@@ -5,10 +5,6 @@ DRAFT — NOT AUTHORIZED
55
66## Purpose
77
8- [ To be defined]
9-
10- ## Scope — What This Phase Does
11-
128Phase C6-B exists to define governance rules and safety boundaries for
139how XSTRP intents are presented to, confirmed by, and handed off through
1410wallet and user interface surfaces, without altering protocol semantics
@@ -18,46 +14,92 @@ authorization, informed consent, and deterministic outcomes while
1814maintaining strict authority separation between the XSTRP core, wallets,
1915and external systems.
2016
17+ ## Scope — What This Phase Does
18+
19+ - Defines what information about an XSTRP intent must be surfaced to a human participant.
20+ - Governs the timing and conditions under which human confirmation is required.
21+ - Specifies boundaries for wallet and interface participation without granting authority.
22+ - Describes safe handoff expectations between XSTRP and user-facing surfaces.
23+ - Constrains how user experience choices may affect protocol safety guarantees.
2124
2225## Explicit Non-Goals — What This Phase Does NOT Do
2326
24- [ To be defined]
27+ - This phase does not define or modify protocol states, transitions, or invariants.
28+ - This phase does not specify ledger behavior or settlement mechanics.
29+ - This phase does not define cryptographic constructions or signature formats.
30+ - This phase does not mandate wallet features, APIs, or implementations.
31+ - This phase does not define economic models, licensing enforcement, or fees.
2532
2633## Authority Boundaries
2734
28- [ To be defined]
35+ This phase preserves strict authority separation:
36+
37+ - The XSTRP core remains the sole authority over intent semantics and validation.
38+ - Wallets remain the sole authority over keys, signing, and transaction submission.
39+ - User interfaces may display, relay, or request confirmation but hold no authority.
40+ - No component introduced in this phase may override or reinterpret core outcomes.
2941
3042## Wallet Interaction Model (Abstract)
3143
32- [ To be defined]
44+ Wallet and interface interactions under Phase C6-B are observational and confirmatory
45+ only. Interfaces may display intent information and request explicit human consent but
46+ must not infer, predict, or enforce protocol outcomes. All protocol decisions remain
47+ deterministic and independent of interface behavior.
3348
3449## Human Confirmation Requirements
3550
36- [ To be defined]
51+ This phase governs the requirement that any action leading toward completion of an
52+ XSTRP intent must be preceded by explicit, informed human confirmation. Confirmation
53+ must be intentional, unambiguous, and attributable to the correct participant, without
54+ introducing timing assumptions or implicit consent.
3755
3856## Hardware Wallet Considerations
3957
40- [ To be defined]
58+ Hardware wallets are treated as extensions of the signing authority, not as protocol
59+ participants. This phase may describe compatibility expectations and safe handoff
60+ principles but does not impose requirements or assume capabilities beyond secure
61+ key custody and explicit user approval.
4162
4263## Failure & Abort Handling (UX Perspective)
4364
44- [ To be defined]
65+ User-facing surfaces must represent failure, expiration, and abort conditions clearly
66+ and without ambiguity. Interfaces may not suppress, delay, or reinterpret failure
67+ signals, and must not present partial or speculative outcomes as final.
4568
4669## Security & Threat Considerations (UX-Limited)
4770
48- [ To be defined]
71+ This phase considers threats arising from misleading presentation, incomplete
72+ information, coercive interaction patterns, or user confusion. It does not address
73+ network, cryptographic, or ledger-level threats, which remain out of scope.
4974
5075## Out of Scope by Design
5176
52- [ To be defined]
77+ The following are explicitly out of scope for Phase C6-B:
78+
79+ - Ledger binding or transaction construction
80+ - Cryptographic proof realization
81+ - Economic or fee enforcement mechanisms
82+ - Custodial models or delegated authority
83+ - Automated or implicit consent mechanisms
5384
5485## Deliverables
5586
56- [ To be defined]
87+ Phase C6-B may produce:
88+
89+ - Governance documentation for wallet and UX interaction boundaries
90+ - Conformance criteria for interfaces claiming XSTRP compatibility
91+ - Non-normative guidance for safe presentation of XSTRP intents
92+
93+ No implementation is required.
5794
5895## Exit Criteria
5996
60- [ To be defined]
97+ Phase C6-B is complete when:
98+
99+ - Wallet and UX boundaries are clearly documented
100+ - Authority separation is preserved without ambiguity
101+ - No changes to Phases C1–C5 are required
102+ - Remaining concerns are cleanly deferrable to other phases
61103
62104## Non-Authorization Clause
63105
0 commit comments