Flowguard

CircuitBreaker is a transaction firewall for autonomous onchain agents. An agent proposes a execution objective, such as swapping USDC for WETH, and CircuitBreaker converts it into an exact LI.FI Composer workflow, simulates it, and evaluates the resulting transaction against deterministic policy.

There can be one of three outcomes: routine actions are approved for autonomous execution, elevated actions require a flow-bound Ledger EIP-712 signature, and hard policy violations are blocked without an override. Policies inspect transaction semantics including signer, target, tokens, approval amount, minimum output, simulation status, expiry, and calldata integrity.

Unlike basic spending limits or approval systems, Ledger authorizes one immutable execution rather than granting broad wallet access. Dynamic’s server wallet remains the autonomous executor, while Ledger acts as a separate human authority.

• Built with LI.FI Composer, Dynamic server wallets, Ledger Wallet Provider

• LLM planner converts natural-language objectives into a strict schema but cannot create calldata, decide policy, or execute transactions.

• LI.FI Composer constructs and strictly simulates the atomic USDC-to-WETH workflow.

• CircuitBreaker evaluates Composer’s output using a deterministic, unit-tested policy engine.

• Dynamic provides the autonomous server wallet, signs approved transactions, broadcasts them, and waits for confirmation.

• Elevated actions use Ledger Wallet Provider and EIP-712 authorization bound to the agent wallet, target, calldata hash, policy digest, expiry, and one-time nonce.

• The backend recovers and verifies the Ledger signer before enabling execution.

• Adversarial simulations demonstrate that calldata mutation, expired flows, wrong signers, and unlimited approvals are rejected.

• The project includes ERC-7730 metadata prepared for Ledger Clear Signing and real Base mainnet execution proof.