The Financial Firewall
for Autonomous AI
Programmable capital boundaries and real-time risk containment for autonomous AI agents. Real-time USD limits via FTSOv2, milestone verification via FDC, and 1-Tx emergency quarantine.
Master Mandate Vault
$65,000
FXRP · Active on Coston2
$50 / call · $500 / day
Child mandate bounded — cannot spend outside assigned allocation.
The Containment Pipeline
Vault → Mandate Tree → Policy Engine → Escrow → FDC
ERC-8183 ESCROW
Job-locked capital released only upon verified milestone delivery.
FDC VERIFIED
External state & XRPL/EVM payments verified trustlessly on Flare.
THE RISK VECTOR
AI agents can execute financial transactions.
They were never designed to hold unrestricted private keys.
Modern autonomous swarms monitor oracles, rebalance liquidity, trade perpetuals, and commission sub-agents. Giving them raw private keys turns single prompt injections or hallucinations into instant treasury drains. KYA places an inviolable mathematical policy barrier between agent intelligence and treasury execution.
UNBOUNDED EXPOSURE
RECURSIVE DELEGATION
COUNTERPARTY RISK
KYA transforms unrestricted AI wallets into mathematically contained economic actors.
Every autonomous agent operates with explicit, USD-denominated spending limits, isolated sub-allocations, and proof-gated settlement. Nothing more.
NATIVE FLARE ENFORCEMENT
Capital, Policies, and Settlement in One Integrated Layer.
KYA combines programmable mandate trees with Flare's native data primitives so autonomous agents can operate against real capital without financial catastrophe.
Every agent and sub-agent operates within a strictly isolated branch of a capital DAG. Funds are partitioned cryptographically: idle + childGranted + jobLocked = totalGranted.
Never set static crypto limits that break during market volatility. FTSOv2 supplies sub-second onchain feeds to enforce limits in human-readable USD terms across FXRP, FLR, and stablecoins.
Agents hire other agents safely. Capital enters a rigorous state machine: FUNDED → LOCKED → EVALUATED → SETTLED. Funds never leave escrow unless explicit execution parameters are satisfied.
Flare Data Connector cryptographically verifies external offchain events, Web2 API receipts, XRPL payments, and foreign EVM transactions before releasing escrowed agent capital.
PROTOCOL ARCHITECTURE
Five cryptographic layers between the agent and the treasury.
KYA separates autonomous reasoning, authorization, capital custody, external verification, and settlement into an explicit, modular onchain stack.
MANDATE TREE (CAPITAL ISOLATION)
Mathematical DAG Accounting & Subtree Containment
Manages hierarchical capital boundaries. Every child agent inherits strict spending ceilings from its parent. If a child agent is compromised, a 1-Tx emergency quarantine severs the sub-branch instantly without halting the protocol.
POLICY ENGINE (REAL-TIME USD LIMITS)
Sub-Second FTSOv2 Price-Gated Enforcement
Enforces per-call caps, 24-hour rolling velocity limits, target contract whitelists, and expiry timestamps denominated in USD via Flare’s sub-second FTSOv2 oracle feeds.
CONDITIONAL ESCROW (ERC-8183 RAILS)
Autonomous Job Payout State Machine
Standardizes agent-to-agent hiring. Escrows capital in job contracts that transition strictly through verifiable execution phases: FUNDED → LOCKED → EVALUATED → SETTLED.
FDC VERIFICATION (DATA CONNECTOR PROOFS)
Cross-Chain & Web2 Attestation
Verifies external deliverables—including XRPL payments, BTC/DOGE state, and Web2 JSON attestations—directly through Flare Data Connector consensus before unlocking funds.
AGENT IDENTITY & MACHINE CREDENTIALS
Portable Policy State & Authority Certificates
Binds agent operator keys, execution mandates, historical compliance scores, and permission scopes into an onchain, machine-readable credential. Any counterparty agent can verify spending caps and authorization before transacting.
The AI agent decides what to do.
KYA and Flare enforce what the agent is allowed to do.
DEVELOPER & AGENT FRAMEWORKS
Give your AI agents an onchain execution boundary in 3 lines of code.
Seamlessly integrate KYA into ElizaOS, Coinbase AgentKit, LangChain, Autonolas, or custom Python/TypeScript agent swarms via our lightweight SDK and native Model Context Protocol (MCP) server.
import { KyaClient } from "@kya-network/sdk";
// Initialize client on Flare Coston2 / Flare Mainnet
const kya = new KyaClient({
chain: "coston2",
operatorKey: process.env.OPERATOR_PRIVATE_KEY!,
});
// Create a mathematically bounded mandate for an autonomous trading agent
const { agentId, mandateAddress } = await kya.createMandate({
name: "FAssets-Rebalance-Agent",
vaultAsset: "FXRP",
maxSpendPerCallUSD: 50, // Enforced in real-time via FTSOv2
maxSpendPerDayUSD: 500, // Rolling 24-hour rate limit
targetAllowlist: ["0x7c6aa54Eaeea04Cf8950b1451faF0B21CB6037c2"],
expiryHours: 72,
allowSubDelegation: true, // Can spawn child workers up to $100 cap
});
console.log(`Agent ${agentId} bound to Mandate ${mandateAddress}`);Framework Agnostic
Drop-in support for LangChain, CrewAI, AutoGen, Coinbase AgentKit, and ElizaOS.
Model Context Protocol (MCP)
Connect Claude Desktop or Cursor directly to KYA tools (kya_allocate_mandate, kya_check_policy, kya_settle_escrow).
100% Non-Custodial
Master keys and withdrawal controls always remain with the human treasury operator.