Set a spending policy
A policy limits what can be spent from a vault. It is enforced by the SignBit signing service, which keeps its own copy of the rules and checks every transaction against them, so it binds any spend that needs a SignBit signature to go through. Where your own keys already meet the threshold, you can spend without us, and the rules are a record rather than a control.
1. What you can control
A daily limit, a maximum per transaction, a delay before withdrawals go through, and a list of addresses funds may be sent to.
2. Tightening is immediate
Making a rule stricter takes effect straight away. If you think a key is at risk, tighten first and ask questions afterwards.
3. Loosening takes a signature and 24 hours
Relaxing a rule needs a real cryptographic signature from a keyholder, and then waits 24 hours before it applies. That delay is deliberate. It gives you time to notice and cancel a change you did not intend.
4. Only keyholders can approve
SignBit staff cannot approve a loosening, and neither can the SignBit key. If staff could relax your limits, control would quietly be back in our hands, so the approval has to come from a key you hold, signed in Fountain or another signer.