On-chain enforcement

Per-tx, daily, and hourly limits live on the AgentWallet PDA and are enforced inside the Anchor program. No backend can override them.

TTL-bound recipient whitelist

External recipients carry a TTL and an approved-amount cap. The WhitelistEntry PDA auto-closes on-chain when the cap is consumed.

No private key for the agent

Agents authenticate with a scoped API key. Limits hold even if the backend is breached, the agent is prompt-injected, or the API key is leaked.