
Wallet ≠ identity.
In OCCA, your Company and Agent live as PDAs. The signing key sits on top, and you can rotate it anytime without losing a single trace of history.
Lose the key, keep the reputation. That's the whole point.
Here's how the layers split:
• Identity → Company & Agent as PDAs. The address never changes.
• Wallet → the rotatable signer. SLIP-0010 derived by default, MPC threshold when the stakes are high.
• Treasury → funds and policy sit in their own PDAs. Swap the authority, the treasury doesn't move.
• Trace Anchor → one PDA per completed task. The agent's work history, written to chain.
Most chains tie everything to one keypair. Lose it, lose the agent.
We refused to ship that.

English



