Dual-agent Β· RAG-grounded Β· Gate before broadcast

πŸ›‘οΈ AegisAgent

Translates natural-language Web3 intents into EVM calldata, retrieves verified ABIs and security invariants via vector search, then adversarially audits every field before simulation or testnet dispatch. The planner is treated as hostile until proven otherwise.

Gemini Flash Β· Planner Chroma RAG Β· ABIs Gemini Pro Β· Gatekeeper WDK Β· Agent wallet gate
Checking API…

Architecture

Three isolated stages run sequentially. Only an APPROVED audit unlocks execution. Rejected proposals never reach the chain.

1

Execution Agent

Gemini 3.6 Flash

NL intent β†’ structured TransactionProposal: contract, function, args, calldata, gas.

2

RAG + Paranoid Gatekeeper

Chroma + Gemini 3.1 Pro

Retrieves ERC-20 / Uniswap / Aave ABIs and invariants. Cross-checks every planner field; rejects hallucinations and drains.

3

WDK + Web3 Executor

@tetherto/wdk Β· policy gate

Approved calldata exported for WDK sendTransaction. Policy hook blocks sign unless gatekeeper APPROVED token matches.

User Intent
    β”‚
    β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚  Execution Agent    β”‚  Gemini Flash β†’ TransactionProposal
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
          β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚  Vector Store / RAG β”‚  ChromaDB Β· ABIs + invariants
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
          β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚  Paranoid Gatekeeperβ”‚  Gemini Pro β†’ APPROVED | REJECTED
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
          β”‚ APPROVED only
          β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚  Web3 Executor      β”‚  simulate β†’ optional broadcast
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

Capabilities

🧠 Structured planning

Gemini emits typed JSON proposals β€” not raw hex β€” so the auditor can reason over function names, args, and attached ETH value.

πŸ“š Grounded RAG

Chroma retrieves verified ABI fragments and invariants (zero-address, slippage bounds, method-signature rules) injected into the gatekeeper prompt.

πŸ”’ Adversarial audit

Pro gatekeeper assumes prompt injection and planner hallucination. Cites grounded facts; prefers REJECTED when uncertain.

⛓️ Safe dispatch

Blocked txs never broadcast. Approved paths run simulation first; mock or live tx hash returned for observability.

Security checks

Live demo

Pick a scenario below. Each exercises a different failure mode or happy path through the full pipeline.

Advanced options

β‘  Execution Agent

Gemini Flash Β· structured calldata planner

Run a demo to see the planner output…

β‘‘ Paranoid Gatekeeper

Gemini 3.1 Pro Β· RAG-grounded adversarial audit

Audit verdict and grounded facts appear here…

β‘’ Dispatch

Simulation Β· mock or testnet tx hash

Execution result after approval…