Security Policy

Wasit runs real payment flows against live services and signs with a real key. That makes it a tool that can spend money, permanently close a payment channel, and — if pointed at infrastructure you do not own — put load and unwanted transactions on somebody else's service. This document states how it handles keys, what it will and will not do on its own, and how to report a problem.