Skip to main content

// Section 14.9 · Operate

Security, Inside the CLI

1 min14.9Operate
  • Separate node key. A secp256k1 key generated on first init, stored at ~/.parallelix/node.key with mode 0600. It signs liveness and results only. It is never the staking wallet's key. init --force overwrites it and orphans the old node (the old nodeKeyHash no longer matches any running machine), so use it deliberately.
  • Signature on every message. Every heartbeat and every result is Ethereum personal-signed by the node key. The coordinator verifies the signature; unsigned or mis-signed messages are ignored.
  • No outbound credentials. The CLI emits no wallet private keys, no contract-owner keys, no third-party tokens. Rewards accrue to the on-chain nodeId and are claimed by the staking wallet in the Console.