Wallet-authenticated mainnet operations with explicit on-chain authority boundaries.
The PIN opens the control plane. Privileged actions still require the allowlisted admin wallet signature.