AgentVault

AgentVault — the cryptographically verifiable AI portfolio manager.

You chat. It trades. Every decision leaves a cryptographic receipt — who reasoned, who approved, who broadcast, what landed onchain. No screenshots. No "trust me." Just proofs.

Most AI agent demos are black boxes: a chat reply, a green checkmark, and you're supposed to believe it. AgentVault flips that. Every trade produces a public, independently checkable record:

The AI's reasoning is signed — model, prompt, and output hashed and signed by the backend (served via 0G Compute). The policy that approved it is signed — the rules you delegated, the verdict, the signer. The onchain execution is real — actual Universal Router swap on Sepolia, actual receipts. The broadcast is auditable — KeeperHub's independent log of attempts, retries, and gas bumps. All four are bound together — one rootHash = keccak(h(proposal) ‖ h(verdict) ‖ h(exec) ‖ h(keeperhubReceipts)) anchored on 0G Galileo via a deployed ProofAnchor contract. Tamper with any leaf, the root breaks. If the agent lies, the math says so.

How it works: Connect your wallet on Sepolia. Sign a one-time AgentSession — bounded delegation: max trade size, slippage cap, allowed tokens, daily volume cap, cooldown. No per-trade signature after that. Then chat: "rebalance ~$50 of USDC into ETH with at most 0.5% slippage." The agent proposes, the policy engine checks it against your bounds, you approve, and a 4-step progress strip lights up live: POLICY → SUBMIT → BROADCAST → CONFIRM. Open the Proof Explorer — every leaf clickable, every claim verifiable. Append ?demo=force-retry to see a real gas-underestimate revert, a retry with bumped gas, and attempts: 2 in the proof. No simulation.

Trust math, not promises.

pnpm monorepo with a Hono API backend (packages for 0G Storage memory, 0G Compute inference + signing, bounded-rules policy engine, canonical proof hashing + anchoring, mock/real/keeperhub exec adapters, Uniswap Trade API, KeeperHub Direct Execution), a Next.js frontend with ApprovalPrompt and ProofExplorer, and Foundry contracts. Hard-coded to testnets only — Ethereum Sepolia (11155111) and 0G Galileo (16602); mainnet chainIds are rejected at the chain-guard layer of every package, so it cannot accidentally touch funds you care about.