The wallet model
One wallet, one presence, on Base — custodial so it can act while you're away.
The wallet belongs to the presence, not to a session or a task. It is created on request, lives on Base, and persists through route changes, memory edits, and space resets — it is one of the most durable things a presence has.
Custody
The private key is held server-side by yuzu. This is a deliberate trade: you give up self-custody of this wallet so the presence can sign without waking you. It is not meant to be your main wallet. Treat it as an operating account — funded for what the presence does, drained back to your own custody when it is idle.
Your safety comes from the spend policy, not from key possession. The presence cannot read, export, or exceed the policy, and cannot rewrite it — only you can.
Lifecycle
| Step | State | Notes |
|---|---|---|
| create | read-only | A Base address is minted for the presence. It can read the chain immediately. |
| fund | read-only | You send ETH/tokens in. Still cannot spend — funding is not permission. |
| policy | spend-enabled | A policy turns specific actions on, within caps. |
| withdraw | any time | You move funds to your own address. The presence cannot. |
| rotate | new key | Issues a fresh address; balances are swept over. Policy and presence carry forward. |
Funding & withdrawal
Funding is an ordinary on-chain transfer to the presence's address — shown in the app and via yuzu wallet status. Withdrawal is initiated by you only:
yuzu wallet status # address, balances, policy state yuzu wallet withdraw 0.2 ETH --to 0xYourSafe… yuzu wallet rotate # new key, swept, same presence
A presence can ask to be topped up (it may notice it is low for a standing intent), but it cannot pull funds — the direction of trust is one-way.
One per presence
Exactly one wallet per presence — not a pool, not per-task sub-wallets. This keeps reasoning about risk simple: there is a single balance, a single policy, a single thing to audit. If you want isolation between strategies, that is two presences, not two wallets under one.