01 · METAMASK
Active EVM signer
Connect the EOA currently selected in MetaMask. Rotation, recovery and session tests deliberately require switching selected MetaMask accounts.
Not connected
TRUSTLESS WALLET INTEROPERABILITY EXECUTION
Harden it.
Then try to break it.
The contracts are the canonical serializer. This console asks Codes 719/720 to build every signed envelope, MetaMask signs the returned bytes, and a Cosmos wallet only relays them.
MetaMask · EIP-191
→
TWIX Meta v2
→
Cosmos Hub
719 · factory code 720.02 · FACTORY
Live factory state
Not loaded
03 · ACCOUNT
Resolved account
No account resolved
No account state
CREATE
Hardened account creation
Creation signs guardian selection, relay-fee caps, template Code ID and factory epoch. The browser never reconstructs the canonical message.
—
CANONICAL CREATE MESSAGE
Connect MetaMask, then build.
SignatureNot signed
EXECUTE
Controller-authorized Cosmos action
Default is the same native ATOM send we proved in v0.1, now generation-bound and policy-controlled.
CANONICAL EXECUTION MESSAGE
Resolve an account to begin.
SignatureNot signed
ADMIN
Signed account policy administration
All changes use the separate admin nonce lane. Paste a typed AdminAction JSON object; the account returns the exact message to sign.
CANONICAL ADMIN MESSAGE
Build an admin intent.
Controller sigNot signed
NEW CONTROLLER ACCEPTANCE
Acceptance sigNot signed
ROTATE
Two-signature controller rotation
Convenience builder for the highest-value admin test: old controller authorizes; new controller independently accepts.
Old controllermust sign admin
New controllermust sign acceptance
Generationincrements on success
Old signaturesbecome stale
SESSIONS
Scoped session authority
Session keys use their own epoch, nonce and spend budget. Generic Wasm is intentionally unavailable to sessions in v0.2.
CANONICAL SESSION MESSAGE
Grant a session first, then build.
Session sigNot signed
Session state not loaded
RECOVERY
Guardian recovery
Guardian signs the recovery schedule, the proposed new controller signs acceptance, and execution is permissionless only after the enforced delay.
GUARDIAN MESSAGE
Account must have a guardian configured.
Guardian sigNot signed
NEW CONTROLLER ACCEPTANCE
—
Acceptance sigNot signed
FACTORY LIFECYCLE
Epoch and template inspection
Admin-only factory changes are deliberately not MetaMask-authorized account actions. Use these JSON payloads with the factory admin wallet to test pause/epoch and template timelocks.
Pending template not queried.
ATTACK MATRIX
Proof board
Green means observed success; red buttons are deliberately expected to fail. Record the actual chain response rather than assuming a test passed.
Create v2pending
Controller sendpending
Replay rejectionpending
Tamper rejectionpending
Admin lanepending
Session lanepending
Rotationpending
Recoverypending
SESSION LOG
TWIX Meta Hardened v0.2.0 test console ready.