| External wallet | Sign the EIP-712 order, or broadcast the prepared transaction yourself. | Live |
| Owner-authorized embedded signing | Preflight prepares the exact authorization, with typed data to inspect; the owner’s tooling approves, the provider signs, TetraFi submits. No root key or provider token reaches TetraFi. | Rolling out |
| Session-signer grants | A bounded, owner-approved permission with an expiry. Revocation refuses new dispatch; an operation in flight stays recoverable. | Rolling out |
| Organisation wallets | The co-signer model: every proposed member accepts with their own factor, the quorum is customer-defined (1-of-1 included), and a policy change needs the current quorum. | Rolling out |