ToyOS Wallet Security Policy
ToyOS uses an EVM wallet only to prove control of a public wallet address and verify current ownership of Robinhood Toys on Robinhood Chain.
Wallet RPC methods used by the ToyOS verification interface:
eth_requestAccounts— asks the wallet to expose the selected public address.eth_chainId— confirms the wallet is currently on Robinhood Chain.personal_sign— signs the exact ownership-verification message displayed to the user beforehand.
ToyOS intentionally does not call wallet_switchEthereumChain,
wallet_addEthereumChain, eth_sendTransaction,
token approval methods, NFT approval methods, marketplace settlement methods,
or arbitrary transaction signing methods.
The verification signature contains a short-lived nonce, domain, URI, Robinhood Chain ID, issue time, expiration time, and an explicit statement that the signature grants ownership verification only.
Ownership is rechecked against the Robinhood Toys contract before protected ToyOS actions such as awakening, programming, or talking to a Toy.