Who else can act on your vault
| Role | Can | Can't |
|---|---|---|
| Guardian (Fortcore, with Protect or Private) | Lock your vault, cancel withdrawals, start a recovery or a three-lock return home | Sign a transfer, or change your keys, homes or limits |
| Interceptor (Fortcore screening, with Protect) | Cancel a transfer to a flagged address; mark a tainted deposit | Withdraw, lock, or touch keys, homes or returns |
| Trusted contacts (1 with Protect, up to 3 with Private) | Get your alerts, lock your vault, cancel a withdrawal | Unlock, withdraw or change settings |
| Relayer and independent operator | Pay the network fee, submit what was signed, and carry out returns that are due | Choose an amount, a recipient or anything else |
Budgets, written into your vault
| Role | Budget |
|---|---|
| Guardian | 8 locks, cancellations and "This wasn't me" links, plus 4 cancellations after an unconfirmed verification call |
| Interceptor | 4 cancellations, and a separate budget for marking deposits |
| Trusted contacts | 4 locks and cancellations, shared between them |
| FortCard | 4 locks |
Budgets belong to the role, not the key: rotating a key, renewing a grant or re-enrolling never resets them. Marking has its own budget, so a stream of tainted dust can't use up the cancellations that stop scams.
Granted by you, revoked at once
- Only a phone that has been active for 7 days can grant a role, and the grant takes 48 hours to start working.
- Revoking a role takes effect at once, and no lock can delay removing a trusted contact or the interceptor.
- Grants expire after 13 months. The app asks for one Face ID tap to renew them each year, and Fortcore's services act only while you subscribe.
Every lock ends
- A lock cancels pending withdrawals and blocks new ones until a phone unlocks it and 24 hours pass with no new lock.
- A lock lapses by itself 14 days after it was set or last renewed. The guardian can renew it twice, so 42 days at most.
- Whoever locked or renewed then can't lock again for 7 days. Your own phones never have to wait.
Three locks in 30 days
With Protect or Private, if your vault is locked three times in 30 days, the guardian can start a 14-day return home that nobody can cancel. It is never automatic, it needs two Fortcore people, and FortCard locks don't count toward it, so a stolen card can't set it off. The worst a rogue guardian can do is send your savings to your own home.
Two people for every human action
Every human action by the guardian needs two Fortcore people. A third lock, a recovery by identity and a duress lock need a named pair and a written note. Every action Fortcore takes on your vault is labelled and shown to you.
Questions
Can Fortcore keep my vault locked?
Not for long. A lock lapses 14 days after it was set or last renewed, and the guardian can renew it only twice: 42 days at most. Whoever locked then can't lock again for 7 days.
Do I have to give Fortcore these roles?
The guardian and interceptor come with Protect and Private, and trusted contacts are people you choose. A phone that has been active for 7 days can revoke any of them at once.