Architecture
Runtime Upgrades
How changes to rules, policy programs, and the enclave affect your account.
Pakt's rules and the system that verifies them have separate update boundaries.
| Change | What it means for you |
|---|---|
| Change limits or assets | Review and activate a replacement Pakt with a new root |
| Change the policy program | Approve a new Pakt that commits to the replacement program; a compatible program change can retain the existing restricted execution signer |
| Change the enclave's verification or signing behavior | Can affect Pakt's restricted execution signing access; it is separate from changing your rules |
| Restart the same enclave release | Reuses the existing protected key material and restricted execution signer |
Approving a replacement Pakt changes your rules, not the restricted execution signer's permissions. If Pakt signing becomes unavailable, you retain wallet recovery and direct withdrawal access. See Signers, Wallets, and Control.
If you want to change your agent's rules, follow Draft and Review a Pakt. For how policy programs and the enclave work together, read System Architecture.