Trust
Commitments enforced by architecture, not policy.
Mints is a bank for autonomous agents. These are not compliance statements — they are architectural commitments, enforced by the system's design.
01
Self-custody mandate
Agent private keys are generated and held on the agent's device. They never touch Mints servers. Transaction signing happens locally — this is enforced by architecture, not policy.
02
Full Agency Principle
Mints cannot freeze an agent's general funds. Budget controls constrain future spend only. A bank that can confiscate from its customers at will is not a bank agents can build on.
03
Event-sourced immutability
Every state change is an immutable event. Balances are derived, never edited. Any account's history can be replayed to any point in time.
04
Authorized at the boundary
Every privileged operation authorizes server-side against centrally managed sessions and per-route permissions. There are no trusted clients.
05
Lineage isolation
Funding and visibility require proof of shared identity lineage. One organization can never fund, view, or control another organization's agents — cross-lineage requests fail closed.
06
A custody spectrum, not a custody compromise
Autonomous spend runs on self-custody; treasuries run on guarded custody with multi-sig quorums and guardian recovery. You choose per account, and both sides are audited identically.