One vote
A DAO approves a plain-English mandate (token, budget, price floor, window, payouts) with a 2-of-3 council vote. Not a hundred trades; one decision.
Verifiable on NEAR testnetVote once.
Vote once.
The agent does the rest.
A DAO approves one plain-English mandate: what to sell, how much, at what minimum price. A bounded agent carries it out in price-floored chunks, pays contributors, returns what is left, and anchors a report that anyone can recompute.
Everything on this site ran on public NEAR testnet with play money; no mainnet funds were moved. What is proven and what is not is listed on every page that makes a claim.…NEAR sold
How it works
Three steps, and every one of them leaves a transaction you can open.
A bounded agent runs it
It sells in price-floored chunks from an OutLayer wallet, pays contributors and returns the leftovers. A DAO cancel stops it at any moment.
Anyone verifies
The settlement report hash is anchored on-chain. Your browser can re-derive every chunk, sum and price floor from public RPC.
Three layers, and what each one does not stop
A stolen key, a hostile operator or a confused model each hit a different wall. We say which, and where the walls end.
Layer 0: the protocol
The agent signs with a NEAR function-call key limited to five methods on the mandate contract, with no deposit. The network itself refuses anything else.
Recorded: … probes of that key were refused by the protocol.
Layer A: the wallet policy
An OutLayer agent wallet holds the budget; the worker writes a per-mandate policy (allowed contracts, native limits, rate limits) before the first trade.
Limit: this policy does not check token recipients or amounts (we probed it). Layer B covers them.
Layer B: contract and executor
The mandate contract enforces roles, window, chunk order and budget. The executor enforces the price floor, the token and the destination, in deterministic code.
Limit: the contract is a registry, not an escrow: it holds no funds. The AI drafts and summarises; it never signs or decides an amount.
Proof, read from the runs
Every number below comes from a recorded run on public NEAR testnet, with an explorer link on each row of its page. No mainnet funds were moved.
Custody run checks passedrecorded
…
Real swaps signed by the OutLayer walletrecorded
…
Red-team attacks blockedrecorded
…
Protocol refusals of the scoped agent keyrecorded
…
Crash-restart checks passedrecorded
…
See the custody run · Try an attack · Verify a run · Recompute one in your browser · Look up your payouts · Sealed mandatesrecorded
Don’t trust us. Check.
Pick a recorded run and your browser re-reads the mandate from the contract and every chunk from public NEAR RPC, then recomputes the hashes, sums and price floors itself. No worker, no database, nothing of ours in the path.
Treasury overview
The live view behind the story above: what is real on the public NEAR testnet, what the DAO and the agent hold right now, and every mandate. The confidential, mainnet-only parts are marked as not proven.
What is real here
REAL on public NEAR testnet
- Sputnik DAO proposals and 2-of-3 council votes, including the funding transfer and the cancel
- Swaps on Ref Finance testnet (every swap has a transaction hash)
- Payouts, fee and returns of real testnet tokens to named accounts
- Mandate contract state and the report hash anchored on-chain
- NEAR AI Cloud (TEE) parsing and summary, signed and attested
- OutLayer agent wallet (testnet) holding the budget and signing the swaps under a per-mandate policy (Layer A)
- A function-call-scoped agent key: the NEAR protocol refuses anything outside 5 methods (Layer 0)
- Anyone can recompute a run from chain data in their own browser (Recompute page)
NOT proven (mainnet-only)
- Confidential swaps and hidden trades (NEAR Intents has no testnet)
- OutLayer custody on mainnet (everything here ran on OutLayer's testnet service)
- Cross-chain payouts (Solana, Base) through Intents
- The DAO funding the agent's Intents balance
Testnet tokens have no value. Not investment advice.
Connection
| Worker API | none: hosted demo (run locally for the worker) |
| DAO account | quietdao-83872.sputnikv2.testnetsputnik dao |
| Mandate contract | qtmandate2-83872.testnetcontract |
| Agent wallet | qtagent-68669.testnetagent |
| Network | testnet |
Agent balances
Loading balances…
Mandates
Loading mandates…
Approval tiers design
| small | 1 treasurer approval (trusted treasurer, low budget) |
| mid | council majority |
| large | full DAO vote |
DAO policy
Loading DAO policy…