Review of Spark's trust model

Privacy, control, and safety

The gate can stop an incoming SSP-funded credit after it has been created

The receiver-side task applies the wallet gate before completing pending transfers, expressly including SSP-funded incoming transfers. The source covers a freeze set after transfer creation but before task pickup. This establishes code behavior, not a known production compliance block. 1

1 sourceEvidence reviewed through July 14, 2026

What the evidence shows

Technical and product details

  1. Documented behavior

    A receiver-side background task completes pending incoming transfers, expressly including SSP-funded transfers. The code says a freeze applied after transfer creation but before task pickup must prevent the credit from landing in the receiver wallet. 1

    Supporting material shown on this page

    receiver-side transfer comment and gatePinned source code · github.com · checked 2026-07-14
    Relevant lines from the pinned source · open raw file
    5411	// Gate the receiver-side kill switch: this background cron completes any
    5412	// pending sender-initiated transfer including SSP-funded incoming ones,
    5413	// so a freeze applied between the initial createTransfer commit and the
    5414	// cron pickup must still stop the credit from landing in the frozen
    5415	// wallet. Sender-side is intentionally not gated — completing a debit the
    5416	// sender already pre-authorized is allowed even when the sender is frozen.

Interpretation

Why this matters for Spark's trust model

This is not merely a control over a user initiating new sends. The enforcement point can deny receipt of an already-created, hosted incoming credit. 1

This section states the trust-model consequence of the cited evidence. Conditional or inferred claims remain bounded by the next section.

Scope control

What this does not establish

  • This proves handler behavior when the relevant SO gate is set, not that a production payment has been blocked for compliance. 1

Sources and excerpts

Primary sources

The relevant details and available source-code excerpts appear alongside the claims above. This list preserves the complete original-source trail for independent verification.

1

receiver-side transfer comment and gate

Pinned source code · github.com · Pinned or archival · checked 2026-07-14

Open original source

How sources, absence findings, and limitations were evaluated