What the Contracts Enforce
| Area | On-chain guarantee |
|---|---|
| Treasury policy | spending limits, signer thresholds, recipient rules, and treasury state transitions are validated by covenant logic |
| Stream schedules | claim amounts, unlock timing, refill transitions, and terminal states follow the deployed schedule family |
| Vote locks | locked voting state and reclaim timing are enforced by the vote lock covenant |
| Distribution rules | campaign state, claim limits, and payout conditions are validated by the distribution contract path |
What Off-Chain Services Do
| Component | Role |
|---|---|
| frontend | presents product state and helps the user build the right transaction |
| backend API | assembles transaction descriptors, confirms broadcasts, and serves indexed state |
| indexer | reconstructs covenant state into queryable product views |
| executor | improves liveness for permissionless timed actions |
Honest Trust Boundaries
Frontend and API
The frontend and API can be wrong about display state, but they still cannot make an invalid contract transition succeed on-chain. Users can self-host or independently verify if they need stronger operational assurance.Indexer
Indexing improves usability and reporting. It is not the source of truth for covenant validity. If indexed state looks wrong, the on-chain contract state still governs what can actually happen.Executor
Executors improve liveness for permissionless functions. They do not get special contract powers and they cannot bypass the covenant.Metadata
Descriptions, labels, and some higher-level UI context are off-chain metadata. They improve readability, but they are not the authority for contract state.Key Management
FlowGuard does not remove the need for good key management.- protect signer keys and treasury operators carefully
- use hardware wallets for high-value operations
- choose signer thresholds that fit your recovery and control needs
Current Contract Status
FlowGuard is operating on Chipnet and should be treated as a BCH-native testnet product today. Contract verification and local test coverage have improved, but mainnet-grade production assumptions should wait for the full deployment and audit posture you are comfortable with.Self-Hosted Verification
If you want a stronger verification posture, run your own:- frontend
- backend API
- indexer
- executor