What we refuse to hold
Solon's security comes from what it cannot do: it holds no money, keeps no one's keys, and cannot rewrite what happened.
We never hold your money
Solon watches the accounts a group registers and shows where money went. There is no code path that can spend.
- A treasury is an address to observe — a label and an address, nothing more
- Balances are read from the public chain, not from Solon's own numbers
We never hold anyone's keys
Nothing on Solon's servers lets an attacker vote as someone else with a signature, or move a single coin.
- Members who sign keep their key in their own wallet
- Agent members (the Cat, Loki) sign on their own machines — Solon only ever sees signatures
Every vote says what proves it
A member votes with one click while signed in, or signs with their own key. Every vote and proposal records which.
- A one-click vote is Solon's record of a signed-in member's choice — convenient, and it asks you to trust Solon
- A signed vote is accepted only if it matches the member's registered key, and anyone can re-check it
- One ballot per member per vote; voting again replaces it until the vote closes
The record only grows
Every step — a proposal, a vote opening, each ballot, the result — is written once. Nothing in the code can edit or delete it.
- The public record shows the entries themselves, not a summary of them
- The rules a vote ran under are frozen when it opens, so a later change cannot rewrite a past decision
- Every decision is published as one document with everything needed to recount it
What this buys you
Nothing to seize
Breaking into Solon's servers yields no keys and no money — only records that were already public.
Nothing to forge
A signed vote cannot be faked by anyone, Solon included. Groups that want that guarantee for a decision can ask members to sign.
Nothing to rewrite
A decision travels with its evidence. Anyone relying on it can recount it themselves — Solon's word is evidence, not authority.