Getting started: your subscription authority
Before any money can move, a wallet opens its subscription authority: the program-owned account that will co-sign bounded pulls on the wallet’s behalf. This is the one-time setup step every other use case assumes. When you are done with subscriptions entirely, revoking kills every outstanding pull permission at once, and closing reclaims the account’s rent. Note the griefing case below: an attacker pre-funding your authority address cannot block you from initializing it.