Stashway
Stashway
AI can manage your money — Stashway puts it on a leash so the agent can’t drain you.
Give an AI a wallet key and it can move funds forever. Prompt injection, bad tools, or a compromised agent shouldn’t empty your savings. Stashway keeps the money in a vault the agent can use — but never own.
Caps, allowlist, and freeze live on NEAR. The owner sets the rules; the agent never holds a master key.
Every transfer is scored ALLOW / WARN / BLOCK with evidence. New receivers need your OK.
Only a Guard-signed permit unlocks agent_transfer. Tamper, replay, or skip it — the chain refuses.
Jailbreak text can’t mint a permit. No permit → on-chain reject.
Changing the receiver after signing fails signature check.
Used nonces are dead. Same permit twice doesn’t pay twice.
WARN → you confirm before funds move. Trust is earned.
Five recorded scenarios judges can replay — plus Try with your own agent.
No. Guard is deterministic signals + your policy. AI can propose; the leash decides.
A function-call key limited to agent_transfer — not full access to the vault.
Deletes the agent key on-chain and freezes transfers so nothing else can leave.
NEAR testnet for the hackathon. Same leash design ports to mainnet later.