Owner
The wallet that creates and ultimately controls a vault.
The owner is the Kaspa wallet (keypair) that creates a vault and holds final authority over it. The owner's public key is compiled directly into the vault's covenant at creation — it is not a role assigned in a database, and it cannot be reassigned by editing application metadata.
What only the owner can do
- Create a vault and set its initial policy.
- Grant, change, or rotate an agent's spending authority.
- Change policy fields (limits, budgets, allowlists, approval thresholds), subject to whatever ceremony this deployment requires for policy changes — see Require approvals and the optional governance ceremony described in Agent API.
- Pause the vault (an immediate, owner-only freeze) and unpause it.
- Perform terminal recovery — reclaiming funds from a vault entirely, independent of any agent or approver.
- Top up the vault's balance and its covenant-controlled fee reserve.
What the owner does not need to do
The owner does not need to approve or be involved in every individual agent spend — that is the entire point of delegation. Once a policy is set, an agent can spend within it without further owner action, unless that specific spend requires approvals under the vault's own rules.
Owner identity in the app
The dashboard derives the owner field directly from your connected wallet's public key at the moment you create a vault — you never type or paste it. Application-level "roles" in an organization (Administrator, Treasurer, and similar labels) are separate, purely informational metadata; see Owner/agent/approver authority boundaries for why those labels never substitute for actual on-chain owner authority.
Losing owner access
If the owner's wallet key is lost, there is no PolicyVault-side recovery mechanism — nobody operating PolicyVault, hosted or self-hosted, can restore it. This mirrors ordinary Kaspa wallet custody: protect the owner's seed phrase the way you would protect any wallet holding funds.
See also: Owner recovery (recovering a vault's funds using the owner key), Agent/Delegate.