Product / servicePublic reference
Lit Protocol v3 / Chipotle
Programmable signing in a trusted execution environment
Runs Lit Actions in a TEE and controls which callers and actions can use a programmable key pair.
THE QUESTION IT ADDRESSES
Where can signing rules run outside the agent’s own prompt?
A concise reading of published information. The explanatory grouping below is editorial, not an implementation test.
A simplified mechanism
- Define an action and a group that permits it to use a PKP.
- Scope a usage key to the necessary groups before executing the action.
What it does not establish
Rules still need correct implementation and narrow permissions. This entry uses v3/Chipotle documentation, not the previous Datil or Naga architecture.
Where it fits
A programmable signing component for wallet applications; it does not itself define merchant checkout or payment settlement.
Sources & further reading
Sources reviewed on2026-11-01. Summaries are paraphrased; follow the current source for changes.