Built on Flare EVM • Oracle-Enforced Capital Governance

The Financial Firewall for Autonomous AI

Programmable capital boundaries and real-time risk containment for autonomous AI agents. Real-time USD limits via FTSOv2, milestone verification via FDC, and 1-Tx emergency quarantine.

Agent Security Console · Live Simulator
● FTSO USD POLICIES ACTIVE

Master Mandate Vault

$65,000

FXRP · Active on Coston2

FAssets Sentinel Agent (Parent)ACTIVE

$50 / call · $500 / day

FTSOv2 USD BOUNDEDINVARIANT: GREEN
Cross-Chain Arb Worker (Sub-Agent)ALLOCATED $5,000

Child mandate bounded — cannot spend outside assigned allocation.

The Containment Pipeline

Vault → Mandate Tree → Policy Engine → Escrow → FDC

ERC-8183 ESCROW

Job-locked capital released only upon verified milestone delivery.

FDC VERIFIED

External state & XRPL/EVM payments verified trustlessly on Flare.

THE RISK VECTOR

AI agents can execute financial transactions.
They were never designed to hold unrestricted private keys.

Modern autonomous swarms monitor oracles, rebalance liquidity, trade perpetuals, and commission sub-agents. Giving them raw private keys turns single prompt injections or hallucinations into instant treasury drains. KYA places an inviolable mathematical policy barrier between agent intelligence and treasury execution.

UNBOUNDED EXPOSURE

The Hot-Key Trap
Agents with raw private keys hold unconstrained wallet access. A single prompt injection, poisoned dependency, or model hallucination drains the entire treasury in one transaction.

RECURSIVE DELEGATION

Swarm Cascading Risk
Multi-agent swarms spawn child sub-agents dynamically. Without strict DAG boundaries, a hallucinating worker recursively drains balances reserved for other protocol operations.

COUNTERPARTY RISK

Unverified Settlement
Paying agents upfront risks default; paying post-facto triggers disputes. Capital must remain in conditional escrow and unlock strictly upon cryptographic proof of milestone delivery.

KYA transforms unrestricted AI wallets into mathematically contained economic actors.

Every autonomous agent operates with explicit, USD-denominated spending limits, isolated sub-allocations, and proof-gated settlement. Nothing more.

NATIVE FLARE ENFORCEMENT

Capital, Policies, and Settlement in One Integrated Layer.

KYA combines programmable mandate trees with Flare's native data primitives so autonomous agents can operate against real capital without financial catastrophe.

Bounded Capital Isolation (Mandate Tree)

Every agent and sub-agent operates within a strictly isolated branch of a capital DAG. Funds are partitioned cryptographically: idle + childGranted + jobLocked = totalGranted.

Mathematical Invariant: Zero cross-agent capital leakage
FTSOv2 USD-Denominated Policy Engine

Never set static crypto limits that break during market volatility. FTSOv2 supplies sub-second onchain feeds to enforce limits in human-readable USD terms across FXRP, FLR, and stablecoins.

Max Spend / Call: $50 USD · 24h Rolling Window: $500 USD
ERC-8183 Conditional Escrow

Agents hire other agents safely. Capital enters a rigorous state machine: FUNDED → LOCKED → EVALUATED → SETTLED. Funds never leave escrow unless explicit execution parameters are satisfied.

Trustless Payment Rails for Agent-to-Agent Commerce
FDC Proof-Gated Settlement

Flare Data Connector cryptographically verifies external offchain events, Web2 API receipts, XRPL payments, and foreign EVM transactions before releasing escrowed agent capital.

XRPL Payment · Web2 API Proof · EVM Finality Verification

PROTOCOL ARCHITECTURE

Five cryptographic layers between the agent and the treasury.

KYA separates autonomous reasoning, authorization, capital custody, external verification, and settlement into an explicit, modular onchain stack.

L0DAG Isolation · O(1) Revoke

MANDATE TREE (CAPITAL ISOLATION)

Mathematical DAG Accounting & Subtree Containment

Manages hierarchical capital boundaries. Every child agent inherits strict spending ceilings from its parent. If a child agent is compromised, a 1-Tx emergency quarantine severs the sub-branch instantly without halting the protocol.

