poztter.com
poztter.com / your master zone
Your master zone.
The master zone is the most important part of your POZ record. It says which keys can change anything about you, including which other keys are allowed to do which things. Get this right once, and the rest is easy.
three things every master zone should have
- A daily-use survivorship group with one or two strong keys (a hardware token, your primary device).
- A recovery survivorship group that doesn't depend on the daily group. Family, an agency, your lawyer, a deposit box — the model can express many shapes.
- Sub-zone delegations for at least Identity and Service, with deny ≥ grant.
original_master_hash is computed from your genesis
revision and never changes. Take time on the genesis. You can
revise everything else later — but the genesis is what permanently
identifies you.
practical patterns
solo, with recovery
The most common configuration. One primary key for everyday signing, plus a recovery group for if it's lost.
| Group | Key | Survivorship value |
|---|---|---|
| 1 (Primary) | Hardware token | 100 |
| 2 (Recovery) | Family member 1 | 40 |
| 2 (Recovery) | Family member 2 | 40 |
| 2 (Recovery) | Family member 3 | 40 |
solo, with agency
One primary key, plus a "user + agency" group for recovery. The agency can't act without you, and you can't be locked out by the agency.
| Group | Key | Survivorship value |
|---|---|---|
| 1 (Primary) | Hardware token | 100 |
| 2 (User + agency) | Recovery key (yours) | 50 |
| 2 (User + agency) | Agency key | 50 |
two devices, no third party
Phone and laptop. Either alone is enough day-to-day; both together can authorize anything.
| Group | Key | Survivorship value |
|---|---|---|
| 1 | Phone | 100 |
| 2 | Laptop | 100 |
things to avoid
- One key, no recovery. If you lose it, the record is permanently locked. Tools should warn loudly when you're about to do this.
- The same key in every group. Defeats the point of having multiple groups.
- Letting one party control a whole group. If a recovery group is "Trusted Agency Inc.'s three keys," it's just sole ownership by Trusted Agency Inc.
editing your master zone
Modifications follow the draft / sign / apply workflow. Increment the serial, collect signatures from a satisfying group, compute the hash, save. The poz_cli tool walks you through this.
Read the master zone specification for the full data layout, and survivorship for the threshold rules.