Who controls what

Only your pension key can take money out of your vault, and the money always goes back to it. SaverFi’s keeper, its automatic helper, can only add savings to your vault and invest them within the limits you signed. SaverFi’s team can pause saving for everyone, but never a withdrawal.

Your pension key

Your pension key is the wallet you connect, such as Phantom. It stays in your wallet app, and it is the only key that can:

• withdraw your savings;
• change your rules: your mode, your rate, a pause, what your savings buy, and your limits;
• link a trading wallet to your vault.

Your trading wallets

Your trading wallets sit in a wallet account you sign in to with your pension key. “Export key” shows a wallet’s private key in Privy’s own window, to use in any Solana app. Whoever holds that key controls the wallet’s SOL.

The keeper

• On each linked trading wallet it has one permission: to sign a saving into your vault. It cannot send your SOL anywhere else or export your key.
• Each saving stays within the limits you set: by default at most 0.06 SOL, and never touching the 0.05 SOL the wallet keeps.
• In your vault, it changes saved SOL into USDC, never below the SOL safety floor you signed, and buys your stocks within your most per buy and most per 30 days.
• It can never withdraw.

SaverFi’s team

• It can pause saving, buying and new links for every vault at once. A pause never stops a withdrawal.
• It can replace the keeper’s key.
• It can upgrade SaverFi’s program. An upgrade needs several team members to approve it (a multisig), then waits out a time delay. An upgrade can change any rule, so this is the team’s biggest power.