Signed by agents.
Ruled by you.

Mandate is a smart account on Robinhood Chain that your AI agent trades in. Every intent it signs crosses your mandate (max trade, daily turnover, drawdown, slippage) before a relayer puts it on chain. Nothing outside your rules gets there.

Create your account

// EIP-712 · Mandate v1 · chainId 4663
Intent {
  account:        0x7a3f…c6d4
  nonce:          41
  tokenIn:        0x5fc5…d168  USDG
  tokenOut:       0xd060…9EEC  NVDA
  amountIn:       50000000
  minAmountOut:   266812000000000000
  path:           [USDG/NVDA · 0.30%]
  deadline:       1761757200
  relayerFeeUsdg: 20000
}
sig 0x4be1d0…9c3a1b · 65 bytes

// signer = session operator ✓
// max trade   50 ≤ 100 ✓
// 24 h      438 ≤ 1,000 ✓
// slippage  31 ≤ 50 bps ✓
// fee      0.02 ≤ 0.10 ✓
// → relayer · on chain

// EIP-712 · Mandate v1 · chainId 4663
Intent {
  account:        0x7a3f…c6d4
  nonce:          42
  tokenIn:        0x322F…3b2d  TSLA
  tokenOut:       0x5fc5…d168  USDG
  amountIn:       190000000000000000
  minAmountOut:   81988000
  path:           [TSLA/USDG · 0.30%]
  deadline:       1761757800
  relayerFeeUsdg: 20000
}
sig 0x91ac7e…02f4d8 · 65 bytes

// signer = session operator ✓
// max trade 82.4 ≤ 100 ✓
// 24 h      520 ≤ 1,000 ✓
// drawdown 2.1% ≤ 10% ✓
// slippage  12 ≤ 50 bps ✓
// → relayer · on chain

// EIP-712 · Mandate v1 · Launch
Launch {
  account:     0x7a3f…c6d4
  nonce:       43
  paramsHash:      0x3f0e…a71c  // "Halo", HALO
  devBuyQuoteIn:   25000000
  devBuyMinTokens: 31250000000000000000000000
  devBuyCliff:     0
  devBuyDuration:  2592000
  deadline:        1761758400
}
sig 0x7d02b1…e81c55 · 65 bytes

// signer = session operator ✓
// launch budget 25 ≤ 100 ✓
// dev buy vests 30 days
// relayer sponsors gas
// → MandateLaunchpad

// HTTP 402 → x402 · mandate-account
AiPayment {
  account:    0x7a3f…c6d4
  payee:      0xA1e7…40b2  Mandate AI
  amountUsdg: 400000
  requestId:  0x5c1b…77e0
  deadline:   1761757500
}
sig 0x0c66fa…1b9e07 · 65 bytes

// signer = session operator ✓
// AI budget 1.60 ≤ 5.00 ✓
// payAi() → gateway
// → 200 OK, answer streamed

// EIP-712 · Mandate v1 · chainId 4663
Intent {
  account:        0x7a3f…c6d4
  nonce:          44
  tokenIn:        0x5fc5…d168  USDG
  tokenOut:       0x0Bd7…AD73  WETH
  amountIn:       250000000
  minAmountOut:   61250000000000000
  deadline:       1761758900
  relayerFeeUsdg: 20000
}
relayer: eth_call → revert

// signer = session operator ✓
// max trade  250 > 100 ✕
// MaxTradeExceeded()
// not sent · nothing spent

// EIP-712 · Mandate v1 · RouterIntent
RouterIntent {
  account:        0x7a3f…c6d4
  nonce:          45
  tokenIn:        0x0Bd7…AD73  WETH
  tokenOut:       0x5fc5…d168  USDG
  amountIn:       16000000000000000
  minAmountOut:   63885000
  route:          { hub: ETH, legIn, legOut }
  deadline:       1761759000
  relayerFeeUsdg: 20000
}
sig 0xe4f218…7a0c93 · 65 bytes

// signer = session operator ✓
// max trade   64 ≤ 100 ✓
// 24 h      584 ≤ 1,000 ✓
// slippage  18 ≤ 50 bps ✓
// → relayer · on chain

Atlas · session agent

EIP-712 signed

Buy NVDA

50.00 USDG

≈ 0.268 NVDA · slippage ≤ 0.5%

Relayer fee: 0.02 USDG
Deadline: 10 min

Atlas · session agent

Take profit

Sell TSLA

82.40 USDG

0.19 TSLA at the oracle price, −0.21%

Drawdown: 2.1% of 10%
Turnover: 520 / 1,000

Nova · launch agent

Launchpad

Launch $HALO

25.00 USDG dev buy

1,000,000,000 supply · bonding curve · fee lock

Launch budget: 75 / 100 USDG
Relayer: sponsored

Atlas · session agent

x402

Pay for research

0.40 USDG

“Summarise NVDA’s last earnings call and the options skew.”

AI budget: 1.60 / 5.00 today
Reply: HTTP 200

Atlas · session agent

Refused

Buy ETH

250.00 USDG

2.5× the max trade you set. Never reaches the chain.

Max trade: 100 USDG
Result: revert, no gas spent

Atlas · session agent

MandateRouter

Swap WETH → USDG

64.00 USDG

Quote: 64.12 USDG
Slippage: 18 bps

Connecting to Robinhood Chain…

From a signature to a block.

Your agent never holds your money. It signs an intent; the account checks it against your mandate; a relayer sends what passes and is paid in USDG. Move the amount past your max trade and watch the line refuse it.

Amount 50 USDGYour max trade is 100 USDG

Set an amount and press Sign and send.

Loosening waits 48 hours. Your Falcon key can stop it.

Tighter rules apply at once. Looser rules, big withdrawals and a new owner wait in a public queue, and a Falcon-512 key that only you hold can veto them, freeze the account or hand it to a new owner.

Timelock queue

Nothing waiting. Tightening a rule never waits.

Falcon-512 key, held only by you

Pretend your wallet was stolen. Queue the thief’s withdrawal.

Shield a note. Spend it without a trail.

Move USDG into a STARK private pool. Each note becomes a commitment in a Merkle tree; to take it out, your browser proves you own one without saying which.

On the public chain

Account 0x7a3f…c6d4

1,200 USDG

Shield moves USDG into the pool. Unshield proves you own a note without saying which.

What the chain shows

0xe647…1bf6 → pool40 USDG
0x97c5…bd73 → pool120 USDG
0x4942…6ef0 → pool75 USDG

Inside the pool

Merkle root 0xc6d9a466

42c1
41b7
4fae

3 notes in the pool. Shield one to hide among them.

Notes, hashes and addresses here are examples.

Everything an agent needs, inside the same rules.

Launch a coin with locked fees, swap through the router, pay an AI model per answer, get alerts before anything changes, or let us host the agent with a strategy only it can read.