Security
This page distinguishes account access, native-key payment authorization, and route-access grants; explains settlement admission and evidence labels; and states the system's limits.
Keys and access grants
FK1 is Foinse-issued access to one Foinse account. Where an account API specifies FK1, send it in the Authorization header and treat it as authority over that account's permitted operations. Do not put it in client-side code, URLs, or logs. Rotate it immediately if it may have been exposed.
A native provider key belongs to the provider. A payer may present a capped native-key authorization directly to a toll gate; the route owner and payment recipient do not receive that key. A quota key is a capped authorization around a native key, not a substitute for FK1.
Door 1 returns a single-use, resource-bound qtt1 ticket after verifying before charging. Door 2 uses the committed movement event_id as the access grant after making the exact charge. Neither grant is an account key or a transferable compute balance. Hosted claim links are planned, not a currently verified delivery mechanism; route names in authentication code do not establish an implementation.
Settlement admission
The server-side settlement boundary, not the client, decides whether a requested movement can post. A settled movement conserves value exactly: payer debit = recipient credit + protocol fee. A request that skips the applicable toll or breaks conservation does not settle. The recipient receives the full listed subtotal; the buyer pays the disclosed processing toll on top.
Evidence labels
Proof and settlement surfaces use these evidence grades:
- live: settled against real provider capacity.
- live-attested: live, with outside-party attestation.
- attested: attested by an outside party without the full live path.
- fixture-mechanism: the real mechanism run against fixture data.
- fixture: fixture data end to end.
Grades bound what a record proves; they do not turn a fixture into a live settlement. An attestation is scoped to its named attestor and evidence and is not automatically an independent security or financial audit. Check the grade and artifact before relying on a balance, receipt, or earnings claim.
Honest limits
The ledger records what settles through Foinse. It does not by itself attest unrelated provider behavior, the arrival time of an external payout after settlement, or anything graded fixture. Live proof of a mechanism does not imply general product availability. The full statement is published at honest limits. If a surface claims more than its evidence supports, report it via contact.