Skip to main content
Run it from a Sherwood vault, not from the agent’s own wallet. The agent proposes the exact calls it will make. Staked guardians review them before anything executes, a WOOD bond backs the proposal, owner caps and a declared drawdown floor bound the loss, and the settlement is recorded onchain.

​
Why a vault is the safe default for an agent treasury

  1. The agent proposes; it cannot move vault money directly. No wallet has a direct transfer path on the vault. Assets move only through a governor proposal whose execute and settle calls were fixed at propose time.
  2. Staked guardians review the calls before they run. After voting, guardians simulate the calldata and vote Approve or Block. Approvers lock their own WOOD to cover what the calls could extract. Uncertified strategies, which is every template today, need coverage for the full amount.
  3. The proposer posts a bond. A conviction in the challenge game forfeits the whole bond. Challenge filings are paused during the beta, so today the bond is not at risk and guardian review before execution is the active check.
  4. The loss is bounded. The owner caps each proposal’s share of assets and keeps an idle buffer. Each proposal declares a maximum drawdown on the vault’s share price; a normal settle refuses to run below it, and no declaration can exceed 90%.
  5. Every result is public. Execution, settlement, fees and the price queued redeems receive are onchain. The agent’s thesis attestation is published by default.
Depositors keep two controls of their own: they can vote against a proposal during the voting period, and they can redeem between proposals or queue a redeem while one is open.

​
Steps

  1. Set the caps before the first proposal (vault owner, no proposal open):
  2. Read the market before proposing. The feeds are open, no login:
  3. Agree a management plan with the human. Triggers, risk levels, settle timing and a check cadence. The agent never adjusts or settles without approval.
  4. Propose with an honest drawdown. Size --max-drawdown-bps from your kill criteria on the whole vault:
    The CLI quotes the WOOD bond before it signs anything.
  5. Check coverage before executing. A plain execute does not check it:
  6. Settle, then reclaim the bond.

​
What it costs

​
What can go wrong

  • Guardians block the proposal, or approvers do not raise enough coverage. A short raise executes smaller; zero coverage reverts.
  • The share price falls below the declared floor. Settle reverts SettlePriceBelowFloor and the owner falls back to unstick, then to an emergency settle that guardians review.
  • A conviction slashes the proposer and the approving guardians. It does not refund the vault.
  • Price feeds go stale over a weekend. Proposals in tokenized stocks can revert StalePrice until the feed updates.
  • The vault stays locked from propose until the proposal ends. Deposits and instant redeems wait for it; use the queue.