Active
Identity
Supabase Auth + database RLS
SECURITY COMMAND CENTER
Protection is a system, not a badge.
Account security combines identity, device trust, step-up controls, audit evidence, risk decisions and a restricted intelligence pipeline. User-facing controls never write directly to privileged threat-intelligence datasets.
CURRENT ACCOUNTDemo shell
Security events0
Known devices0
CONTROL MATRIX
What protects the account
Required
High-risk actions
Step-up / policy boundary
Ready
Emergency response
Account freeze state
Backend only
Threat intelligence
Restricted ingestion pipeline
Backend only
Risk decisions
Versioned model + evidence
Architecture
Asset intelligence
Asset Passport + risk signals
ANTI-FRAUD DATA PLANE
Designed for millions of normalized signals.
The platform now has restricted tables for security intelligence, derived risk features, versioned risk decisions and security cases. They are not seeded with invented “million-row” data; production intelligence must come from verified providers, telemetry and approved internal sources.
ANTI-CYBER DATA PLANE
Indicators stay separated from user settings.
Threat indicators, device trust and risk evidence are distinct from account preferences. This prevents a user-facing setting from becoming an authorization bypass.
CRYPTO ASSET SECURITY
Asset risk travels with the asset.
Crypto Bank has an asset registry and risk-signal foundation for contract, liquidity, concentration, operational and other evidence before capabilities are granted.