Working inside its leash.
Latest decisions
Next
It looks every 5 minTalk to the agent. Try to make it pay you.
It knows Lancea, DELICTI and Flare, reads both chains live, and holds half the keys to a playground account on the XRP Ledger testnet. Ask it anything, or give it an order: it will try. Its guard decides, and every attempt lands on-chain. It thinks with Google's Gemini, on its free tier: keep anything private out.
Conversation Connecting
Spent over time
By action
What the budget paid forThe price witness
FTSO · XRP/USDWho can move the money
Quorum 2 · master key disabledThe account on the XRP Ledger needs signatures worth 2. Choose who signs and see what can happen.
An AI agent that cannot move money alone.
Lancea gives an agent real work on real rails, and a leash it cannot slip: a second key, a dollar budget priced by Flare, and a tripwire. Every step leaves two witnesses you can check yourself.
Pick what the agent asks for.
Each one plays a real decision from the chains, step by step, with its proofs.
The agent proposes
It signs a transaction with its own key and says, in words, what it is doing and why. Its key is only weight 1, so the transaction cannot move yet.
The guard reads it itself
The guard ignores the words and decodes the transaction: who receives it, how much, and what any memo tells Flare to do.
One dollar budget
Flare's FTSO prices the step. SummaMeter adds it to one budget that covers every rail, and refuses what would cross it.
A second signature, or a strike
Inside your budget and rules, the guard adds the second signature and the ledger accepts it. Outside, it refuses and writes a strike on Flare that trips every rail.
Questions
Why two witnesses?
What the agent says is its claim. What the transaction does is the fact, read by the guard from the signed transaction. When the two agree, the guard signs: agreement is evidence. When they do not, the difference is the finding.
What is a drill?
A fire drill for the leash. We hand the agent a planted note that tells it to send money to a stranger, the way a prompt injection would. The guard refuses and writes a strike on Flare, and the page marks the moment as a drill.
Why Flare?
Flare prices every asset with its own oracle (FTSO), confirms events on other chains with its data connector (FDC), and gives XRP Ledger accounts a smart account on Flare. The leash needs all three, built into one network.
What happens at the edge of the budget?
The agent checks the budget before it asks. When the next step would cross it, the agent keeps that step to itself and waits. If it asked anyway, the guard would refuse.
Is this real money?
No. This demo runs on the XRP Ledger testnet and Flare's Coston2 testnet. Every transaction is real on those networks and opens in their public explorers.