MandateGuard

Signed policy gate for agent execution

inspect / signed-mandate / verifier-receipt / execution-gate
Implementation

Control console

Next.js + TypeScript

Mandate SDK

EIP-191/EIP-712 ready

Verifier service

Policy evaluator

Execution gate

Solidity receipt guard

ApprovedRun #1swap@1

Agent action verification console

A control surface for turning autonomous actions into signed mandates, verifier receipts, and contract-gated execution.

Risk

18

Slippage

0.42%

Intent

verified

Mandate

verified

Signatures

verified

Verifier

verified

Receipt

verified

Gate

verified

Verifier

Policy checks

Waiting for verifier

The signed mandate is being evaluated by the API route.

Gate

Contract decision

Execution verified

Connect a wallet to sign the mandate.

Receipt

pending

Chain

Base 8453

Risk score threshold: 70

SDK

Reference implementation

const mandate = createMandate({
  primitive: "swap@1",
  intent,
  chainId: 8453,
  constraints: { maxSlippageBps: 100 }
});

const signed = await signMandateWithPrivateKeys({
  mandate,
  clientPrivateKey,
  serverPrivateKey
});

const receipt = await fetch("/api/verify", {
  method: "POST",
  body: JSON.stringify({ signedMandate: signed })
});

Payload

Mandate and receipt

{
  "status": "creating and signing mandate"
}

Trace

Execution timeline

00:00

Agent proposes action

Intent is normalized into a deterministic mandate body.

00:02

Mandate signatures collected

Client and server identities sign the same canonical payload.

00:03

Verifier evaluates policy

Scope, token risk, route, simulation, and deadline checks are scored.

00:04

Receipt reaches execution gate

The contract accepts approved receipts and rejects drift or high-risk actions.

Verifier latency

742 ms

p95 local run

Policy checks

12

scope, token, route

Signature path

2 of 2

client + server

Control plane

5 layers

UI to contract

Protocol overview

Signed permissions and policy receipts before any agent action reaches execution.

Wallet-signed mandates bind the agent to a specific action, chain, recipient, and deadline.

Verifier receipts create an auditable policy decision before execution is allowed.

Visible failure modes cover scope drift, token risk, and blocked execution.

The gate rejects bad signatures, stale receipts, hash mismatches, and replayed mandates.

System guarantees

SDK signs EIP-712 mandates and verifies recovered signers.
Verifier route returns signed policy receipts from real signatures.
Hardhat gate verifies approved receipts and blocks replays.
Source