Bounded AI agent · live on testnet
Agentic No replay · fully live

Execute in the light.

An AI agent carries out the DAO's already-approved decision — on a short leash. It pays for its own data over x402, reasons with Gemini, and every plan must clear an on-chain policy before a single stroop moves. A hallucinating agent literally cannot move funds the wrong way.

shadowkit-agent · bounded execution
  1. GOVread approved vote
  2. X402pay for data
  3. PLANbounded plan
  4. POLICYgate the plan
  5. CHAINexecute on-chain
$ idle — press Run. The agent reads the approved vote, pays x402, plans with Gemini, is gated by policy, then submits the swap on testnet. Every run, live.

$ runs server-side in a Cloudflare Pages Function — the Gemini key and the executor signing key never reach your browser.

Bounded execution

Two degrees of freedom.
Both bounded.

The DAO already decided whether to act and which assets are in play. The agent only decides how much and the slippage floor — and two independent guards must both accept the plan, or nothing happens.

  1. 01 / GOV

    Read the vote

    Reads GovVault on testnet. If the proposal is not APPROVED, it refuses — 403, no transaction.

  2. 02 / X402

    Pay for data

    Pays this site's premium-data endpoint over x402 (USDC) to fetch the quote it reasons over.

  3. 03 / PLAN

    Bounded plan

    Gemini (server-side, key never in the browser) returns a structured plan: action, amountIn, minOut.

  4. 04 / POLICY

    Gate the plan

    Checked against the on-chain cap, assets, and approval. A hallucinated or over-cap plan is BLOCKED.

  5. 05 / CHAIN

    Execute in the light

    Only an allowed plan is signed by the executor key and submitted on-chain — real tx, real balances.

Deployed & live

Every run touches these contracts.

GovVault
CDYN…WTX5 ↗
AgentPolicy
CCFU…XVFV ↗
Swap venue (AMM)
CADB…S3OH ↗
USDC (assetIn)
CDRN…4ITI ↗
wXLM (assetOut)
CAB3…E5TB ↗
Treasury
GCUL…BKVJ ↗