Funded program execution

Authorize only named programs that already hold their native budget in the reviewed vault. Each owner signature fixes the operator, deployment, programs, nonce window, expiry and permanent principal, gas and call caps.

Model execution and scheduled execution need separate permissions. Unknown transactions retain their original bytes and commitments. Revocation stops future submissions; it cannot undo an issued reward root or transaction.

Loading program execution records…