Leash Agent

The agent only proposes and signs orders; the right to write to the exchange sits with Leash Agent, not the agent. Each order passes an identity and EIP-712 signature check, deterministic risk rules from the user's policy on Avalanche, and a prompt injection auditor. Only an approved order gets a single-use authorisation, and a separate executor sends it to the exchange exactly once.

Orders over the limit go to a human. Every decision is written to a hash-chained log and to the DecisionLog contract on Avalanche Fuji; agents buy service credit over x402 and publish their identity with ERC-8004.