The whole system, in order.

Overview

Perpetua lets a wallet owner set up a switch: a list of heirs, a set of assets and a check-in interval. While you keep checking in, nothing happens. If you stop, and the interval and a 7-day grace period both pass, the switch executes and your assets go to your heirs by the shares you set.

Everything is enforced by one Solana program at PerpX2pWbVffrbJfb4zbDtGkJeWGyucH2HVPkvdpDit (mainnet, deploying soon). The website is a convenient way to use it, not a requirement.

Switches

A switch is a program account that belongs to your wallet. It stores:

• Heirs: a wallet address and a share for each, in basis points that add up to exactly 100%. Labels such as "Mom" stay on your device and are never written onchain or sent to us.
• Assets: which token accounts the switch may deliver, how much of each, and whether an asset goes to one named heir or is split.
• The interval, the grace period, your last check-in, and the switch status: active, paused, executing or executed.
• For each heir, the hash of their sealed letter, if you wrote one.

Free wallets can have 1 active switch at a time and Holders 3. Patrons can have as many as they like. Each switch can name up to 2 heirs on Free, 10 on Holder and 16 on Patron, and hold up to 12 assets.

Assets

Assets never leave your wallet before execution. For each one you choose an amount and the program is approved as delegate for that amount.

• SOL: the amount you set aside (at least 0.01 SOL) is wrapped into a reserve account you own and delegated. You can add more later. Heirs receive native SOL.
• Tokens: any SPL or Token-2022 token, delegated from your token account. If you later spend some, execution delivers what is left, up to the approved amount.
• NFTs (Holder and Patron): each NFT goes whole to the heir you name. Standard SPL and Token-2022 NFTs are supported.

Tokens whose mint uses a transfer hook, is non-transferable, uses confidential transfers or freezes new accounts by default are refused when you add them, because delivery could not be guaranteed.

Check-in and grace

A check-in is one Perpetua instruction that sets your last check-in to now. It costs only the network fee. Intervals are 30, 90, 180, 365 days; Patrons can set any interval from 7 days to 5 years.

The deadline is your last check-in plus the interval. After the deadline a 7-day grace period begins. You can check in at any point until execution starts, even after grace has ended. Any change you sign also counts as a check-in. A paused switch has no deadline.

Execution

Once interval plus grace has passed, the switch is executable. Execution happens in steps, each a permissionless instruction:

1. Trigger marks the switch as executing. From this moment the owner can no longer edit or cancel it.
2. Settle moves each approved asset into an escrow account owned by the switch, takes the 0.5% execution fee into the treasury, and unwraps SOL.
3. Deliver sends each heir their share, creating their token account if needed. Each heir's share is rounded down, and the last heir receives the remainder, so the shares always add up exactly.

Our keeper runs these steps every 15 minutes, but anyone can. An asset whose account was closed, emptied, frozen or re-delegated is skipped and the rest is delivered. When every asset is delivered or skipped, the switch is marked executed and every step appears on the Ledger.

Last letters

Holders and Patrons can leave a private letter for each heir. The letter is encrypted in your browser with a two-part key: one part opens only with the heir's own letter key, the other only after execution. The ciphertext is stored permanently on Arweave and its hash is written to your switch. Heirs create their letter key by signing one message with their wallet; you can send them a link to do so. The full design is on Security.

Reminders

Reminders are optional and set per switch. Choose email, Telegram or both. They arrive 30, 7, 1 days before your deadline, and daily during the grace period. Patrons get priority delivery. Reminder contacts are stored off-chain, only for this purpose, and you can remove them at any time.

Fees

• Setup: 0.05 SOL per switch on the Free tier. No setup fee on Holder and Patron.
• Check-in: free. You pay only the Solana network fee.
• Execution: 0.5% of the assets delivered. Fees round down, so a single NFT pays no fee.

Fees go into a treasury account controlled by the program. The treasury's SOL buys $PERPETUA, which is burned.

Tiers

Your tier is read from the $PERPETUA you hold when you set up or edit a switch.

Editing, pausing, cancelling

Until execution starts you can change heirs and shares, add or remove assets, change amounts, change the interval, add letters, pause and resume. Cancelling revokes every approval the switch holds, unwraps the SOL reserve and closes the switch, returning its rent to you, all in one transaction. Approvals you gave to other apps are never touched.

For heirs

You do not need to do anything to receive assets. To see switches that name you, connect your wallet in the app. To read a letter after execution, open it there and sign one message. If someone asks you to create a letter key, it takes one signature and does not move any funds.

FAQ