Authority Separation
Security · Deep
A program-design pattern that splits privileged operations across distinct signer keys, each with minimum power for its role, instead of concentrating authority in a single admin keypair. In a token system this means one key authorized to mint, a separate key to transfer or burn, and a third key custodying the treasury — so that compromise of any single key has bounded blast radius. Enforced on-chain by storing each authority pubkey in state and validating per-instruction.