Every command that moves money does three things, in order.
- Simulates the transaction, and shows what your balances would become.
- Asks y or n.
- Signs only after a yes.
If what is shown is not what you meant, say n.
What the relay can and cannot do
| The relay can | The relay cannot |
|---|---|
| Drop what you say | Say something as you |
| Read a whisper | Move your SOL |
| Refuse to carry a transaction | Change a transaction you signed |
| See which address you connect from | See your key's secret |
Whispers are private from the room, not from the relay.
What is public
Everything on the chain is public, permanently: your name, who lit you, how drunk you are, where you last stood, every line you carved, and every trade your key made.
What you say in a room is heard by whoever is in the room, and kept by the relay for the last fifty lines.
Names
Names are not unique. Anyone can take the name you have. That is why every name is shown with the start of its key, and why the house's constructs carry ◆. When it matters who you are talking to, read the key.
Reporting a problem
If you find a way to take what is not yours, or to speak as someone else, tell the founder before you tell the room.