> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zyf.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Custody and permissions

You keep the funds. The Agent receives a limited permission to move them between pools you have already allowed.

### What you own

Every depositor gets a [Safe7579 Smart Account](/docs/product/infra/safe7579). It is a smart contract wallet. Your EOA is the sole owner. There is no shared vault and no pooled balance with other users.

If the Zyfai app is down, the same Safe is still reachable in the [Safe app](/docs/product/ecosystem/resources/safe-guide). You can withdraw, claim, or move tokens from there.

Zyfai cannot seize the Safe. Pausing the Agent stops delegated execution. It does not move your capital. See the [Session Key kill switch](/docs/product/intelligence/emergency#3-session-key-kill-switch).

### What the signature allows

During onboarding you sign one [Session Key](/docs/product/control/session-keys). That signature is the permission boundary. It is not a transfer of ownership.

The key is scoped to a target registry: the contracts, functions, and parameters of the protocols in your strategy. The [Security Proxy Gateway](/docs/product/control/proxy) checks every Agent transaction at three levels before it can run:

* contract address
* function selector
* calldata parameters

Anything outside the registry is rejected onchain, including a request the Agent should not have sent. You do not sign again when a new pool is added to that registry.

The session private key is held in a Trusted Execution Environment via EigenCompute KMS. Zyfai operators do not have access to it. The stack is [audited](/docs/product/overview/audits).

### What you do not have to pay gas for

Account deployment, rebalancing, and auto-compounding are sponsored by the [Paymaster](/docs/product/infra/paymaster). Gas is not taken from your balance.

### What you can change later

From the dashboard you can pause the Agent, change strategy, and narrow protocols or pools. Pausing stops new Agent actions. Your funds stay in the Safe, in whatever pool they already occupy, until you withdraw or resume.

Next: [Risks you take](/docs/product/depositors/risks).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.