Documentation

How the Trellis kiosk, the Solana program behind it, and the plans fit together.

The Trellis Kiosk Terminal

Browser wallets ask too much of the people who need protection most. The Trellis Kiosk Terminal is a touchscreen device for the vault holder: no browser, no seed phrase, no extensions. It does two things. It shows the balance, and it sends USDC to approved family.

One screen, one job

Two wallets on screen: My wallet and Family wallet. Pick a person, pick an amount, confirm. Large type, no jargon, nothing to configure after setup.

Family pairing

On first boot the kiosk shows a QR code and a 6-digit fallback code. A relative scans it with the Trellis app and links over Bluetooth. The kiosk only accepts the code currently on its own screen.

Same rules, on-chain

The kiosk gets no special powers. Every send goes through the Solana program: people on the list only, inside the daily USDC limit. Anything over the limit becomes a pending request until a guardian signs from their own device.

The Solana program

Every rule lives in one Anchor program on Solana. The kiosk, the family app, and this website are only interfaces. None of them can move funds the program would refuse.

Vault account

// programs/family-vault/src/state.rs
#[account]
pub struct Vault {
    pub owner: Pubkey,
    pub vault_token_account: Pubkey,
    pub daily_limit: u64,
    pub spent_today: u64,
    pub last_reset_day: i64,
    pub is_pool: bool,
}

Guardian approvals

Each vault holds up to five guardian keys in a TrustedApprovers account. The owner can't be added. A withdrawal above the daily limit is stored as a PendingWithdrawal and only goes through when a listed guardian signs approve_withdrawal from their own wallet. add_beneficiary_urgent skips the 48-hour wait but needs two different guardian signatures.

Daily spending limits

Limits aren't enforced by an API. The program checks them against Clock::get()?.unix_timestamp: it refuses a withdrawal if the amount plus spent_today would exceed daily_limit. The day index is unix_timestamp / 86_400. When it moves past last_reset_day, spent_today goes back to zero, so the limit resets at every UTC midnight.

Pricing

Personal vaults are free apart from Solana rent. Pro is $25 a month billed yearly, Advisor is $499 a year for firms, and the Terminal is a $12,500 device deposit plus a $9,600 yearly licence.

Compare plans

Support

Email trellisvault@gmail.com. Terminal customers get business-day support and next-business-day device replacement.