Trust · Multisig

M-of-N that actually ships payroll.

Safe on EVM and Squads on Solana, with org defaults, value rules, gas sponsorship hooks, and recovery paths documented for humans — not just smart-contract nerds.

Genesis choices

At entity creation you pick solo operator or team multisig. Team mode resolves member emails to wallet addresses and bakes the owner set into on-chain vault creation. That set is frozen after commit; later changes are proposals.

Day-to-day controls

Vault Controls consolidate access, backup, rules, and operations. Value rules can allow, deny, delay, or require extra signatures. Org defaults cascade with vault overrides.

  • ·Propose transfer / batch / Solana transfer
  • ·Owner add/remove and threshold change
  • ·Optional Self-Custody Plus backup ceremony

Approvals UX

Pending proposals land in Actions. Remaining signers approve from web. Relayer paths broadcast when ready; failures do not silently invent audit rows.

Recovery posture

Key health checks nudge quarterly. Recovery kill-switches exist for operators. The survival guide documents how to exit without Glide UI.