// Section 14.9 · Operate
Security, Inside the CLI
1 min14.9Operate
- Separate node key. A secp256k1 key generated on first
init, stored at~/.parallelix/node.keywith mode0600. It signs liveness and results only. It is never the staking wallet's key.init --forceoverwrites it and orphans the old node (the oldnodeKeyHashno longer matches any running machine), so use it deliberately. - Signature on every message. Every heartbeat and every result is Ethereum personal-signed by the node key. The coordinator verifies the signature; unsigned or mis-signed messages are ignored.
- No outbound credentials. The CLI emits no wallet private keys, no
contract-owner keys, no third-party tokens. Rewards accrue to the
on-chain
nodeIdand are claimed by the staking wallet in the Console.