Proof of what an AI agent was allowed to do, and what it then did
The back office for trading bots and agents
Stage
Startup
Startup
Founded
2026
2026
Based in
Not given
SE
Pricing model
Open source
Paid
Pricing
Not given
Starter: $199/month (2 active mandates, 5,000 rulings/month). Team: $799/month (20 active mandates, 100,000 rulings/month). Enterprise: Custom pricing. Additional: $20/month per further active mandate and $1 per further 1,000 rulings. Merchants accepting AI-agent payments: 0.5% per settled payment,
Key features
Signed permissions with passkey authentication
Receipts for each agent action with signatures
Free checker tool to verify compliance
Quantum-safe signatures (Ed25519 and ML-DSA-87)
Permission narrowing for helper agents
Permission cancellation with signed acknowledgement
JavaScript and Python libraries
LangChain and Pydantic AI middleware
Shadow mode for testing intents without execution
Execute intents in Sandbox (paper fills) or Production (queued orders)
Halt all signing across account with single control
Permissions limited by venue, action, per-transaction and daily caps, expiring within ninety days
Reconciled books recorded on-chain
Receipts with Decionis ruling, order, fill transaction, settlement, ledger entries and balance
HTTP API with strategy contract
Typed error handling with rate limiting and retry support
Idempotent intent submission with intentKey for safe retries
What makes it different
Only open-source project combining machine-checkable limits, permission narrowing for helpers, and signed permission cancellation
Built entirely from published standards with no hand-made components
Free and no dependencies, sends nothing anywhere or holds money
Distinguishes between record integrity and whether agent stayed within permission
All published versions stay available for backward compatibility
Pre-trade checks ensure intents meet policy before execution
Sandbox environment for paper trading and testing without real execution
Recorded decisions and books reconciled on-chain for audit and transparency
SDKs and MCP server free under Apache License 2.0
User retains custody and control; platform cannot access wallet or private keys