| Runtime Authority |
Native Rust (Tauri v2): Strict memory safety, zero GC pauses, native Windows execution. |
Interpreted Node/Python scripts prone to runtime crashes and dependency drift. |
| Secret Containment |
Zero Boundary Leaks: Private keys and calldata never cross IPC to UI or persistence. |
Keys stored in plaintext .env files or exposed in browser extension memory. |
| Execution Model |
One-Shot Anti-Replay: Atomic duplicate locks, attempt markers, terminal ambiguity handling. |
Blind retry loops causing double-mints, fee burning, and duplicate buys on reorgs. |
| Simulation Fidelity |
Pending-State eth_call: Exact provider calldata simulation against pending block before signing. |
Rough heuristic estimation or unsimulated sends, resulting in costly reverts. |
| Update Delivery |
Signed Cryptographic OTA: Minisign-verified updates with idle holds over active operations. |
Unverified git pulls or unauthenticated binary replacements. |