Labs
A lab pays for demonstrations without anyone holding the key that pays. Its budget sits in a Privy wallet whose policy allows one thing: escrowing a bounty in Thenar on Arc, up to a ceiling per transaction. Privy signs that. It refuses to sign anything else, so the budget cannot be spent on anything but bounties — by a leaked credential, a bug, or this server.
The lab's wallet
Reading Privy and Arc…
Post a bounty from the budget
Try to spend it on something else
Ask the same wallet to send 0.01 USDC to any address. Nothing in the policy allows it.
Bounties this budget has funded
Anyone who can reach this server can press these buttons. That is the point of the demonstration: the policy, not access to the page, is what decides what this wallet can do.