What the agent
can and cannot do

00 · What is listed

Robinhood Chain, chain 4663

The vault holds USDG (Global Dollar) as cash and the tokens below, each swapped against USDG on Uniswap v3. Nothing else can be traded — not BTC spot, not perpetuals, options, leverage or short positions. A value can still watch a symbol the agent cannot trade (BTC, HOOD, MSTR, INTC, any US ticker); the action has to land on a listed token.

01 · The rule grammar

Seven values, one comparator, one number, one action

The compiler is Claude, told exactly this page and the state of your account, and asked for the one typed rule the sentence means. If any part is missing or impossible it refuses and names the part. Numbers may be digits or words; company names map to tickers; other languages are fine.

Comparators

≥ for above, over, past, exceeds, outruns, hits, reaches, by. ≤ for below, under, less than, falls, drops, narrows. A drawdown is a magnitude that rises as the price falls, so its comparator is always ≥, however the sentence phrases it.

Actions, and what they do when they run

Refusals

Cadence and fills

Every armed rule is evaluated once a minute for as long as its key verifies. A listed token’s price is read from its pool; tape values are re-read at most every thirty seconds. A fill is a Uniswap v3 swap against USDG, routed across the fee tiers that have liquidity and measured against a small probe at the same instant; an order that would move the pool past the impact cap is cut to the slice that fits and the rest is worked a minute at a time. Every leg carries slippage protection; the pool’s fee applies.

Dry run

Any sentence that compiles can be run against the last 180 sessions before it is signed. The same value is computed for each day from daily history and tested against the same comparator; the dates it would have fired are reported into the conversation, and nothing is signed.

02 · The session key

One signature, three limits, enforced by a contract

Every account owns a vault contract on Robinhood Chain (RobyVault.sol). The server generates a fresh keypair for the agent; the account signs the vault’s EIP-712 Grant naming that agent’s address, the token scope, the cap in USDG and the expiry; a relayer submits it and pays the gas. The vault stores the grant. Every execution is an Instruction signed by the agent that the vault verifies against scope, cap and expiry before it calls Uniswap — the agent never holds funds and cannot widen a limit it does not control. Sign-in is a separate Sign-In-With-Ethereum message from the same account key.

{
  "domain": {
    "name": "RobyVault",
    "version": "1",
    "chainId": 4663,
    "verifyingContract": "<the account's vault>"
  },
  "primaryType": "Grant",
  "types": {
    "Grant": [
      {
        "name": "agent",
        "type": "address"
      },
      {
        "name": "scope",
        "type": "address[]"
      },
      {
        "name": "cap",
        "type": "uint128"
      },
      {
        "name": "expiry",
        "type": "uint64"
      },
      {
        "name": "nonce",
        "type": "uint256"
      },
      {
        "name": "deadline",
        "type": "uint64"
      }
    ]
  }
}

Re-signing a key signs a new expiry over the same agent address; rules it had paused for expiry resume. Revoking it is immediate and one-way. The account’s own key is never sent to the server: a key made or imported in the browser stays in that browser, and a wallet keeps its own.

03 · The ledger

Every action, and every non-action, on the record

Checks are kept for thirty days; receipts and transfers are kept for the life of the account. The whole ledger exports as one CSV from the desk’s Wallet tab. A refusal is written in the same place as a fill, with the clause that refused it. Every fill and every transfer links to its transaction on Blockscout.