FAQ

Is my money safe?

Heron never holds your keys. It gets a limited, expiring permission to act inside an account you own. Read Safety for the risks we consider real, including the ones that are not comfortable.

Why is Heron doing nothing?

Usually because nothing is worth doing. Heron only acts when the return beats the full cost of acting. A run of refusals is the product working as designed, and each one is recorded with its reasoning.

Can I withdraw if Heron goes down?

That is what the exit path is built for, and the code is checked to touch nothing of ours. But it has never been run end to end, so we will not tell you it is proven. And if the service holding your key is down you cannot sign at all, which is a lockout no exit path can solve. Withdraw has the detail.

Can Heron send my money somewhere else?

No. Its permission is limited to an allowlist of venues, capped in size, and it expires. It cannot send funds to an arbitrary address.

Is this real money?

Not yet. This runs on GIWA Sepolia with test tokens and faucet-funded yield.

How do I check a decision myself?

Verify a decision walks through replaying one from published inputs without asking us for anything.

What does Heron not prove?

That its record is complete. Publishing a decision proves what it says. It does not prove nothing was left out. We run the record, so publishing more of it does not fix that. Independent parties co-signing would, and that does not exist yet.