The whole flow, no wallet needed.
Connect
✓ doneThe holder connects a NEAR wallet. Here the session is replayed as keyhole-devmo.near; nothing is signed.
Holder keyhole-devmo.near
- Enclave ops
- info, status, quote, mint, balance, swap, withdraw, history…
- Signed-message recipient
- keyhole
Mint the key
✓ doneThe TEE-held minter mints the NFT. The NFT is the viewing key to one sealed account.
Key minted on mainnet
- Minter
- 015a0259…ac443 (key generated inside the TEE)
Limits
✓ doneThe enclave applies the key's tier caps to every value-moving call.
Bronze: $1.00 per trade, $5.00 per day, 6 calls/min
Fund
✓ doneA 1Click quote returns a deposit address; funds land in the key's confidential account.
Sealed balance: 0.02 USDC + 0.002163 wNEAR
- Deposit address
- 55c0d718…2e9450c05
- Confidential id
- 2c2c4942…78fd21ca
Trade
✓ doneThe holder swaps inside the enclave; it settles through NEAR Intents.
0.005 USDC → 0.001077 wNEAR · success
Guardrails
✕ refused, as designedOver-cap and replayed requests are refused inside the enclave, and the refusal is attested too.
$2.00 trade refused (over_cap_per_tx) · replay refused
Withdraw
✓ doneWithdrawals go only to the account that signed; the sealed account ends empty.
wNEAR and USDC withdrawn · final balance empty