Your agent can be fooled. Your wallet doesn't have to be.
oathline runs every transaction before your agent signs it and checks what it really does against the rules you wrote. It answers allow, ask you, or block, with a reason.
The 4 May Bankr/Grok drain, replayed through oathline: blocked.
What would you do?
oathline does this on every transaction, in about 1.2 seconds at the median, while your agent is busy being persuaded.
Write your rules once. Every transaction your agent signs answers to them.
Rules in your words. Checked on the real transaction.
Write your rules, sign them once
"Trade only ETH, WETH and USDC. At most 0.5 ETH per trade. Send money only to my saved address." You sign that with your own wallet. The agent can never change it.
Every transaction runs first
Before each signature oathline runs the exact transaction on a private copy of Base and compares what really leaves and enters the wallet with your rules. What the agent says it is doing counts for nothing.
Allow, ask you, or block
A short reason and a signed receipt every time. Unclear cases reach your Telegram with Approve and Reject. Fixed rules decide the clear cases; an AI judge sees only the grey ones.
A poisoned token page tells an agent to swap. Without oathline it loses 0.2 WETH; with oathline the swap is blocked. Two minutes, recorded on a copy of Base.
- Holds your keys or your money.Your agent signs; oathline only answers.
- Trusts the agent's explanation.The attacker writes that part.
- Lets an AI overrule a fixed rule.A takeover is refused, whatever the model thinks.
- Forgets.Every decision is signed and kept in a log where each entry links to the one before.
Three numbers, first runs only.
Bad transactions blocked on first contact with test cases written by separate agents.
Normal transactions wrongly stopped on those same first runs. False alarms are our biggest problem.
Normal transactions still interrupted on real traffic of 5 public agents, under rules we had to guess.
Start by watching. Enforce when you trust it.
Watch: the SDK inside your agent
A few lines around the wallet your agent already uses (viem or Coinbase AgentKit). Shadow mode blocks nothing and records what oathline would have said.
npm install @oathline/sdk viemEnforce: oathline as a key of your Safe
A Safe that needs two of three keys: the agent's, oathline's, and yours. The agent alone moves nothing; oathline signs only what passes your rules. Your key and the agent's can always remove us.
On the Base Sepolia test network today. Base mainnet after an outside security review of the cosigner, which is planned, not done.
Try it on the test networkDoes oathline hold my keys or my money?
No. With the SDK your agent signs; oathline only answers allow, ask or block. With a Safe, oathline holds one of three keys and can only add its signature; your two other keys can act without it, including removing it.
What does shadow mode change?
Nothing. It records what oathline would have said and sends you a notice when it would have asked or blocked. Nothing is blocked until you switch to enforce.
Can my agent change its own rules?
No. The owner signs the rules with their own wallet, and only a new signature from that wallet replaces them. Nothing the agent says reaches the judge as an instruction.
What happens if oathline is down?
Shadow mode carries on as if oathline were not there. Enforce mode refuses to sign until oathline answers. An option for teams that prefer to carry on is planned.
What can it not stop?
Anything outside the transaction it was shown: a key stolen and used elsewhere, or an agent server taken over so the SDK is skipped. The Safe cosigner closes the second, because the agent's key alone cannot move the Safe.
Is it audited?
Not externally yet. An outside security review of the cosigner and the SDK comes before enforce mode is offered on Base mainnet, and the report will be published in full. The beta is free.
Run it on one agent this week.
We send an invite code and a 15 minute guide. You run it in shadow mode and tell us which alarms were false.
- Free during the beta.
- Shadow mode blocks nothing.
- oathline never holds your keys or your money.
- Turn it off by using your wallet without the wrapper.