detent
tour 1 of 5 · proves ENFORCE

Policy playground

Write three rules in plain language, watch each compile, fire a demo agent action at the real engine. Seven checks, deny wins, no model in the path. Change one number and watch ALLOW become DENY, then verify the receipt without us.

rules REALverdict REALreceipt REALagent DEMOon-chain lock DEMO
the rules · plain language on top, machine rule under
REAL
Never pay more than USDC in one transfer.
mandate.max_amount = "500"
mandate.asset = "USDC"
check 02 · mandate scope. above the cap is a DENY; within 20% of it is a STEP-UP.
Only pay addresses on my allowlist. 
mandate.destinations = ["merchant"]
check 02 · mandate scope. a destination not on the signed list is a DENY however small the amount.
At most payments per hour.
velocity.maxRequests = 20
velocity.windowMs = 3600000
check 03 · velocity. the window is per agent and rolls; zero is the kill switch.

The rules are signed into a mandate by the issuer key, not by you. A cap you write is a cap the agent is held to; editing the mandate afterwards breaks the signature.

fire an agent action
agent DEMO verdict REAL
payee
0x7a1f4e0c2d9b8a7f6e5d4c3b2a1908f7e6d5c4b3
the seven checks

the checks stream in here, top to bottom, the moment you fire

03

Try to bypass the checker

Two locks, not one. Skip our checker and the chain itself refuses. The same transfer, submitted straight to the smart account without a receipt, reverts on Base Sepolia.

DEMOcoming with the on-chain lock

This button will submit the transfer above directly to the smart account with no receipt in the signature field. The ERC-7579 validator reverts and the revert is shown here with its Basescan link.

The ERC-7579 validator ships in build stage 4 (EntryPoint v0.7 on Base Sepolia). Until it is deployed this beat stays a designed placeholder rather than a staged revert, because a fake Basescan link would be worse than none.

What is real todayREAL
  • the verdict above, from the live engine
  • the signed receipt and its offline check
  • the registry flag on check 04
  • the on-chain revert, coming with the lock
the aha: I changed one number, the machine refused, and it handed me signed proof.
HomeNext · Six attack replays