Mandate: approve intent, not just transactions

Transaction intelligence and control layer for autonomous agents. Mandate checks why an agent wants to send money before the wallet signs. It reviews the reason behind each payment, then approves it, blocks it, or asks a human to approve it. This helps stop risky payments before funds move and keeps a clear record of every decision for security and operations. Why it matters: Better payment decisions. Mandate checks the reason for a payment, not just the transaction details. Stops risky payments early. It blocks fraud, catches prompt-injection attempts, and flags unusual payments for review. Keeps a full decision record. Every payment is logged with the amount, timing, and reason behind it. MANDATE.md is a plain-language policy file for your agent wallet. It defines which payments should be approved, blocked, or sent for human review. Every transaction is checked against that policy before execution. Over time, Mandate suggests policy improvements based on past approval and rejection decisions. AI agents already think before every action. Mandate captures that thinking and turns it into a security signal. Session keys see {to, value, calldata}. Mandate sees the reasoning: the attack surface nobody else is watching. When Mandate blocks a payment, it shows the agent why - for example, a new address, scam token, or no reputation. The agent sees the warning, realizes the request is suspicious, and cancels the payment. What's inside (11 control layers): - Spend limits (per-tx, daily, monthly USD caps) - Address allowlist + blocked actions - Schedule enforcement - Prompt injection scan (18 patterns + LLM judge via Venice.ai, zero data retention) - MANDATE.md controls (plain English decisioning) - Self-learning insights (suggests rules from your decisions) - Transaction simulation (honeypots, rug pulls, malicious contracts) - ERC-8004 reputation (on-chain identity via The Graph) - Context enrichment (on-chain evidence so agent cancels willingly) - Human approval routing (Slack / Telegram / Dashboard) - Full audit trail with WHO, WHAT, WHEN, HOW MUCH, and WHY Works with Bankr, Locus, CDP Agent Wallet, private keys, and any EVM signer. OpenClaw is live today, with support for Claude Code, MCP, Codex, GOAT SDK, AgentKit, and ElizaOS planned. Chains: Ethereum, Base (mainnet + testnet), Solana, TON, BNB (planned). Privacy: LLM reasoning routed through Venice.ai with zero data retention. 304 tests passing. Live at https://app.mandate.md