Most Web3 “recurring payment” tools rely on a static ERC-20-style approval: the payer grants a contract access to a large or unlimited balance, and an off-chain bot manually calls a transfer function each period. If that contract is compromised, the entire approved balance is exposed.
OpenFi’s Allowance State Machine tracks elapsed time, per-epoch maximums, and remaining duration natively on-chain, so a compromised session key can never move more than the ceiling allocated to the current active epoch.
This module currently lives on Aptos (Move), chosen for its resource-oriented safety model, and is what session keys are checked against on every debit pull.
Stellar-side settlements do not currently sit behind an identity/allowance gate. This is a known, tracked gap, not an assumption of parity with the Aptos path.
