@oracle-agent/oracle 0.22.16 → 0.23.1

package/SETUP.md

@@ -1,10 +1,8 @@
 # Oracle setup
 
-Oracle's public CLI is a standalone multichain agent. By default it can read,
-research, quote, simulate, and build unsigned artifacts. Anyone can also self-host
-Oracle on their own machine, import their own key into an encrypted local vault,
-arm capped policy, and sign locally. It does not need Hermes and Oracle's hosted
-public HTTP plane never receives private keys or broadcasts transactions.
+Oracle's public CLI is a standalone, prepare-only multichain agent. It can read,
+research, quote, simulate, and build unsigned artifacts. It does not need Hermes,
+it does not accept wallet private keys, and it does not broadcast transactions.
 
 The owner-operated signer/executor is private infrastructure. It is not published
 on npm and is not part of public onboarding.
@@ -14,8 +12,7 @@ on npm and is not part of public onboarding.
 - Node.js `20.19.0` or newer
 - npm
 - A supported model login or API key for chat
-- A user-controlled wallet for manual signing, or an optional local encrypted
-  vault when self-hosting local execution
+- A user-controlled wallet only when reviewing and signing a prepared artifact
 
 Linux, Windows, and macOS apps are in beta.
 
@@ -324,26 +321,3 @@ as a workaround.
 - [Buzz integration](docs/buzz-integration.md)
 - [Architecture](docs/architecture.md)
 - [Security policy](SECURITY.md)
-
-## Local self-custody vault
-
-Anyone can host Oracle on their own machine and sign locally:
-
-```bash
-oracle vault import --key-file ./oracle-key.txt --pass-env ORACLE_LOCAL_VAULT_PASS
-oracle vault unlock --pass-env ORACLE_LOCAL_VAULT_PASS
-oracle arm --max 0.05 --chain base --ttl-min 30 --destination 0x2626664c2603336e57b271c5c0b26f421741e481 --spender 0x000000000022d473030f116ddee9f6b43ac78ba3 --selector 0x095ea7b3
-oracle snipe 0x1111111111111111111111111111111111111111 --chain base --execute --pass-env ORACLE_LOCAL_VAULT_PASS
-oracle revoke emergency --type nft --collection 0x3333333333333333333333333333333333333333 --operator 0x9999999999999999999999999999999999999999 --chain base
-oracle arm --off
-oracle vault lock
-```
-
-Keys stay encrypted under `~/.config/oracle/keys/`. Unlock writes only non-secret
-session metadata; signing decrypts from the passphrase-protected vault in the
-local process. `oracle arm` stores local chain, destination, spender/operator,
-selector, and spend caps; the signer checks them before any transaction is sent.
-Emergency revoke/cancel can prepare same-nonce cancel transactions and approval
-revokes, but it is a race tool, not a guarantee against mined atomic drains. The
-public HTTP plane never receives key material. Default CLI remains prepare-only
-until you unlock + arm.