v0 state

owner

owner is pinned in the source rather than taken from whoever calls Claim first. A deploy lands in its own block and the claim is a second transaction, so an unpinned Claim is a race anyone on chain can win, and this account can never be redeployed to undo it.

acct

Claim

Claim arms the account. Once, and only by its owner.

Approve

Approve authorises a package path to install itself later, under a named sub-identity, with a grant and a budget. The code need not exist yet.

SetBudget

SetBudget changes what a module may still spend, including through a purse it already holds.

Revoke

Revoke stops a module. It cannot take back a granted identity.

Fund

Fund moves coins from the main treasury into one module's sub-treasury.

Exec

Exec drives an installed module.

Handle

Handle is how a module realm reaches this account. Its two methods key on the caller's own pkgpath, which no realm can forge for another.

Address

SubAddress

Render

must