ROOTSUB-AREVOKED1-Tx CUT
idle + childGranted = grantedInvariant: Preserved
L1FTSOv2 ~1.8s Feed · USD Velocity

POLICY ENGINE (REAL-TIME USD LIMITS)

Sub-Second FTSOv2 Price-Gated Enforcement

Enforces per-call caps, 24-hour rolling velocity limits, target contract whitelists, and expiry timestamps denominated in USD via Flare’s sub-second FTSOv2 oracle feeds.

MAX USD CAP: $50$34.20 ALLOWEDTARGET WHITELIST
Feed: FLR / FXRP / USD● Sub-Second Enforced
L2ERC-8183 Rails · Atomic Escrow

CONDITIONAL ESCROW (ERC-8183 RAILS)

Autonomous Job Payout State Machine

Standardizes agent-to-agent hiring. Escrows capital in job contracts that transition strictly through verifiable execution phases: FUNDED → LOCKED → EVALUATED → SETTLED.

FUNDEDLOCKEDVERIFIEDSETTLEDJOB ESCROW
Standard: ERC-8183 CoreZero Counterparty Risk
L3Consensus Attestation · Merkle Proofs

FDC VERIFICATION (DATA CONNECTOR PROOFS)

Cross-Chain & Web2 Attestation

Verifies external deliverables—including XRPL payments, BTC/DOGE state, and Web2 JSON attestations—directly through Flare Data Connector consensus before unlocking funds.

XRPLEVM TxWeb2 APIFDCPROOF✓
Consensus: 100+ Flare ValidatorsCryptographic Finality
L4ERC-8004 / ERC-5192 Soulbound

AGENT IDENTITY & MACHINE CREDENTIALS

Portable Policy State & Authority Certificates

Binds agent operator keys, execution mandates, historical compliance scores, and permission scopes into an onchain, machine-readable credential. Any counterparty agent can verify spending caps and authorization before transacting.

Operator Key Binding Exportable Audit Proofs ERC-8004 Schema
✺
ERC-8004 Machine Certificate
COMPLIANT
Agent ID:kya-coston2-8183
Operator:0x9f18...5f1
USD Policy:$500/day · FTSOv2
Invariant Check:Passed (isConserved: true)
Soulbound Token #114Flare Coston2

The AI agent decides what to do.

KYA and Flare enforce what the agent is allowed to do.

DEVELOPER & AGENT FRAMEWORKS

Give your AI agents an onchain execution boundary in 3 lines of code.

Seamlessly integrate KYA into ElizaOS, Coinbase AgentKit, LangChain, Autonolas, or custom Python/TypeScript agent swarms via our lightweight SDK and native Model Context Protocol (MCP) server.

kya-agent-setup.ts
@kya-network/sdk · Coston2 & Mainnet
import { KyaClient } from "@kya-network/sdk";

// Initialize client on Flare Coston2 / Flare Mainnet
const kya = new KyaClient({
  chain: "coston2",
  operatorKey: process.env.OPERATOR_PRIVATE_KEY!,
});

// Create a mathematically bounded mandate for an autonomous trading agent
const { agentId, mandateAddress } = await kya.createMandate({
  name: "FAssets-Rebalance-Agent",
  vaultAsset: "FXRP",
  maxSpendPerCallUSD: 50,       // Enforced in real-time via FTSOv2
  maxSpendPerDayUSD: 500,       // Rolling 24-hour rate limit
  targetAllowlist: ["0x7c6aa54Eaeea04Cf8950b1451faF0B21CB6037c2"],
  expiryHours: 72,
  allowSubDelegation: true,     // Can spawn child workers up to $100 cap
});

console.log(`Agent ${agentId} bound to Mandate ${mandateAddress}`);
Define the policy once. Enforced onchain via Flare FTSOv2 & FDC.
$pnpm add @kya-network/sdk

Framework Agnostic

Drop-in support for LangChain, CrewAI, AutoGen, Coinbase AgentKit, and ElizaOS.

Model Context Protocol (MCP)

Connect Claude Desktop or Cursor directly to KYA tools (kya_allocate_mandate, kya_check_policy, kya_settle_escrow).

100% Non-Custodial

Master keys and withdrawal controls always remain with the human treasury operator.