Overview of the Extended Recovery Pallet
The Extended Recovery Pallet is a TEE-native runtime module that governs Interstellar’s decentralized, threshold-based account recovery. It extends the standard Polkadot recovery pallet (which relies on trusted accounts/majority signatures) by adding support for multi-item recovery, biometric-first flows, and hardware-bound validation. Key features include:
- Item-Based Recovery: Uses item account IDs (NFC tags, VCA token files, etc.) instead of just trusted accounts.
- Threshold Logic: Supports configurable M-of-N recovery policies (e.g., 2-of-3).
- TEE-Only Verification: Logic executes within a trusted Integritee enclave to verify item IDs, biometric unlocks, and SE-signed challenges.
- Biometric-First Initiation: Recovery requests must be triggered by biometric confirmation on a mobile device to prevent programmatic replays.
- Account Rotation: Successful recovery generates a new SE-based mobile proxy keypair and delegates the root account to it.