diff --git a/docs/content/docs/clients/architecture.mdx b/docs/content/docs/clients/architecture.mdx index f4bae19e..22e6442f 100644 --- a/docs/content/docs/clients/architecture.mdx +++ b/docs/content/docs/clients/architecture.mdx @@ -276,7 +276,6 @@ export async function buildPayment( ### Why This Works -### Why This Works User keys never leave their device. Provider API keys never exposed to frontend. Backend cannot sign transactions (compromised server results in no fund loss). Frontend cannot build transactions alone (no provider access). Both components required for complete transactions. Clean separation of concerns provides scalable architecture. diff --git a/docs/content/docs/wallets/private-key.mdx b/docs/content/docs/wallets/private-key.mdx index 20346cec..8b28c7e4 100644 --- a/docs/content/docs/wallets/private-key.mdx +++ b/docs/content/docs/wallets/private-key.mdx @@ -267,8 +267,6 @@ const prodClient = createClient({ declare function loadFromVault(id: string): Promise; ``` -## Security Reminders - ## Critical Security Rules Never hardcode keys in source code. Never commit keys to Git repositories. Never log key material to console or logging systems. Never transmit keys over unencrypted channels. Never reuse keys across different environments. Never share keys between different services.