Blockchain wallets conventionally follow an ownership model where possession of a private key grants unilateral control. However, this assumption is brittle for emerging settings such as AI agent wallets, organizational custody, and enterprise payroll, where multiple actors must coordinate without exposing secrets or leaking internal activity. We present PASS, a Provenanced Access Subaccount System that replaces role-based or identity-based control with provenance-based control: assets can only be used by subaccounts that can trace custody back to a valid deposit. A simple Inbox-Outbox mechanism ensures all external actions have verifiable lineage, while internal transfers remain private and indistinguishable from ordinary EOAs. We formalize PASS in Lean 4 and prove core invariants, including privacy of internal transfers, asset accessibility, and provenance integrity. We implement a prototype with enclave backends on AWS Nitro Enclaves and dstack Intel TDX, integrate with WalletConnect, and benchmark throughput across wallet operations. These results show that provenance-based wallets are both implementable and efficient. PASS bridges today's gap between strict self-custody and flexible shared access, advancing the design space for practical, privacy-preserving custody.

翻译：区块链钱包通常遵循所有权模型，即私钥的持有者享有对资产的单方面控制权。然而，这一假设在人工智能代理钱包、组织机构托管及企业薪资支付等新兴场景中显得脆弱——这些场景下，多个参与方需在不泄露秘密或内部活动的情况下协同操作。我们提出PASS——一种基于溯源控制的访问子账户系统，以替代传统的基于角色或身份的控制机制：资产仅能被能够将托管链路追溯至有效存款的子账户使用。简单的收件箱-发件箱机制确保了所有外部操作具有可验证的溯源，而内部转账则保持私密且与常规外部拥有账户不可区分。我们在Lean 4中形式化定义了PASS，并证明了核心不变性，包括内部转账的隐私性、资产可访问性及溯源完整性。我们基于AWS Nitro Enclaves与dstack Intel TDX的机密计算后端实现了原型系统，将其整合至WalletConnect协议，并针对钱包操作进行了吞吐量基准测试。结果表明，基于溯源的钱包兼具可行性与高效性。PASS弥合了当前严格自我托管与灵活共享访问之间的鸿沟，拓展了面向实际应用且保护隐私的托管方案的设计空间。