Trust, before you pay.

No to all three. There is no endpoint that accepts your brokerage credentials: we never hold a key, never move a dollar, and never place the order. Your agent asks whether an action is inside the limits you set, we answer allow, ask a human or no, and the account stays exactly where it was. Account state arrives with the question and is never stored. The decision log keeps a hash of it instead, so a refusal stays auditable and your positions stay yours.

No, because the limits are not a prompt: they are checked outside the model, on every path that moves money rather than only on orders. A recurring buy, an account setting, money wired out, a cancelled protective position: that last one is where naive guardrails leak, because an agent blocked from buying can simply schedule the buy instead. A refusal cannot be overwritten, and attempts to overwrite one are counted rather than quietly rejected.

Nothing of ours can break a trade, because we are not in the execution path. When our own package cannot get a verdict it refuses to act rather than guessing, which is the safe direction to fail in. You do not have to take our word for whether the engine is up: this endpoint runs the real engine on request and answers 503 if it is not enforcing, and a monitor checks it every hour.

Live, on brokerage trading and card spending. Here is the part most products would hide: the public counters read zero, because the engine is enforcing but no live agent has produced a decision yet, and we would rather show a zero you can verify on the public endpoint than a number you cannot reproduce. Two honest limits: on a card we can refuse a charge before it happens but we cannot stop an agent that already holds the card number, and prediction markets are designed and deliberately not built.

Six networks accept real payments today, led by Arc Mainnet, the newest: live since the day it opened, where an agent pays in USDC, the gas is USDC too, and Circle Gateway nanopayments make a check gasless on both sides. Then Stellar and Algorand, where the buyer also pays no fee; Robinhood Chain and Celo; and Base, where only Circle Gateway nanopayments sell now and its proof page still labels that rail unproven. Arbitrum One and OKX X Layer are live too, with real payments on record, but nothing of ours sells there now: our rail on Arbitrum One has been paused since 2026-11-11, and OKX.AI delisted the X Layer listing on 2026-09-26. Testnet mirrors rehearse every change first. Every chain publishes a proof page with real transactions (/proof/arc is the newest), and a chain is only called live here after a real payment has been recorded on it.