WEB4-016 · The Web4 Wallet

Cobots do the work.
The wallet is how the family pays & authorizes them.

Every Clobot cobot is an agent with an operational identity bound to a wallet. The Web4 Wallet is a governed, reference-only container: it holds typed references to identity, authority, delegation, native assets, evidence, and provenance — and an audit history of every accepted and rejected use.

It is not a custodial crypto, token, or payments wallet. Possession of a reference grants no authority. Use requires current registry resolution and a fail-closed policy check.

The governance + payment pair

A cobot may only act when both halves agree. One authorizes; one pays. Neither can be faked by the other.

Governance

validateAuthority()

The use-gate. Before a cobot acts, its authority, evidence, and the legality of the lifecycle transition are checked against the live registry. Signal, reputation, trust, and attention can never stand in for authority.

gate = validateAuthority({
  actor:     agent.operationalIdentityRef,
  authority: wallet.resolve("AUTH"),
  evidence:  wallet.resolve("VER"),
  op:        "activate",
})
// missing authority | evidence | transition
//   → reject(reasonCode)  ·  audit.append(attempt)

Payment

wallet.reference()

The value half. The wallet holds typed references to native assets and their provenance — never balances or keys. Settlement happens at the external signer; the wallet reviews and authorizes, then records what was accepted.

ref = wallet.reference("AUTH:pay-123")
// stores: id + resolution proof
//   never: seed | private key | PSBT | balance
sig = externalSigner.requestBounded(ref) // EIP-712
audit.append({ ref, sig, acceptedAt })

Governance without payment can authorize nothing to change hands; payment without governance can move nothing legitimately. The pair is the whole point.

20 native-asset contracts

Each WEB4-016 native asset is a distinct governed registry contract — not an interchangeable coin. Filter by family; click a contract to inspect its schema.

Boundary proof

What the wallet deliberately is not.

The wallet stores reference IDs and resolution proof — not canonical native-asset records.
Contract possession does not imply authority. Signal, reputation, trust, and attention cannot grant authority.
Provenance establishes lineage; it does not independently establish truth.
No seed, private key, provider object, raw signature, or durable raw PSBT is stored. No transaction-submission API is exposed.
No financial balance, currency, price, or transfer-by-possession model exists.
Unsupported operations, missing authority or evidence, invalid transitions, and payload tampering all fail closed with reason codes.