The brake cannot be removed faster than the brake.

A non-custodial vault on Monad that enforces spending rules you set on your own money, where loosening any rule is itself subject to your cooldown, so you cannot disable the brake faster than the brake.

67 / 67
Tests passing
10,000
Fuzz runs per test
0
Aderyn findings
0
Admin keys

I do not have one dramatic loss transaction to show. I built Ostrune because I know the recurring temptation to spend or trade before thinking it through.

My wallet executes that impulse instantly, before the calmer version of me gets another vote. Custodial platforms can impose cooling-off periods, but I wanted protection I could choose without giving a company custody of my funds.

Tightening applies now.

A longer cooldown, a smaller allowance, adding a guardian. Any change that binds you harder takes effect the moment you submit it.

Loosening waits.

It queues under the cooldown already in force, not the one you are proposing. There is no exception, and no admin key that can grant one.

How it works

  1. 01

    Deposit is always free. No conditions, no delay.

  2. 02

    Withdraw inside your instant allowance and it executes immediately, in one transaction.

  3. 03

    Withdraw beyond it and the request queues for your cooldown. You can cancel it any time before it matures.

  4. 04

    An optional guardian can veto a queued withdrawal. A guardian can never move funds, redirect them, or change your rules.

  5. 05

    Once the cooldown passes, anyone can execute it, since the recipient and amount were fixed at the moment you queued it.

Six ways I tried to rob my own vault

  1. 01

    Remove the cooldown directly

    Proposed a zero-second cooldown. It queued under the cooldown already in force, not the one I was proposing.

  2. 02

    Chain smaller reductions

    Proposed a shorter cooldown repeatedly. Each attempt is still bound by whatever cooldown is active at that moment.

  3. 03

    Race a withdrawal against a rule change

    Queued a withdrawal and a loosening rule change together. Neither one lets the other skip the line.

  4. 04

    Drop the guardian, then withdraw

    Removing an existing guardian is itself a loosening. It queues like everything else.

  5. 05

    Burst-spend at the refill boundary

    Tried to time withdrawals around the allowance refilling. The accounting is continuous, not a resettable window.

  6. 06

    Raise the instant allowance

    A bigger burst limit is a loosening too, cooldown included, even if the delay itself is left untouched.

Real attempt, ticket 4, on Monad Mainnet

I proposed a cooldown of zero while owning the vault outright.

Active cooldown after cancellation: 86,400 seconds. Unchanged.

All six paths are also proven in the test suite: 67 of 67 tests pass, every fuzz test runs 10,000 times, four stateful invariants run thousands of call sequences, and Aderyn's 88 detectors report zero high and zero low findings.

Live proof

This is my own vault on Monad Mainnet, funded with my own disposable MON. Every line below is a real transaction.

Every ticket above has settled on-chain: executed after its cooldown, cancelled, or vetoed. Nothing here is staged.

Honest limitations

There is no emergency access.

A binding vault is a liability if you need funds urgently. Any escape hatch would defeat the whole mechanism. Choose a cooldown you can actually live with, and keep emergency money somewhere else.

A guardian can grief you, or lose their key.

The guardian is optional, can only veto, and can be replaced, subject to the same cooldown as everything else.

You can bypass all of this by not funding the vault.

That is inherent to any non-custodial commitment device. Ostrune only governs money you choose to put inside it.

This is unaudited software.

It has not had an independent professional audit. Treat it as personal, experimental, and use it with money you can afford the risk on.

Set a cooldown you can actually live with.

Then find out how hard it is to talk yourself out of it.