WCAHT CHAIN
VALIDATOR ONBOARDING

Validator security baseline

Minimum controls every public validator operator should apply.

Validator security baseline

  1. Verify signed artifacts and checksums.
  2. Use SSH keys; disable root/password login; restrict SSH sources.
  3. Generate and back up unique keys locally.
  4. Patch the OS and enable firewall/rate limiting.
  5. Never expose secrets through QR, URLs, logs, screenshots, support or AI chats.
  6. Monitor height, finality, peers, disk, service restarts and voting weight.
  7. Do not retire an old voter until the replacement is active.
Open secure command guide
WCAHT Validator Program · Public Testnet · Key files selected for pairing are read locally and never uploaded.