Skip to content
Gao Internet
Trust

Trust is built into the architecture.

Users hold their identity and keys. Apps and agents get only the permissions they're given. Sensitive actions are approved, checked against policy and recorded.

How a sensitive action is authorized

  1. 01RequestAn app or agent asks to act.
  2. 02Your approvalConfirmed with keys on your device.
  3. 03Policy checkRules run before anything executes.
  4. 04Scoped permissionOnly what the task needs.
  5. 05ReceiptA record you can review later.

Principles

Principles the architecture is built on.

User-owned identity

A .gao identity belongs to the person or business that holds it. Apps request access; they don't own the account.

Non-custodial by design

Keys and signatures stay on the user's device. Gao Payment moves value without holding user funds.

Explicit authorization

Payments and sensitive actions require the user's approval before they run.

End-to-end encrypted messaging

Meshii, the messaging app on Gao Network, provides end-to-end encrypted messaging.

Capability-scoped AI

Agents receive narrowly scoped permissions for specific tasks — not blanket access to data or funds.

Policy-gated execution

Sensitive operations are checked against policy before they execute.

Auditable operations

Receipts, approvals and agent actions leave records that can be reviewed afterwards.

Decentralized infrastructure

Independent operators contribute capacity through Gao DePIN nodes they own.

Boundaries

What Gao is not.

  • Not a custodian

    Gao Internet is designed so users' signing keys and funds stay with the user.

  • Not a financial product

    No yield, no deposits and no investment offer. Gao Internet is infrastructure software.

  • Not an identity landlord

    A .gao identity belongs to the person or business that holds it.

  • Not a black box

    Receipts, approvals and agent actions are designed to be reviewable after the fact.

Security

Security is a practice, not a promise.

No system is free of risk. If you find a vulnerability, report it privately to security@gao.global — see the disclosure policy for scope and safe harbour.