Architecture
Planbok is built on a decentralized network of MPC nodes that communicate to generate signatures without ever reconstructing the private key.
Distributed Key Generation (DKG)
Uses Feldman VSS to generate key shares across multiple nodes. No single entity, including Planbok, ever possesses the full private key.
Share Isolation
Each MPC node holds one share. Key material is encrypted at rest, and each share is wrapped so that a single storage system cannot open it alone. Signing requires both nodes, so one compromised node cannot sign alone.
Policy Engine
Every signature request passes through a rigorous policy check (Amount limits, Whitelists, Velocity controls) before nodes participate in the signing protocol.