Three wallet roles: login, trading spend, ProofNetwork burner. Trading requires explicit opt-in and safety limits.