A wallet built in four tiers.

Every wallet has one secret that can move its funds. What matters is which parts can touch it. SciPHR runs each action through four tiers, and only one of them can sign.

The first tier is the security chip in your iPhone. It checks a live Face ID to gate access, but cannot hold the key that signs XRP Ledger transactions. That key lives one tier down, in the keychain, released for the instant of a signature and never leaving the device.

The third tier is the backend. It prepares an unsigned transaction and broadcasts the signed one your phone returns. It holds no key. The fourth is the public ledger, holding the account's identity, its recovery rules, and an encrypted backup that opens only on your device.

Think of a courier who carries sealed envelopes but holds no key to open them. Down the stack, the signing key sits in one place, the device in your hand.