web/docs/wallet-ownership-payment-model.md

Wallet Ownership and Payment Model

This model separates ownership rights from payment source for deterministic entitlement control.

Roles

1. Ownership wallet

• Holds membership and license entitlements.
• Determines activation rights for governance and modules.
• Used for runtime entitlement checks.

2. Payment wallet

• Pays membership/license quote transactions.
• May differ from ownership wallet.
• Does not automatically gain activation rights.

Required Rule

Entitlements are minted to ownership_wallet only.

Authorization Rule

When payment wallet differs from ownership wallet, backend requires ownership-wallet authorization proof for quote/confirm binding.

Activation Rule

Runtime activation checks ownership wallet entitlement state only.

Why

1. Supports simple user funding options.
2. Keeps entitlement ownership deterministic and auditable.
3. Prevents accidental activation tied to transient funding wallets.

Non-Goals

1. Treating payment wallet as ownership wallet by default.
2. Activating runtime from payment evidence without ownership entitlement binding.