Every agent is a NAV-backed vault holding real stock tokens — NVDA, AAPL, SPY, QQQ — priced onchain by Chainlink. The AI reads the market, decides, and executes. And it can never run unchecked.
One primitive — a vault — and an AI with a very short leash.
Mint vault shares 1:1 at genesis. The share price is the portfolio NAV — total assets divided by supply, nothing hidden.
An offchain LLM loop samples Chainlink price feeds (multiplier-adjusted, including dividends), the RHJ asset API, and market context — then emits a trade decision as JSON.
The operator key can only call executeTrade on whitelisted venues. TradeGuard enforces whitelists, size caps, drawdown halts, and an oracle-price slippage bound — onchain, every time.
Withdraw shares for USDG anytime. Profits above the high-water mark pay the agent owner a 20% performance fee; flat or down months cost nothing.
Share price = portfolio value from live Chainlink feeds, divided by supply. No offchain number to fudge, no admin dashboard to trust.
Most "AI funds" are a wallet with a prompt. OctoAgents is a rules engine with a prompt. Every rule below is enforced by the contracts, not by good intentions.
| Guardrail | What it does | Enforced |
|---|---|---|
| Token whitelist | The AI can only trade assets the owner whitelisted — no unlisted tokens, no exit scams into junk. | onchain |
| Venue whitelist | Execution only through approved routers (Uniswap V3, Rialto propAMM). No arbitrary calls. | onchain |
| Position cap | Max 25% of NAV in any single equity. | onchain |
| Drawdown halt | If NAV falls 30% from its peak, trading halts until the owner resets the baseline. | onchain |
| Oracle slippage bound | Executed price must land within 1% of the Chainlink-implied price — the market can't be gamed against shareholders. | onchain |
| Price integrity | Staleness heartbeat + L2 sequencer uptime checks reject stale or broken feeds; corporate-action multiplier handled by the token itself (ERC-8056). | onchain |
| Operator rotation & pause | The owner can swap the operator key or pause trading entirely, anytime. | onchain |
| Inflation guard | Dead shares on first deposit prevent first-depositor NAV attacks. | onchain |
Users, vaults, and the sandboxed operator.
Aligned, not extractive.
Charged only on profits above the high-water mark, paid in USDG at withdrawal. If the agent loses money, it earns nothing until the old peak is recovered.
Nothing to hold the bag. The agent only wins when shareholders win.
AgentVault, TradeGuard, PriceOracle, factory & registry. Offchain LLM/heuristic agent with onchain guardrails. Verified end-to-end on a local chain.
Agent marketplace UI with live NAV, positions, and one-click deposit/redeem. Mainnet deploy on Robinhood Chain.
Any user creates and tokenizes an agent; performance leaderboards, copy-allocations, strategy URI verification.
Equity-backed leverage and covered-call vaults on top of the same guardrail layer.
No custody. You deposit USDG into a vault contract and receive ERC-20 shares. The vault holds the stock tokens onchain, in the contract, at all times. You redeem your shares for USDG whenever you want.
No. The operator key can only call executeTrade, which is bounded by TradeGuard (whitelists, position caps, drawdown halt) and an oracle-price slippage check. There is no function that lets the operator move assets to an arbitrary address.
Stock tokens implement ERC-8056: dividends and splits are applied through an onchain multiplier, and the Chainlink feed price already includes it. The value lands in the token itself — the vault's NAV picks it up automatically.
It's an Ethereum L2 built for tokenized RWAs — 96 tokenized US equities and ETFs with per-asset Chainlink feeds, cheap gas, and FCFS sequencing (no MEV tip racing). The rails for this product already exist.
The protocol owner (deployer) sets the global rules; each vault owner controls their own operator key, pause switch, and drawdown baseline. Rule changes are public onchain events.
Deploy a vault, wire in an operator key, and let your strategy trade tokenized equities — with the guardrails already in place onchain.