Brief · proof

Verify everything.
Trust nothing.

Every claim here is a live on-chain artifact. Each link opens Suiscan or Walrus · check it yourself.

operator0xb37f42d3…28115b
The Kill-Switch Test

The agent tried to act. The chain rejected it.
Funds stayed safe.

The owner revoked the operator in one transaction. The agent then re-attempted the exact order that had filled before — and the protocol aborted it. No backend call stopped the trade. The chain did.

  1. 01 · Owner pulls the leash

    One on-chain transaction sets revoked = true. The operator can never trade again.

    Revoke tx

  2. 02 · The next trade aborts on-chain

    record_spend aborted in assert_can_spend (abort code 3 · EPolicyRevoked). The order never reached DeepBook; no funds moved.

    Refused tx

  3. ✓ Outcome · capital protected

    Enforcement is protocol-level, not a backend promise.

Reading the chain…