ExchainExchain
DOCSREQUEST_A_PILOT →
THE CONTROL LAYER FOR AGENTIC CAPITAL

Agents should not
control money.
Math should.

Exchain
AGENTEXCHAIN_GATEPAYMENT_RAIL

The agent proposes. The math decides. Your agent moves real money at machine speed — and the most it can ever lose is a number you set. Not even Exchain can exceed it.

Hardware enclave network live. Pilots open.
SYS:EXCHAIN_GATE / MODE:FAIL_CLOSED
0
KEYS_HELD_BY_THE_AGENT
2-of-2
ENCLAVE_CO-SIGN_QUORUM
3
INDEPENDENT_TRUST_DOMAINS
X
MAX_LOSS — YOU_SET_IT
02 / THE_PROBLEM

One prompt injection.
The whole balance.

That's why no one gives an agent real money.

NOT_THE_ANSWER
An approval queue.
Humans can't run at machine speed.
NOT_THE_ANSWER
A policy promise.
A vendor's promise is not a bound.
NOT_THE_ANSWER
An agent wallet.
The key is the blast radius.
−“Trust us.”EVERYONE_ELSE
+Even we cannot drain you.EXCHAIN
03 / THE_ARCHITECTURE

Three trust domains.
All must collude to fail.

The agent never touches a key. Every spend is judged in three independent places at once.

INTENT
THE_CONSTITUTION
VERDICT
§
01 / DECISION_PLANE
The constitution decides.
Budgets, caps, rate limits. Ambiguity is a denial.
⬡
02 / CUSTODY_PLANE
Hardware co-signs.
Attested enclaves re-check every spend. Even we can't open them.
◈
03 / SETTLEMENT_PLANE
The ceiling holds.
A hard cap on what can ever leave — even fully compromised.
04 / THE_RULES

Not just
spending caps.
Law.

01Stateful budgets
02Protocol-aware checks
03Cryptographic verification
treasury-agent.const
COMPILED · DETERMINISTIC
01# treasury-agent.const
02
03# budgets — rolling, not static
04invariant velocity_burst sum over 60s <= 50
05invariant hourly_outflow sum over 1h <= 5_000
06invariant per_counterparty sum by cp/24h <= 1_000
07invariant monthly_envelope sum over 30d <= 50_000
08
09# protocol-aware — the deal, not just the amount
10require identity payee.verified == true # no anonymous payees
11require fair_price amount <= market×1.02 # never overpay
12require invoice_match payment == invoice # no invoice, no pay
13require mandate expires > now # authority has a TTL
14
15# every fact arrives signed — forgery = denial
16oracle prices signed stale → floor
17attest facts signed revoked → deny
→ enforced on every intent · re-verified in hardware
FACTS_SIGNED_BY:
Pyth Network
SIGNED_PRICES
Chainlink
VERIFIED_ROUNDS
EAS
SIGNED_FACTS
05 / THE_PRODUCT
SHIPPING_NOW · SELF-HOSTED

Meet the Gate.

It stands between your agent and your money. Every spend is checked before a cent moves — denials never reach the rail.

GATE_DASHBOARD
LIVE
ENCLAVE_CO-SIGN 2-of-2 · signer 0x7a1c…e9f3
1,204
ALLOWED
37
DENIED
0
BYPASSED
BUDGET_HEADROOM
velocity_burst96%
hourly_outflow61%
monthly_envelope18%
LAST_VERDICTS
ALLOWpay 250.00 → vendor_7f3a
DENYpay 9,800.00 → unseen_addr · velocity_burst
DENYhire agent_x @ 10,000 · above published rate
01
Five-minute install
Two binaries next to your stack. No account, no hosted dependency. Kill it — everything works as before.
02
Holds no keys
The Gate decides if money moves. It never moves it. We are never in the path of your funds.
03
Co-signed in hardware
Every approval is re-verified inside attested enclaves and journaled with their joint signature.
$ ./install.sh && exchain-gate --constitution treasury.const
06 / THE_GUARANTEE

Assume total failure.
Bound the downside.

EXCHAIN_TERMINAL
$ ./exchain --mode=paranoia --assume=failure
[001]ASSUMPTION_01=The model will hallucinate.
[002]ASSUMPTION_02=The agent will be prompt-injected.
[003]ASSUMPTION_03=The host will be compromised.
→ Computing worst-case exposure...
→ MAX_LOSS = the number you set. NOT_EVEN_EXCHAIN. FAIL_CLOSED.
We don't fix probabilistic models. We build the layer beneath them — so when the intelligence breaks, the loss is a number you chose, enforced by cryptography, with a signed audit trail for every decision.
07 / DEPLOY

Put your agent on real money.
Keep the downside a number.

Design-partner pilots are open. Bring your rail — the Gate drops in beside it.