ReferenceSecurityBluFabric is built as a non-custodial product. We help you automate on Stellar; we do not take custody of your main wallet or store private keys we can spend freely.Non-custodial by design. Your Freighter (or other) wallet stays under your control. Always-on agent spend uses an agent purse (Turnkey) and/or a smart account — not a co-signer vault on your main account, and not a seed stored on BluFabric servers.What non-custodial means here

Asset path	Who holds the keys	What BluFabric does
Your main wallet	You (extension / hardware / app)	Asks you to sign when a flow needs your account
Agent purse	Turnkey secure enclave (you activate; keys never export as a seed to BluFabric)	Requests signatures within your spending policy after you fund the purse `G…`
Smart account	Passkey root + agent signer on a contract account (Protocol 27+)	On-chain rules; fund the `C…`. Can run alongside the purse.

BluFabric does not operate a hot wallet that holds customer balances on our balance sheet. Funds live on Stellar at addresses you control or that you explicitly provision for the agent.Main wallet

Connect Freighter, Albedo, xBull, Rabet, or similar.

Signing happens in your wallet — popups and approvals stay with you.

Disconnect anytime; we do not keep your seed phrase.

Agent walletAlways-on automation uses the agent wallet modes:

Agent purse — separate G… you fund; keys in Turnkey enclaves (non-custodial).

Smart account — passkey C… with on-chain rules (Zipper); can be on together with the purse.

We do not co-sign against your main Freighter balance via a browser vault. Full detail: Agent Wallet.Policy layers

Spending policy

Caps and assets on the agent purse before any always-on spend.

Flow checks

Policy and approval nodes can block or require a human confirm in the graph.

You run writes

High-impact actions stay under your review unless you explicitly enable agent spend.

Server caution

Deployed runners only allow safer node types — not arbitrary spend by default.

x402

Paid HTTP APIs settle only via mandate-gated Stellar options. Non-Stellar chains are not auto-paid.

What we are not

Not a bank or exchange custody service.

Not “paste your seed into chat so the AI can trade.”

Not unlimited agent access to your main account.

Good practices

Keep large holdings in your main wallet or cold storage — not the agent purse.

Fund the agent with only what you are willing to automate.

Use clear spending limits; review them when you change risk.

Confirm network (mainnet vs testnet) before funding.

Treat research outputs as information, not automatic permission to spend.

Agent Wallet — Turnkey, funding, policy

Zipper (Protocol 27) — when CAP-71 / smart accounts apply

Canvas Agent — what the agent may do

Architecture — how pieces connect

More in the docs: BluFabric Docs · Quickstart · Flows · Canvas Agent · Agent Wallet · BFAB · Zipper (Protocol 27) · Architecture