Security

FindBuyAgent never holds your keys or funds.

• Wallets are discovered with EIP-6963, or the injected EIP-1193 provider if that is all the browser has.
• The only wallet data kept here is public: address, chain id, rules, signatures, and receipts.
• A seed phrase is never requested, generated, imported, or stored.
• Example merchants in the demo cannot be signed for. The testnet path asks before it signs, and it does not broadcast.